Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cD2zSoneV5bKUBbxDZa5_MpzOwU.roa
File:                     cD2zSoneV5bKUBbxDZa5_MpzOwU.roa (raw, json)
Hash identifier:          7HvVSo3NpW93F/+Bzxf2QReKx/o3GIFmQRZzdeAyqh0=
Subject key identifier:   70:3D:B3:4A:89:DE:57:96:CA:50:16:F1:0D:96:B9:FC:CA:73:3B:05
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       019427489DFA185026EB055001DC950F2A25
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cD2zSoneV5bKUBbxDZa5_MpzOwU.roa
Signing time:             Thu 02 Jan 2025 13:50:57 +0000
ROA not before:           Thu 02 Jan 2025 13:50:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212508
IP address blocks:        152.89.254.0/24 maxlen: 24
                          152.89.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Mar 2025 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:9d:fa:18:50:26:eb:05:50:01:dc:95:0f:2a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  2 13:50:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=703db34a89de5796ca5016f10d96b9fcca733b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:ac:f7:31:26:6c:d9:1d:c2:62:2f:b6:76:
                    6c:13:f8:a7:e8:7b:26:92:70:20:03:30:49:67:20:
                    0e:4d:41:2c:45:32:9f:f0:99:ec:30:f7:d6:86:fb:
                    59:5f:dc:c3:da:e2:3d:f4:06:d9:da:60:f4:9e:7f:
                    f3:b7:f0:58:f4:1d:49:03:69:e9:33:03:30:90:a9:
                    5b:b0:62:f4:d2:4f:ba:b6:d3:2d:62:92:67:90:87:
                    21:bc:55:f8:3f:ea:da:34:46:6e:76:b5:e6:95:68:
                    4e:93:e2:e9:88:32:5b:72:e3:9c:dd:75:53:19:4b:
                    44:fe:0f:f0:a3:40:7b:82:cc:a3:aa:a9:7f:33:66:
                    d7:13:62:e2:f7:38:f2:64:5d:b1:0f:28:8a:06:17:
                    6f:75:ff:25:69:99:8e:91:71:80:0b:44:0e:59:0e:
                    cb:79:87:c4:5b:1c:ee:23:1c:28:a4:e1:52:f7:1a:
                    51:64:bf:9a:58:ce:5c:75:47:bc:40:5e:ea:09:97:
                    df:36:d1:0a:10:b6:fd:55:bf:30:74:f0:f7:06:46:
                    81:68:1d:76:6b:48:4c:d3:ea:1f:1e:c8:b1:a6:d4:
                    4c:87:ff:e5:fe:e7:ba:a5:d6:97:6f:cf:95:a9:5e:
                    0c:51:67:79:91:91:39:63:9c:47:69:bf:67:84:88:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3D:B3:4A:89:DE:57:96:CA:50:16:F1:0D:96:B9:FC:CA:73:3B:05
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cD2zSoneV5bKUBbxDZa5_MpzOwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.89.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:34:df:3e:2d:16:71:86:c8:e9:a8:82:7f:f1:f5:c8:a7:
         01:4c:6a:3b:8a:62:10:84:03:26:d6:4a:92:91:53:09:c0:eb:
         19:af:40:8a:e9:60:da:62:51:74:ce:9d:dc:ca:c1:be:fe:85:
         26:9c:ef:da:26:00:f2:18:05:e6:af:16:b8:86:91:8a:8e:fa:
         c2:65:b6:e8:79:e6:7e:fc:fa:b6:bb:02:dd:b7:0f:de:ed:85:
         f3:08:94:25:84:95:5d:91:0d:92:72:01:fe:dd:3e:af:99:1f:
         c3:33:b3:eb:28:09:97:e7:e9:9b:7d:ba:59:79:61:18:aa:76:
         16:34:27:81:74:14:22:87:25:fa:2d:30:69:7b:f6:bf:04:14:
         d3:fe:16:82:46:c2:61:21:ae:21:f5:a7:89:23:56:6f:49:5e:
         b0:5a:04:ad:be:2f:49:12:76:3c:a3:2d:6f:d1:50:f5:cc:3e:
         24:34:c0:4e:42:4c:52:68:7e:17:c2:0d:05:03:f5:3e:1a:17:
         b1:17:29:89:3e:fb:e6:06:8a:bf:43:91:6c:20:a5:a1:2a:b3:
         a3:cf:f5:1a:57:f3:24:c9:94:cc:53:ca:69:57:94:70:d9:29:
         c0:bb:ff:93:22:14:23:d5:e3:68:3f:5e:79:bd:c2:7f:c6:b5:
         5f:dc:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----