Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/Ao0OOQfoKk1qjBtVLWVBI7AuOAE.roa
File:                     Ao0OOQfoKk1qjBtVLWVBI7AuOAE.roa (raw, json)
Hash identifier:          vcRpRfua6DViYNlxmFuUMVlVMmhCz1mS+6PbftVeQ8I=
Subject key identifier:   02:8D:0E:39:07:E8:2A:4D:6A:8C:1B:55:2D:65:41:23:B0:2E:38:01
Certificate issuer:       /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial:       018CC9BA693A883A70082EB2743B686BA336
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/Ao0OOQfoKk1qjBtVLWVBI7AuOAE.roa
Signing time:             Tue 02 Jan 2024 10:31:26 +0000
ROA not before:           Tue 02 Jan 2024 10:31:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44749
IP address blocks:        185.126.172.0/22 maxlen: 24
                          2a06:ca40::/29 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:ba:69:3a:88:3a:70:08:2e:b2:74:3b:68:6b:a3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
        Validity
            Not Before: Jan  2 10:31:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=028d0e3907e82a4d6a8c1b552d654123b02e3801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bb:e2:3f:12:09:4c:29:3e:89:4f:e8:ba:d3:
                    c2:94:7b:98:66:e0:61:20:42:93:18:1b:ba:48:69:
                    72:a8:e4:9c:59:32:44:dd:5a:80:24:e4:c8:cd:7c:
                    fb:05:e9:2c:30:8c:b9:ff:53:c7:e1:06:81:6f:16:
                    a1:a3:0f:38:8d:aa:c6:d7:c2:62:24:37:34:06:2f:
                    82:de:d9:75:d3:f7:5b:b1:fa:25:16:84:a8:99:bd:
                    f8:fd:b2:16:72:c8:b1:45:76:f1:af:e3:54:ea:52:
                    d4:f6:af:91:11:0a:5e:f2:13:12:05:44:df:bf:3e:
                    19:3f:7c:b8:99:50:97:44:d0:6a:c5:92:da:2a:6a:
                    a5:3c:54:8e:43:91:81:d3:60:4e:5a:ee:84:58:83:
                    f5:c7:0f:d1:ae:0c:35:31:fb:27:c8:bf:39:b5:2d:
                    37:7a:cc:b8:e9:73:6a:82:e8:11:3f:da:6e:ef:0b:
                    6f:c9:e3:21:f8:1b:e6:e7:6c:95:0d:43:4f:1c:9a:
                    39:90:16:76:96:e0:df:d9:03:4c:d0:8a:ca:33:35:
                    da:87:d3:83:ae:74:17:65:7b:e7:15:a5:ee:c8:a7:
                    96:f2:dc:5c:70:83:be:f9:16:32:f5:f7:96:5f:ba:
                    ed:4b:b3:ba:3d:64:98:22:aa:66:5b:da:15:b1:c9:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8D:0E:39:07:E8:2A:4D:6A:8C:1B:55:2D:65:41:23:B0:2E:38:01
            X509v3 Authority Key Identifier:
                keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/Ao0OOQfoKk1qjBtVLWVBI7AuOAE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.172.0/22
                IPv6:
                  2a06:ca40::/29

    Signature Algorithm: sha256WithRSAEncryption
         a6:46:68:e5:ef:0b:42:0e:53:dd:a0:95:c4:21:6c:01:11:34:
         9e:a0:ac:0b:63:d0:59:c8:f3:51:79:a4:00:ed:15:3a:c2:bc:
         cb:b5:3c:3b:62:b3:ae:5d:25:38:70:e2:75:fb:22:dd:40:c4:
         ad:0f:3b:84:aa:33:3d:45:48:08:3f:b6:42:ed:5a:7b:1e:9d:
         4e:91:e3:2e:d6:32:e1:27:cc:ce:ec:42:57:dd:2b:d5:5a:52:
         32:7b:e4:09:a8:f7:84:0e:dd:ed:12:a2:6c:b1:e1:27:20:76:
         34:cd:b0:f2:42:0f:8a:0b:c4:30:dc:32:28:9b:c1:4a:2b:22:
         ba:75:e7:88:ca:80:32:2c:96:b2:6c:e9:46:2e:b2:8d:1f:d8:
         2f:93:55:98:66:69:3a:ef:ab:f4:90:db:0f:36:fc:f9:cc:9c:
         a4:56:81:d5:f6:7c:c3:5f:06:13:3e:e9:ec:e3:9e:ef:a8:7f:
         f1:b4:72:22:b0:bc:a0:db:5a:3f:26:ea:f0:ff:eb:69:31:94:
         f6:29:9d:dd:f5:94:15:1f:15:f0:86:c2:98:34:05:ae:01:33:
         7d:5e:33:1b:a3:ae:9b:3b:8d:5b:fa:ca:d7:0e:e7:69:be:4a:
         02:93:6f:68:24:e1:6f:b6:d3:09:6d:31:21:e1:e5:9c:21:e5:
         e5:df:73:fe
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJumk6iDpwCC6ydDtoa6M2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDdhMzZkNzc2OGE3YjMwYTRlZWNiYjY5NjRjOGMyMzdk
NzQ0MDEwHhcNMjQwMTAyMTAzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjhkMGUzOTA3ZTgyYTRkNmE4YzFiNTUyZDY1NDEyM2IwMmUzODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbviPxIJTCk+iU/outPClHuYZuBh
IEKTGBu6SGlyqOScWTJE3VqAJOTIzXz7BeksMIy5/1PH4QaBbxahow84jarG18Ji
JDc0Bi+C3tl10/dbsfolFoSomb34/bIWcsixRXbxr+NU6lLU9q+REQpe8hMSBUTf
vz4ZP3y4mVCXRNBqxZLaKmqlPFSOQ5GB02BOWu6EWIP1xw/Rrgw1MfsnyL85tS03
esy46XNqgugRP9pu7wtvyeMh+Bvm52yVDUNPHJo5kBZ2luDf2QNM0IrKMzXah9OD
rnQXZXvnFaXuyKeW8txccIO++RYy9feWX7rtS7O6PWSYIqpmW9oVsckZJwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAKNDjkH6CpNaowbVS1lQSOwLjgBMB8GA1UdIwQY
MBaAFAdHo213aKezCk7su2lkyMI310QBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEt
YWFiYWRkMDcxOWJhLzEvQW8wT09RZm9LazFxakJ0VkxXVkJJN0F1T0FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEtYWFiYWRkMDcxOWJh
LzEvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuX6sMA0E
AgACMAcDBQMqBspAMA0GCSqGSIb3DQEBCwUAA4IBAQCmRmjl7wtCDlPdoJXEIWwB
ETSeoKwLY9BZyPNReaQA7RU6wrzLtTw7YrOuXSU4cOJ1+yLdQMStDzuEqjM9RUgI
P7ZC7Vp7Hp1OkeMu1jLhJ8zO7EJX3SvVWlIye+QJqPeEDt3tEqJsseEnIHY0zbDy
Qg+KC8Qw3DIom8FKKyK6deeIyoAyLJaybOlGLrKNH9gvk1WYZmk676v0kNsPNvz5
zJykVoHV9nzDXwYTPuns457vqH/xtHIisLyg21o/Jurw/+tpMZT2KZ3d9ZQVHxXw
hsKYNAWuATN9XjMbo66bO41b+srXDudpvkoCk29oJOFvttMJbTEh4eWcIeXl33P+
-----END CERTIFICATE-----