Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/N-O2tHBJaejyp6_2GdNk2WLNgsA.roa
File:                     N-O2tHBJaejyp6_2GdNk2WLNgsA.roa (raw, json)
Hash identifier:          fgshQXzM6ocxQi1uwK95ZU1PlhemC7H61Zb6fOFzeIc=
Subject key identifier:   37:E3:B6:B4:70:49:69:E8:F2:A7:AF:F6:19:D3:64:D9:62:CD:82:C0
Certificate issuer:       /CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
Certificate serial:       018CC492DB52366AF43C7CADBC7D005A9991
Authority key identifier: 82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/N-O2tHBJaejyp6_2GdNk2WLNgsA.roa
Signing time:             Mon 01 Jan 2024 10:30:07 +0000
ROA not before:           Mon 01 Jan 2024 10:30:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50055
IP address blocks:        185.136.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:db:52:36:6a:f4:3c:7c:ad:bc:7d:00:5a:99:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f18b80339d8ae637f4a02f335bbec7c8c26bde
        Validity
            Not Before: Jan  1 10:30:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=37e3b6b4704969e8f2a7aff619d364d962cd82c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:3d:27:db:be:3e:70:ce:66:a9:bb:6d:50:
                    cb:fb:88:75:27:1a:34:40:06:8a:81:70:6e:3a:e5:
                    d6:52:07:e7:49:81:31:e6:6a:88:3d:0a:b9:a7:ab:
                    e8:dd:bd:54:46:4d:f8:ea:9e:5b:c9:e9:01:78:68:
                    4a:42:a7:c9:ed:1b:fa:01:81:bd:3e:65:1a:08:60:
                    b7:a1:dc:91:5d:de:cb:41:18:a3:f9:b2:fb:15:da:
                    e8:0d:29:6b:b4:de:5d:47:6a:9c:14:9a:c8:dd:10:
                    0c:c7:37:93:e1:6f:e1:f5:95:45:df:f2:58:69:27:
                    26:6a:2a:88:77:2f:0b:f1:b0:4e:aa:f6:25:19:dd:
                    a9:21:8b:22:11:87:34:9f:77:86:56:c0:ec:ce:7c:
                    7a:3f:8e:25:69:37:7f:0a:39:e1:c3:13:53:20:37:
                    24:45:5d:92:f8:82:95:ba:53:6a:d4:78:c7:57:3e:
                    5c:5c:88:60:a2:e9:d4:cf:45:a3:ce:4d:62:fb:15:
                    26:39:20:ba:cc:57:6d:2f:61:d5:76:54:16:e2:ba:
                    18:3e:17:01:3b:bb:f3:c5:5f:53:b0:f6:96:52:fe:
                    f3:22:37:02:88:66:b1:be:0d:16:ca:fb:f6:a2:e0:
                    b8:f3:26:db:d5:c1:77:1d:4c:55:1b:a4:49:6b:95:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E3:B6:B4:70:49:69:E8:F2:A7:AF:F6:19:D3:64:D9:62:CD:82:C0
            X509v3 Authority Key Identifier:
