Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa
File:                     vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa (raw, json)
Hash identifier:          hAYdwCz621Msz/2JvhfTl8iiiwllmkHBofYph+W+rHQ=
Subject key identifier:   BD:50:37:BF:95:EF:6B:B5:91:CA:B1:08:0C:35:0D:B3:90:10:E1:82
Certificate issuer:       /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial:       018CC4939BDEFE89DAD46F5539EE8DFAC2AF
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa
Signing time:             Mon 01 Jan 2024 10:30:57 +0000
ROA not before:           Mon 01 Jan 2024 10:30:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57184
IP address blocks:        185.128.200.0/22 maxlen: 22
                          2a03:9b60::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 28 Nov 2024 04:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:9b:de:fe:89:da:d4:6f:55:39:ee:8d:fa:c2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
        Validity
            Not Before: Jan  1 10:30:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bd5037bf95ef6bb591cab1080c350db39010e182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:78:78:7b:77:88:ce:53:86:d5:88:57:d0:31:
                    eb:cd:b6:62:6c:fe:c9:0e:d8:9b:78:e0:69:ce:24:
                    60:bc:0c:d1:82:4f:8c:6a:63:ef:c0:15:19:90:fc:
                    70:3c:39:18:d7:e4:a1:07:35:c6:4f:aa:7f:20:0c:
                    a0:b7:f7:ab:34:ff:2c:62:69:77:75:6c:4c:fa:34:
                    02:34:34:39:81:99:20:f9:59:b4:00:63:97:83:f6:
                    9e:0c:a2:66:19:f5:fc:f8:7d:16:85:f3:16:bc:a7:
                    4a:6c:38:ed:02:9f:3d:7d:99:b9:b5:1f:84:d7:0f:
                    8a:2c:34:33:1a:f2:0c:09:af:fd:f2:00:dd:5d:83:
                    f2:33:dd:64:fb:0f:f6:2f:01:25:19:da:6e:8c:a1:
                    1b:c1:92:75:3d:21:87:22:d0:2b:1e:80:a0:db:2c:
                    b5:21:ab:6b:86:d3:c7:7f:e0:cc:51:ca:00:65:73:
                    9d:9a:5b:eb:15:3a:89:47:9c:47:a9:5b:62:cf:4c:
                    a6:b8:f9:53:e4:ce:cf:05:f1:32:ce:d6:af:eb:08:
                    a0:79:b0:cb:95:80:b0:0b:6c:a0:56:7f:a6:52:d9:
                    1b:1e:d5:15:2a:86:cd:6a:32:94:a9:0e:0c:d7:e3:
                    b2:1b:e3:20:7b:1b:1f:ee:f4:55:fb:f3:41:c2:21:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:50:37:BF:95:EF:6B:B5:91:CA:B1:08:0C:35:0D:B3:90:10:E1:82
            X509v3 Authority Key Identifier:
                keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/vVA3v5Xva7WRyrEIDDUNs5AQ4YI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.128.200.0/22
                IPv6:
                  2a03:9b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:59:96:5b:d0:14:d4:5e:bf:ef:35:36:2c:b5:ee:4b:ac:
         80:eb:c9:ff:af:be:ff:6b:a5:99:57:2b:48:43:4a:2f:d4:07:
         ce:8d:d8:14:33:53:04:54:84:93:7e:e8:8a:b9:de:0a:57:28:
         ad:ac:c2:15:09:a3:0c:ce:d0:1d:ae:e9:91:a2:20:86:5c:3c:
         e6:7b:4a:8f:63:ea:e8:1c:52:22:5d:34:6d:58:27:01:1f:c5:
         63:6b:ee:c7:4b:a3:8d:75:f4:0d:64:6b:2b:c4:70:07:54:ab:
         e1:ac:46:dc:33:0d:d6:be:3e:f8:a5:bc:4e:48:77:29:67:ff:
         88:3a:0e:9e:a0:3f:fe:05:f3:09:9e:72:2a:de:ca:9e:b1:04:
         c8:fc:0a:3c:ca:82:2f:9e:5a:91:24:92:43:a0:eb:36:56:70:
         a1:14:13:94:f5:86:d6:3b:d7:24:d8:28:a1:9c:77:5a:44:bb:
         a8:99:6c:b3:81:cd:cd:00:c9:26:32:73:ef:8f:bb:49:eb:28:
         34:49:3c:1b:3b:3d:00:f4:96:64:74:a9:fb:13:69:20:e4:72:
         04:75:f0:a6:6e:7b:78:3d:49:36:51:71:14:c9:ea:a8:0a:b5:
         62:b6:6b:f2:c0:64:dc:2f:cf:8c:8c:ea:21:28:e0:3d:39:47:
         6c:59:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----