Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/jW50T7Kp99kdlsBGYanAhMOr7tk.roa
File:                     jW50T7Kp99kdlsBGYanAhMOr7tk.roa (raw, json)
Hash identifier:          fsUaitBIC2C+2BEroQrQLDuCgK13EVbCffIDufK7Px4=
Subject key identifier:   8D:6E:74:4F:B2:A9:F7:D9:1D:96:C0:46:61:A9:C0:84:C3:AB:EE:D9
Certificate issuer:       /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial:       018CCA2BD395F972A700A43E6D815F0F9E2D
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/jW50T7Kp99kdlsBGYanAhMOr7tk.roa
Signing time:             Tue 02 Jan 2024 12:35:18 +0000
ROA not before:           Tue 02 Jan 2024 12:35:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12552
IP address blocks:        91.208.188.0/24 maxlen: 24
                          2001:67c:43c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:d3:95:f9:72:a7:00:a4:3e:6d:81:5f:0f:9e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
        Validity
            Not Before: Jan  2 12:35:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8d6e744fb2a9f7d91d96c04661a9c084c3abeed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:86:42:82:1f:d4:f7:00:32:2b:c3:49:3c:
                    2b:c2:fa:3e:bd:f3:4e:86:33:a9:cf:4f:62:28:09:
                    25:53:33:96:b5:15:71:40:7c:f5:e6:58:70:c3:c8:
                    13:09:ad:bd:55:fe:e9:2e:d9:3d:53:0f:b6:ac:eb:
                    36:c0:12:b0:b7:49:82:1a:cb:3c:ef:2b:5e:2c:2d:
                    52:75:d4:53:84:67:41:b6:f1:5c:cb:a3:52:ca:9b:
                    f2:d1:d6:b9:55:73:96:05:33:e7:43:e5:8e:64:3f:
                    b6:f1:b4:60:b7:1d:a8:ef:3e:af:27:a6:2a:ab:12:
                    d7:f4:26:27:40:f2:ca:e7:7f:a2:d6:c9:c5:0a:91:
                    e8:f5:06:d6:b8:a7:68:37:ac:9e:32:ae:39:4d:0b:
                    97:d2:23:57:77:38:b2:0d:7f:f2:47:ba:2d:15:df:
                    a3:27:7c:bc:5f:f4:1e:26:9c:8f:19:58:a7:81:0f:
                    9a:49:47:64:08:e8:68:4e:d8:4a:48:d3:f8:90:0b:
                    af:b9:15:2c:6f:e8:ec:9c:69:57:8c:ef:bf:5d:a6:
                    07:a1:c8:28:75:68:4d:00:d8:3f:37:da:54:23:f9:
                    1b:97:d2:7d:65:92:dc:61:e6:a9:ac:bf:13:ba:ff:
                    6c:61:bf:82:c7:16:62:fd:f2:3c:4e:8d:71:33:a0:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6E:74:4F:B2:A9:F7:D9:1D:96:C0:46:61:A9:C0:84:C3:AB:EE:D9
            X509v3 Authority Key Identifier:
                keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/jW50T7Kp99kdlsBGYanAhMOr7tk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.188.0/24
                IPv6:
                  2001:67c:43c::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:01:d1:02:be:7e:c5:8b:3b:54:7b:6a:15:fb:63:14:03:78:
         87:b0:ec:f3:6c:eb:91:3d:d4:3b:cb:07:d1:40:e6:cf:db:01:
         6d:62:ea:6f:31:55:cd:2b:fe:74:92:21:5e:5b:16:e4:a0:a7:
         3e:90:b6:be:33:c2:41:77:3f:f4:d6:83:e3:b9:12:0a:b9:09:
         48:8f:24:de:0a:09:4c:ae:08:e2:05:3d:58:46:68:aa:9c:0f:
         0b:f3:1f:fd:b3:77:74:84:e2:93:ff:fc:b4:0a:47:e1:51:da:
         39:3a:42:77:48:86:23:25:ea:af:28:69:46:31:2c:49:cc:c0:
         73:fd:13:91:77:e3:6e:3e:bc:a4:1b:4a:ab:59:5a:a2:c9:b0:
         ff:7e:5e:f7:d8:8b:1b:de:5d:53:76:3b:92:ab:b3:de:f0:1a:
         81:d4:cf:c7:96:a2:29:6f:01:f5:e3:a6:5e:2d:cb:39:7f:35:
         ca:46:6d:00:fb:40:1b:9d:43:a9:36:f7:7c:6b:72:b3:97:88:
         77:52:8e:d9:70:45:56:a7:93:b8:02:f7:d8:9e:17:97:ca:24:
         2c:c1:79:12:09:92:b5:3d:75:f3:cf:fe:3d:5c:03:9f:9a:9d:
         23:14:07:65:07:5b:06:bd:ea:0a:ec:c1:2f:f3:41:86:15:7c:
         8f:1c:28:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzKK9OV+XKnAKQ+bYFfD54tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi
N2YxMDIwHhcNMjQwMTAyMTIzNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDZlNzQ0ZmIyYTlmN2Q5MWQ5NmMwNDY2MWE5YzA4NGMzYWJlZWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO+GQoIf1PcAMivDSTwrwvo+vfNO
hjOpz09iKAklUzOWtRVxQHz15lhww8gTCa29Vf7pLtk9Uw+2rOs2wBKwt0mCGss8
7yteLC1SddRThGdBtvFcy6NSypvy0da5VXOWBTPnQ+WOZD+28bRgtx2o7z6vJ6Yq
qxLX9CYnQPLK53+i1snFCpHo9QbWuKdoN6yeMq45TQuX0iNXdziyDX/yR7otFd+j
J3y8X/QeJpyPGVingQ+aSUdkCOhoTthKSNP4kAuvuRUsb+jsnGlXjO+/XaYHocgo
dWhNANg/N9pUI/kbl9J9ZZLcYeaprL8Tuv9sYb+CxxZi/fI8To1xM6A6OQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFI1udE+yqffZHZbARmGpwITDq+7ZMB8GA1UdIwQY
MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt
OGJkOTc2OTEwZGJmLzEvalc1MFQ3S3A5OWtkbHNCR1lhbkFoTU9yN3RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm
LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9C8MA8E
AgACMAkDBwAgAQZ8BDwwDQYJKoZIhvcNAQELBQADggEBAFoB0QK+fsWLO1R7ahX7
YxQDeIew7PNs65E91DvLB9FA5s/bAW1i6m8xVc0r/nSSIV5bFuSgpz6Qtr4zwkF3
P/TWg+O5Egq5CUiPJN4KCUyuCOIFPVhGaKqcDwvzH/2zd3SE4pP//LQKR+FR2jk6
QndIhiMl6q8oaUYxLEnMwHP9E5F3424+vKQbSqtZWqLJsP9+XvfYixveXVN2O5Kr
s97wGoHUz8eWoilvAfXjpl4tyzl/NcpGbQD7QBudQ6k293xrcrOXiHdSjtlwRVan
k7gC99ieF5fKJCzBeRIJkrU9dfPP/j1cA5+anSMUB2UHWwa96grswS/zQYYVfI8c
KNo=
-----END CERTIFICATE-----