                keyid:82:F1:8B:80:33:9D:8A:E6:37:F4:A0:2F:33:5B:BE:C7:C8:C2:6B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvGLgDOdiuY39KAvM1u-x8jCa94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/N-O2tHBJaejyp6_2GdNk2WLNgsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/65c2d9-80d4-459f-ae61-b5bd428f190c/1/gvGLgDOdiuY39KAvM1u-x8jCa94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.136.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:58:4b:e2:fc:48:1d:12:d9:af:62:47:51:4f:b3:74:83:
         7c:3a:4d:f8:7a:68:09:94:21:da:2c:9b:22:21:11:48:7c:eb:
         26:e5:76:82:40:67:15:89:bd:f2:c8:60:a7:3e:13:49:d8:ce:
         e3:bc:6c:0c:da:2e:b8:83:d0:c2:a8:60:b4:d0:0a:da:e5:57:
         9d:dd:a6:00:90:a5:5a:6c:0e:37:76:83:fb:68:2b:e0:3b:94:
         a3:56:88:e7:f6:93:7b:ef:c9:1c:cf:f0:0f:ef:6b:90:40:5a:
         d2:03:77:eb:b4:2a:2b:9f:cb:fb:4d:bc:c9:4d:26:eb:08:8b:
         c5:06:f2:bc:88:d7:8f:e6:3c:24:30:cc:bb:9f:4d:e2:f7:05:
         90:77:af:05:32:76:83:12:fa:40:cf:a6:da:d5:3b:9b:73:1e:
         9d:49:31:3e:60:0e:32:d0:d1:b7:ee:46:68:a9:df:bd:0a:64:
         44:86:9f:90:5f:30:6c:75:b8:6c:a5:05:c0:2b:c1:c3:58:3c:
         3e:c2:7a:dd:8e:8b:1e:3e:96:ea:f5:42:d0:ae:47:5a:65:41:
         1f:cc:16:08:29:76:cf:9b:ec:d4:63:9c:39:fd:2b:c7:e1:ae:
         03:c1:43:49:cd:8c:8f:e6:85:e9:ce:00:d1:f1:2b:35:e0:38:
         95:7f:70:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkttSNmr0PHytvH0AWpmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZjE4YjgwMzM5ZDhhZTYzN2Y0YTAyZjMzNWJiZWM3Yzhj
MjZiZGUwHhcNMjQwMTAxMTAzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2UzYjZiNDcwNDk2OWU4ZjJhN2FmZjYxOWQzNjRkOTYyY2Q4MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1c9J9u+PnDOZqm7bVDL+4h1Jxo0
QAaKgXBuOuXWUgfnSYEx5mqIPQq5p6vo3b1URk346p5byekBeGhKQqfJ7Rv6AYG9
PmUaCGC3odyRXd7LQRij+bL7FdroDSlrtN5dR2qcFJrI3RAMxzeT4W/h9ZVF3/JY
aScmaiqIdy8L8bBOqvYlGd2pIYsiEYc0n3eGVsDsznx6P44laTd/CjnhwxNTIDck
RV2S+IKVulNq1HjHVz5cXIhgounUz0Wjzk1i+xUmOSC6zFdtL2HVdlQW4roYPhcB
O7vzxV9TsPaWUv7zIjcCiGaxvg0Wyvv2ouC48ybb1cF3HUxVG6RJa5VkdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDfjtrRwSWno8qev9hnTZNlizYLAMB8GA1UdIwQY
MBaAFILxi4AznYrmN/SgLzNbvsfIwmveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEt
YjViZDQyOGYxOTBjLzEvTi1PMnRIQkphZWp5cDZfMkdkTmsyV0xOZ3NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82NWMyZDktODBkNC00NTlmLWFlNjEtYjViZDQyOGYxOTBj
LzEvZ3ZHTGdET2RpdVkzOUtBdk0xdS14OGpDYTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYg4MA0G
CSqGSIb3DQEBCwUAA4IBAQBNoVhL4vxIHRLZr2JHUU+zdIN8Ok34emgJlCHaLJsi
IRFIfOsm5XaCQGcVib3yyGCnPhNJ2M7jvGwM2i64g9DCqGC00Ara5Ved3aYAkKVa
bA43doP7aCvgO5SjVojn9pN778kcz/AP72uQQFrSA3frtCorn8v7TbzJTSbrCIvF
BvK8iNeP5jwkMMy7n03i9wWQd68FMnaDEvpAz6ba1Tubcx6dSTE+YA4y0NG37kZo
qd+9CmREhp+QXzBsdbhspQXAK8HDWDw+wnrdjosePpbq9ULQrkdaZUEfzBYIKXbP
m+zUY5w5/SvH4a4DwUNJzYyP5oXpzgDR8Ss14DiVf3Bf
-----END CERTIFICATE-----