Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/57Qrt9jAHJiVHR4TRc6BCopAfLk.roa
File:                     57Qrt9jAHJiVHR4TRc6BCopAfLk.roa (raw, json)
Hash identifier:          qzXLWD4uUbmyqbvzgJ/SxB0uAfY5CuIJ6gjtUcYoDlU=
Subject key identifier:   E7:B4:2B:B7:D8:C0:1C:98:95:1D:1E:13:45:CE:81:0A:8A:40:7C:B9
Certificate issuer:       /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial:       018CC3B717DC273904226E2D36A76B793B91
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/57Qrt9jAHJiVHR4TRc6BCopAfLk.roa
Signing time:             Mon 01 Jan 2024 06:30:05 +0000
ROA not before:           Mon 01 Jan 2024 06:30:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21266
IP address blocks:        80.90.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:17:dc:27:39:04:22:6e:2d:36:a7:6b:79:3b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
        Validity
            Not Before: Jan  1 06:30:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e7b42bb7d8c01c98951d1e1345ce810a8a407cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:69:36:df:be:89:c0:85:46:79:d2:5d:ee:f1:
                    8c:4b:ad:96:c0:4a:a2:14:b0:98:cf:01:0a:8e:d4:
                    81:f9:d0:4c:cf:97:1a:33:e2:bf:90:82:62:7e:3e:
                    5e:dd:23:8c:1c:2d:57:83:a2:0d:a3:ed:97:dc:1e:
                    a2:09:61:66:f2:e8:3e:11:56:f7:ba:fc:d2:68:b6:
                    1e:1f:5a:72:09:3e:85:65:ff:56:ae:e3:7e:ba:a9:
                    c8:fc:ec:a0:b9:5e:5d:1f:74:36:4c:c9:ca:7b:f0:
                    10:b0:13:e8:10:b4:9c:9b:af:f2:81:3d:4e:e6:08:
                    85:0e:dd:97:41:dc:aa:54:49:0d:91:31:c7:af:07:
                    03:32:ba:e1:32:41:15:73:3f:64:90:dc:32:4a:0e:
                    95:05:19:a0:a8:a8:49:4a:6c:3b:85:16:b5:c1:c7:
                    04:af:d9:9c:38:b1:3e:c2:83:0b:3f:84:b2:a3:a4:
                    32:6b:7d:9a:08:4d:37:a2:ed:0a:93:9a:e8:4f:1c:
                    55:c7:b3:7e:f8:50:95:31:36:8f:fc:69:89:cf:58:
                    e2:c4:7a:22:a1:ee:d3:79:b2:f9:0d:9a:19:c2:7c:
                    08:47:e5:21:47:cf:ad:b9:8b:ed:42:be:4d:a1:06:
                    b5:a6:29:31:11:57:fc:d3:a9:e7:27:70:74:bc:64:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B4:2B:B7:D8:C0:1C:98:95:1D:1E:13:45:CE:81:0A:8A:40:7C:B9
            X509v3 Authority Key Identifier:
                keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/57Qrt9jAHJiVHR4TRc6BCopAfLk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.90.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:2f:92:6f:7f:19:11:91:5a:c4:e4:e3:21:25:bd:65:fa:
         04:61:0f:05:04:4f:9f:fa:d4:b2:bc:95:9b:43:ed:d6:b6:e8:
         56:ad:9b:60:ac:f0:4f:f8:3b:ad:17:67:0f:99:21:93:6f:74:
         3c:72:12:4d:f6:09:fb:2c:38:2b:f6:47:75:d6:aa:b2:3d:8e:
         ed:b7:ae:ba:21:89:67:06:be:91:7e:19:ec:f4:94:59:23:30:
         5b:a6:12:0d:3e:d1:7a:20:9b:cc:09:cb:5c:97:94:11:a7:83:
         68:45:f0:b8:51:c9:2e:7f:2c:dd:42:32:9d:1f:d7:70:ef:dc:
         af:00:aa:b8:29:9f:31:f8:c4:45:55:fc:c9:7c:ac:65:52:11:
         0f:e2:75:d2:5e:35:3d:b1:6b:9a:0d:d2:b5:25:d6:82:76:58:
         86:c3:07:b9:6a:64:d3:07:e7:4a:bc:66:c9:02:b3:49:5b:a0:
         1f:f2:f6:40:48:bc:d9:e0:ca:a8:76:ab:df:00:eb:3a:18:9c:
         f4:f1:85:9d:e7:6e:e6:6d:8c:9c:17:90:26:a9:07:6b:70:24:
         a8:88:4e:8d:64:e7:a3:1f:8a:86:81:9b:d0:bc:6e:e7:9c:7e:
         f0:15:98:39:ba:ae:6a:60:fe:3f:bd:1f:4f:6a:32:bb:28:6d:
         87:23:91:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtxfcJzkEIm4tNqdreTuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZDAyOWYyYzMyMWFkYjU5ZWNhNWZjYTU3YTFlYjliZGY1
MzFkNmEwHhcNMjQwMTAxMDYzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2I0MmJiN2Q4YzAxYzk4OTUxZDFlMTM0NWNlODEwYThhNDA3Y2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWk2376JwIVGedJd7vGMS62WwEqi
FLCYzwEKjtSB+dBMz5caM+K/kIJifj5e3SOMHC1Xg6INo+2X3B6iCWFm8ug+EVb3
uvzSaLYeH1pyCT6FZf9WruN+uqnI/OyguV5dH3Q2TMnKe/AQsBPoELScm6/ygT1O
5giFDt2XQdyqVEkNkTHHrwcDMrrhMkEVcz9kkNwySg6VBRmgqKhJSmw7hRa1wccE
r9mcOLE+woMLP4Syo6Qya32aCE03ou0Kk5roTxxVx7N++FCVMTaP/GmJz1jixHoi
oe7TebL5DZoZwnwIR+UhR8+tuYvtQr5NoQa1pikxEVf806nnJ3B0vGSjewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOe0K7fYwByYlR0eE0XOgQqKQHy5MB8GA1UdIwQY
MBaAFKTQKfLDIa21nspfyleh65vfUx1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDct
OGFkNmZmYjI2MTdkLzEvNTdRcnQ5akFISmlWSFI0VFJjNkJDb3BBZkxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xMjY3NTYtOWE5NC00YTkxLWJmNDctOGFkNmZmYjI2MTdk
LzEvcE5BcDhzTWhyYldleWxfS1Y2SHJtOTlUSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUFpAMA0G
CSqGSIb3DQEBCwUAA4IBAQBc8S+Sb38ZEZFaxOTjISW9ZfoEYQ8FBE+f+tSyvJWb
Q+3WtuhWrZtgrPBP+DutF2cPmSGTb3Q8chJN9gn7LDgr9kd11qqyPY7tt666IYln
Br6Rfhns9JRZIzBbphINPtF6IJvMCctcl5QRp4NoRfC4UckufyzdQjKdH9dw79yv
AKq4KZ8x+MRFVfzJfKxlUhEP4nXSXjU9sWuaDdK1JdaCdliGwwe5amTTB+dKvGbJ
ArNJW6Af8vZASLzZ4MqodqvfAOs6GJz08YWd527mbYycF5AmqQdrcCSoiE6NZOej
H4qGgZvQvG7nnH7wFZg5uq5qYP4/vR9PajK7KG2HI5F4
-----END CERTIFICATE-----