Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/l0mIWEMTiuTDjohpAmdw9PozbKU.roa
File:                     l0mIWEMTiuTDjohpAmdw9PozbKU.roa (raw, json)
Hash identifier:          TjQdh7qiVyMjxzlP29Y7MZZR4B1K4MI8yYqNs0Rw9GE=
Subject key identifier:   97:49:88:58:43:13:8A:E4:C3:8E:88:69:02:67:70:F4:FA:33:6C:A5
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       018EC1F748E68E48D0846053119158105C7B
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/l0mIWEMTiuTDjohpAmdw9PozbKU.roa
Signing time:             Tue 09 Apr 2024 08:26:32 +0000
ROA not before:           Tue 09 Apr 2024 08:26:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63017
IP address blocks:        80.91.56.0/24 maxlen: 24
                          80.91.57.0/24 maxlen: 24
                          2a02:6000:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c1:f7:48:e6:8e:48:d0:84:60:53:11:91:58:10:5c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Apr  9 08:26:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9749885843138ae4c38e8869026770f4fa336ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:29:90:79:d0:0b:7c:85:27:de:28:db:80:
                    56:21:77:72:94:0b:18:8a:8a:3a:56:1a:f9:2d:6b:
                    44:ed:e3:95:8d:46:94:70:cc:25:bd:1f:0b:44:eb:
                    7c:c6:53:b5:a5:ca:6f:f9:53:07:0d:41:c5:a7:62:
                    71:be:c4:85:3a:55:6d:c6:71:0a:5a:11:95:27:b1:
                    9e:77:1b:4e:65:57:e9:82:63:6e:39:ab:96:2b:b4:
                    76:77:94:04:22:c9:16:9c:a9:d8:6b:48:bb:01:b4:
                    38:86:f3:de:c6:18:c2:86:a1:d8:17:23:34:55:10:
                    5d:08:b4:8b:a5:1b:77:41:18:c2:d1:95:a3:72:50:
                    34:02:1f:46:95:74:21:e8:94:f2:28:76:7c:cd:38:
                    14:44:51:04:c4:a9:72:a3:e4:f4:b2:e0:86:1d:ea:
                    77:af:66:e2:b1:d6:ff:b8:b4:43:93:37:37:cb:63:
                    f9:11:91:23:0b:f9:34:89:5e:f0:ea:97:70:20:03:
                    73:c7:bd:08:c6:a9:74:5c:fa:7a:37:31:59:90:f8:
                    b9:de:54:f7:c2:31:67:8b:98:95:e0:31:7c:9f:75:
                    67:92:32:88:cb:ac:ad:60:7b:5c:09:27:99:a7:22:
                    a7:14:ab:ae:7e:fd:61:8a:c2:3e:45:cb:55:81:8b:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:49:88:58:43:13:8A:E4:C3:8E:88:69:02:67:70:F4:FA:33:6C:A5
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/l0mIWEMTiuTDjohpAmdw9PozbKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.91.56.0/23
                IPv6:
                  2a02:6000:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:77:a5:53:58:a1:5a:7f:d3:4b:18:79:ca:07:ba:d0:3e:
         5a:4a:93:7a:2a:dd:12:24:89:7a:ef:f3:d7:cc:4b:37:df:3c:
         fc:22:56:45:ac:ff:57:a5:43:67:20:b6:45:11:30:ff:a1:8d:
         78:84:1f:3b:b5:53:63:ea:2b:94:cc:40:63:c6:b9:c5:5d:63:
         18:d6:fd:40:b8:3c:42:24:ad:b8:82:16:7c:49:dc:59:c8:9f:
         7b:fb:fb:81:62:e1:97:f2:34:0f:7c:8e:ce:c7:78:03:6e:64:
         53:15:c6:5e:6e:24:33:02:3e:cb:4b:f3:d0:0f:e1:22:5d:0a:
         2e:d1:94:e2:bc:c2:fb:40:ec:9f:26:4f:cc:2c:23:35:e0:91:
         7e:b7:4a:92:ef:c0:fb:86:ba:c8:be:d5:d8:57:b9:ba:05:0a:
         c4:3b:67:c2:8a:6e:d0:5f:9f:ea:17:87:75:b8:27:f2:25:ac:
         9b:0f:21:bc:94:11:cc:c5:88:a6:33:8e:0e:e9:4b:ed:b9:c0:
         6c:e5:7f:e2:a6:bf:c2:43:3d:02:30:17:d9:15:b0:2d:b0:89:
         9c:48:aa:e4:c4:7c:3a:08:74:49:d2:b0:7d:de:4b:45:a9:74:
         ca:df:87:4a:59:17:07:f9:88:c8:7d:b8:78:47:23:30:2e:61:
         fa:26:f0:ce
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7B90jmjkjQhGBTEZFYEFx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMjMzYmJkZGZlNDM4NjQ2ZjU4NmYwODVlNWRmMGQ3OWJk
ZmI5ZmMwHhcNMjQwNDA5MDgyNjMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzQ5ODg1ODQzMTM4YWU0YzM4ZTg4NjkwMjY3NzBmNGZhMzM2Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvUpkHnQC3yFJ94o24BWIXdylAsY
ioo6Vhr5LWtE7eOVjUaUcMwlvR8LROt8xlO1pcpv+VMHDUHFp2JxvsSFOlVtxnEK
WhGVJ7GedxtOZVfpgmNuOauWK7R2d5QEIskWnKnYa0i7AbQ4hvPexhjChqHYFyM0
VRBdCLSLpRt3QRjC0ZWjclA0Ah9GlXQh6JTyKHZ8zTgURFEExKlyo+T0suCGHep3
r2bisdb/uLRDkzc3y2P5EZEjC/k0iV7w6pdwIANzx70Ixql0XPp6NzFZkPi53lT3
wjFni5iV4DF8n3VnkjKIy6ytYHtcCSeZpyKnFKuufv1hisI+RctVgYsF7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJdJiFhDE4rkw46IaQJncPT6M2ylMB8GA1UdIwQY
MBaAFJojO73f5Dhkb1hvCF5d8Neb37n8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODIt
Mzg3OWJkNzAzOTQ2LzEvbDBtSVdFTVRpdVREam9ocEFtZHc5UG96YktVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODItMzg3OWJkNzAzOTQ2
LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBUFs4MA8E
AgACMAkDBwAqAmAA//8wDQYJKoZIhvcNAQELBQADggEBAFHPd6VTWKFaf9NLGHnK
B7rQPlpKk3oq3RIkiXrv89fMSzffPPwiVkWs/1elQ2cgtkURMP+hjXiEHzu1U2Pq
K5TMQGPGucVdYxjW/UC4PEIkrbiCFnxJ3FnIn3v7+4Fi4ZfyNA98js7HeANuZFMV
xl5uJDMCPstL89AP4SJdCi7RlOK8wvtA7J8mT8wsIzXgkX63SpLvwPuGusi+1dhX
uboFCsQ7Z8KKbtBfn+oXh3W4J/IlrJsPIbyUEczFiKYzjg7pS+25wGzlf+Kmv8JD
PQIwF9kVsC2wiZxIquTEfDoIdEnSsH3eS0WpdMrfh0pZFwf5iMh9uHhHIzAuYfom
8M4=
-----END CERTIFICATE-----