Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/N_qbC7wE8v10cQBd-BCKfXJYDsY.roa
File:                     N_qbC7wE8v10cQBd-BCKfXJYDsY.roa (raw, json)
Hash identifier:          kAq+Ocd9bV0EPFsU0xfuMYH3WkK3YRTZz8Y4gdRJNOg=
Subject key identifier:   37:FA:9B:0B:BC:04:F2:FD:74:71:00:5D:F8:10:8A:7D:72:58:0E:C6
Certificate issuer:       /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial:       018CCA2B8E9EC89BE9AF2C6A0252CAFA4709
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/N_qbC7wE8v10cQBd-BCKfXJYDsY.roa
Signing time:             Tue 02 Jan 2024 12:35:01 +0000
ROA not before:           Tue 02 Jan 2024 12:35:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205718
IP address blocks:        185.226.168.0/22 maxlen: 22
                          2a09:fbc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:8e:9e:c8:9b:e9:af:2c:6a:02:52:ca:fa:47:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
        Validity
            Not Before: Jan  2 12:35:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=37fa9b0bbc04f2fd7471005df8108a7d72580ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ea:cb:1b:ff:65:45:ac:78:03:31:42:57:e2:
                    9f:6b:78:09:d1:d4:e2:b4:7c:c7:d3:88:a5:70:d0:
                    60:d9:e7:e5:9a:92:31:53:6f:d3:16:8d:0a:d7:10:
                    2e:c0:a4:b3:9f:0a:7f:95:97:82:0b:fc:ed:6d:31:
                    b0:52:5d:82:ab:55:d7:de:0f:87:a8:6d:00:f5:f1:
                    75:12:6a:b1:33:4e:16:56:35:b5:a5:a5:7b:ac:7c:
                    c5:0b:f4:32:42:c3:b8:88:ad:7f:4d:49:aa:0e:d5:
                    47:63:97:93:0e:37:70:bb:38:53:29:59:14:26:73:
                    98:36:02:22:af:1c:29:42:71:1e:25:a5:a3:3c:b8:
                    88:96:96:98:d1:5d:d1:4a:2b:67:70:d5:d9:1f:6e:
                    0c:cf:68:e2:82:0a:0b:65:8e:8d:90:c7:2b:f5:6c:
                    4c:77:b4:75:46:26:a5:b3:8b:a1:23:b0:6d:7a:86:
                    38:2b:e3:dc:40:93:e0:d6:ab:1d:77:c2:6d:f4:cb:
                    09:ab:21:48:b0:60:e4:18:bc:20:5c:30:50:08:35:
                    9b:6e:29:d2:95:a9:6f:c2:ed:78:42:ad:9d:6e:68:
                    f1:17:b2:2c:e8:a5:2e:95:5a:f1:61:c9:85:0e:e4:
                    56:56:c4:a6:46:30:61:0a:72:e6:5c:e3:27:92:e6:
                    d5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FA:9B:0B:BC:04:F2:FD:74:71:00:5D:F8:10:8A:7D:72:58:0E:C6
            X509v3 Authority Key Identifier:
                keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/N_qbC7wE8v10cQBd-BCKfXJYDsY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.168.0/22
                IPv6:
                  2a09:fbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:7a:c3:31:ae:4b:b8:50:7d:54:76:67:d1:82:87:c5:39:ac:
         c3:e7:3d:68:68:07:a1:30:61:a2:f5:f2:d6:65:b5:43:d6:1f:
         5e:9e:58:8b:c2:75:b0:64:52:fe:c3:ba:73:0b:f5:c9:0a:53:
         87:e8:3b:f6:cc:3b:02:ab:32:59:15:0b:3e:99:d7:38:be:5b:
         a8:d0:6b:24:20:68:1c:34:73:47:a6:01:22:5d:af:bf:84:e0:
         c5:87:37:e4:f5:f9:17:90:f8:e7:0b:e5:e5:39:4a:6d:d5:0b:
         a0:63:70:46:7f:2c:2e:77:3c:4e:fa:6b:b8:b2:a0:3d:9e:51:
         4d:0e:ed:03:82:58:92:2d:06:bd:a9:0a:a5:07:2a:f7:5c:2e:
         1e:15:0e:fb:78:e4:3c:af:59:c3:9c:69:34:ea:0f:08:ad:8c:
         31:72:97:25:f4:e7:90:8a:76:ff:c9:94:6f:f2:89:5b:b3:71:
         a9:08:5f:9f:8a:ca:86:38:47:34:36:69:c4:e3:74:c7:dd:b4:
         e5:be:ee:ae:1b:ab:dc:da:cd:ba:49:ae:db:fe:cc:19:4c:09:
         d5:54:5d:0d:00:98:42:43:20:3d:da:b3:fe:3d:7c:0d:fd:60:
         db:cf:3b:80:e1:5a:18:f8:03:12:5a:a2:3a:de:36:f4:f4:06:
         7e:84:25:4b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzKK46eyJvpryxqAlLK+kcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5
MTk3NWUwHhcNMjQwMTAyMTIzNTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2ZhOWIwYmJjMDRmMmZkNzQ3MTAwNWRmODEwOGE3ZDcyNTgwZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgurLG/9lRax4AzFCV+Kfa3gJ0dTi
tHzH04ilcNBg2eflmpIxU2/TFo0K1xAuwKSznwp/lZeCC/ztbTGwUl2Cq1XX3g+H
qG0A9fF1EmqxM04WVjW1paV7rHzFC/QyQsO4iK1/TUmqDtVHY5eTDjdwuzhTKVkU
JnOYNgIirxwpQnEeJaWjPLiIlpaY0V3RSitncNXZH24Mz2jiggoLZY6NkMcr9WxM
d7R1Rials4uhI7BteoY4K+PcQJPg1qsdd8Jt9MsJqyFIsGDkGLwgXDBQCDWbbinS
lalvwu14Qq2dbmjxF7Is6KUulVrxYcmFDuRWVsSmRjBhCnLmXOMnkubVRQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDf6mwu8BPL9dHEAXfgQin1yWA7GMB8GA1UdIwQY
MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt
YWQ1MTBlMDVkYTkyLzEvTl9xYkM3d0U4djEwY1FCZC1CQ0tmWEpZRHNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky
LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueKoMA0E
AgACMAcDBQAqCfvAMA0GCSqGSIb3DQEBCwUAA4IBAQAxesMxrku4UH1UdmfRgofF
OazD5z1oaAehMGGi9fLWZbVD1h9enliLwnWwZFL+w7pzC/XJClOH6Dv2zDsCqzJZ
FQs+mdc4vluo0GskIGgcNHNHpgEiXa+/hODFhzfk9fkXkPjnC+XlOUpt1QugY3BG
fywudzxO+mu4sqA9nlFNDu0DgliSLQa9qQqlByr3XC4eFQ77eOQ8r1nDnGk06g8I
rYwxcpcl9OeQinb/yZRv8olbs3GpCF+fisqGOEc0NmnE43TH3bTlvu6uG6vc2s26
Sa7b/swZTAnVVF0NAJhCQyA92rP+PXwN/WDbzzuA4VoY+AMSWqI63jb09AZ+hCVL
-----END CERTIFICATE-----