Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/xGut4dnW-UEwFjrGVmiOgRGkmgo.roa
File:                     xGut4dnW-UEwFjrGVmiOgRGkmgo.roa (raw, json)
Hash identifier:          sjQmB6AaX7CIx4YTFeNzv0KCXifvaqnUd8nVd+WzVCE=
Subject key identifier:   C4:6B:AD:E1:D9:D6:F9:41:30:16:3A:C6:56:68:8E:81:11:A4:9A:0A
Certificate issuer:       /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial:       018CCA28691B1596DD8416A43505DF0D8A9F
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/xGut4dnW-UEwFjrGVmiOgRGkmgo.roa
Signing time:             Tue 02 Jan 2024 12:31:34 +0000
ROA not before:           Tue 02 Jan 2024 12:31:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205390
IP address blocks:        185.220.0.0/22 maxlen: 24
                          2a0b:ecc0::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:28:69:1b:15:96:dd:84:16:a4:35:05:df:0d:8a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
        Validity
            Not Before: Jan  2 12:31:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c46bade1d9d6f94130163ac656688e8111a49a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:19:fc:56:cf:84:a3:d7:1a:31:65:f9:51:
                    7e:cd:47:4f:08:63:a8:bd:03:5a:bd:04:89:76:f8:
                    d2:19:f2:b0:9b:b9:c1:ae:2f:e0:9a:c0:45:6c:71:
                    a6:5a:9d:bc:8d:95:59:3a:f4:05:bc:92:d6:52:e1:
                    cb:95:e8:43:06:01:e9:dd:4c:9a:1e:a9:16:6e:ed:
                    b6:ca:d7:f3:d5:d6:ef:11:dc:97:17:c7:a1:cc:ad:
                    67:ec:9b:50:4a:7b:0c:d5:2b:fa:ba:df:b1:e5:1c:
                    9c:89:9d:90:dd:d5:fa:dc:56:a3:0b:ff:38:e5:e9:
                    d0:64:3f:12:9c:db:56:f5:4c:4e:ed:55:0e:6f:b6:
                    1b:78:05:52:41:c1:94:0d:42:e6:20:51:74:ac:64:
                    75:f1:b9:8f:27:55:89:12:71:1d:b7:62:57:e4:ef:
                    c1:44:4d:8d:19:dc:46:5f:12:17:a5:da:d8:ef:77:
                    0a:b6:a8:c0:92:61:37:f8:35:6a:2a:30:17:b8:2b:
                    b8:94:1c:6a:cd:68:98:48:f0:f7:9a:aa:db:fe:2f:
                    a5:27:a1:c5:a6:8d:1d:f7:3c:1e:60:d4:44:b6:96:
                    56:38:53:be:f1:11:ca:d0:f9:47:a0:25:32:4e:5e:
                    17:bd:34:12:f0:b2:c4:ad:5a:b2:6a:a8:9b:22:83:
                    2b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:AD:E1:D9:D6:F9:41:30:16:3A:C6:56:68:8E:81:11:A4:9A:0A
            X509v3 Authority Key Identifier:
                keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/xGut4dnW-UEwFjrGVmiOgRGkmgo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.0.0/22
                IPv6:
                  2a0b:ecc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:97:2b:26:cb:25:76:ac:40:f6:b0:fd:8b:7b:95:ab:45:8b:
         08:28:60:eb:1d:17:61:23:d7:13:cc:18:7b:95:8d:d1:36:8a:
         84:a5:0d:17:f3:6b:67:2b:88:52:69:f7:4f:d0:41:0b:9f:57:
         66:5f:84:45:4f:02:fb:ad:19:b6:0a:1d:aa:c1:26:c0:d1:5d:
         f2:67:d9:0e:a4:c1:31:2d:1a:1c:eb:30:1c:9c:7a:1e:ae:e2:
         64:94:c8:93:6d:4d:0b:e0:86:6e:40:4a:c7:21:01:4c:68:37:
         d4:f5:fe:77:fb:8d:63:e9:04:e3:7b:ab:fc:4a:e4:38:d5:0d:
         44:a8:f6:d3:02:a8:db:36:7e:80:f8:30:c1:5a:4b:f6:48:5f:
         70:bd:7d:1c:e4:4b:dd:75:7f:13:fb:8f:43:38:f5:cb:d7:9d:
         a9:6c:ac:f4:15:dc:6c:d2:00:ff:aa:e7:64:6a:64:88:f5:14:
         2b:a8:80:dd:a2:04:56:d4:53:71:4a:ae:ab:bf:7e:8d:79:33:
         40:45:60:a7:bb:68:e5:8b:f4:11:64:9d:ca:2f:cb:2c:7c:a5:
         e8:05:cc:dc:5f:f7:89:7e:aa:ce:a6:91:10:13:69:57:34:02:
         b8:88:db:99:68:44:95:7d:59:71:3f:1e:bd:ba:08:9b:98:e3:
         76:89:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----