Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/GBUchTw6o_50GUaLchQ_zS4QfCY.roa
File:                     GBUchTw6o_50GUaLchQ_zS4QfCY.roa (raw, json)
Hash identifier:          9xAQBJaqgiGrQO6D67V83eSjEPNWvlJRKzxinCB3/nU=
Subject key identifier:   18:15:1C:85:3C:3A:A3:FE:74:19:46:8B:72:14:3F:CD:2E:10:7C:26
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA295774482766B78A214D99CC0A526A
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/GBUchTw6o_50GUaLchQ_zS4QfCY.roa
Signing time:             Tue 02 Jan 2024 12:32:36 +0000
ROA not before:           Tue 02 Jan 2024 12:32:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198558
IP address blocks:        2a0e:8f02:f05c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:57:74:48:27:66:b7:8a:21:4d:99:cc:0a:52:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=18151c853c3aa3fe7419468b72143fcd2e107c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:41:a7:02:fd:a9:ef:5e:12:b9:29:50:f2:
                    a6:30:4c:d2:07:86:41:f2:09:7b:de:90:d8:43:d8:
                    0a:ca:61:88:35:3e:44:ee:71:d9:3e:0e:33:0f:5e:
                    f7:6b:d0:9f:93:3c:e6:80:4c:7f:93:7d:47:c0:bf:
                    a5:0b:b0:37:d5:50:ad:ba:d0:61:e8:98:32:33:07:
                    48:e4:62:48:e8:eb:6b:c5:33:4b:a7:b8:71:e9:bf:
                    64:dc:0b:7c:e2:d7:2e:7d:8e:9b:65:20:c8:33:0c:
                    0d:b4:48:27:f0:e6:f3:ab:9f:04:ed:03:34:53:cf:
                    20:59:d3:5b:dd:d8:af:28:0a:03:50:9a:79:d1:7e:
                    8e:e8:24:94:00:1a:77:41:31:02:62:a1:28:e0:e6:
                    b5:78:fa:f8:ba:8e:19:8a:e7:71:0f:f5:c3:5d:12:
                    1a:18:20:9c:64:dd:92:b6:52:fd:48:56:7d:3a:e6:
                    76:c9:da:2b:97:2d:3d:48:d0:9e:82:55:2a:ce:e0:
                    e7:62:86:c7:6d:2f:af:06:62:33:0a:41:cf:e5:df:
                    4d:b7:43:4a:27:04:c0:40:2e:01:2c:f7:72:33:cb:
                    f8:96:fd:18:e1:b1:86:cd:13:94:53:e1:5c:7a:5e:
                    9c:cb:43:6a:fe:d6:5c:34:7b:a8:8c:27:78:59:3c:
                    dc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:15:1C:85:3C:3A:A3:FE:74:19:46:8B:72:14:3F:CD:2E:10:7C:26
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/GBUchTw6o_50GUaLchQ_zS4QfCY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f05c::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:eb:08:37:54:2e:21:b4:5f:87:f9:0b:2e:ce:c6:c3:41:e1:
         d3:86:85:37:12:d8:44:5b:4d:3a:90:8b:b0:48:2d:fb:fe:1f:
         5f:93:f8:1f:c9:95:02:35:40:f3:6a:a6:75:62:36:d1:30:c7:
         56:c7:2c:03:10:5d:c5:f4:1e:14:3a:6f:b0:f7:78:b1:c0:c2:
         4a:ee:16:e0:4d:20:c0:fc:36:81:a5:bc:b4:14:fe:3c:17:49:
         0e:1c:bf:5d:60:af:9d:2c:48:a0:2b:cb:89:e8:e3:a1:f4:17:
         07:7b:80:ea:9d:97:9c:cc:d0:d4:04:8b:44:74:66:e5:a0:ef:
         2d:88:87:d4:db:79:69:9d:10:0f:51:d5:13:2a:09:2b:4c:62:
         ac:3b:e0:49:b4:f3:cb:89:77:7f:2f:c7:ac:d9:dd:44:e6:a8:
         3f:64:d5:ce:07:9a:a9:30:47:41:30:5e:39:ba:f3:aa:34:d7:
         57:1e:ad:df:bd:6c:6d:36:b4:d5:dc:88:c1:f8:e0:66:59:e2:
         d7:43:5a:c2:e4:c1:09:12:dd:05:f3:61:9d:35:f8:d5:93:18:
         39:ec:d6:95:c4:64:01:24:34:63:ba:f0:44:0e:b5:1d:ec:af:
         27:0d:96:0a:de:21:e0:63:c7:ef:33:69:6b:e2:e2:af:7f:fa:
         8e:cf:7f:c1
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzKKVd0SCdmt4ohTZnMClJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjQwMTAyMTIzMjM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODE1MWM4NTNjM2FhM2ZlNzQxOTQ2OGI3MjE0M2ZjZDJlMTA3YzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTZBpwL9qe9eErkpUPKmMEzSB4ZB
8gl73pDYQ9gKymGINT5E7nHZPg4zD173a9CfkzzmgEx/k31HwL+lC7A31VCtutBh
6JgyMwdI5GJI6OtrxTNLp7hx6b9k3At84tcufY6bZSDIMwwNtEgn8Obzq58E7QM0
U88gWdNb3divKAoDUJp50X6O6CSUABp3QTECYqEo4Oa1ePr4uo4ZiudxD/XDXRIa
GCCcZN2StlL9SFZ9OuZ2ydorly09SNCeglUqzuDnYobHbS+vBmIzCkHP5d9Nt0NK
JwTAQC4BLPdyM8v4lv0Y4bGGzROUU+Fcel6cy0Nq/tZcNHuojCd4WTzcFQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBgVHIU8OqP+dBlGi3IUP80uEHwmMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvR0JVY2hUdzZvXzUwR1VhTGNoUV96UzRRZkNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvBc
MA0GCSqGSIb3DQEBCwUAA4IBAQAJ6wg3VC4htF+H+QsuzsbDQeHThoU3EthEW006
kIuwSC37/h9fk/gfyZUCNUDzaqZ1YjbRMMdWxywDEF3F9B4UOm+w93ixwMJK7hbg
TSDA/DaBpby0FP48F0kOHL9dYK+dLEigK8uJ6OOh9BcHe4DqnZeczNDUBItEdGbl
oO8tiIfU23lpnRAPUdUTKgkrTGKsO+BJtPPLiXd/L8es2d1E5qg/ZNXOB5qpMEdB
MF45uvOqNNdXHq3fvWxtNrTV3IjB+OBmWeLXQ1rC5MEJEt0F82GdNfjVkxg57NaV
xGQBJDRjuvBEDrUd7K8nDZYK3iHgY8fvM2lr4uKvf/qOz3/B
-----END CERTIFICATE-----