Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/25vV_Hla1Uz5TU7dM8H6qVgL2To.roa
File:                     25vV_Hla1Uz5TU7dM8H6qVgL2To.roa (raw, json)
Hash identifier:          f87ENI3MHssTgPGmoqzQl685IQTawybAiHOiQ2Su5oA=
Subject key identifier:   DB:9B:D5:FC:79:5A:D5:4C:F9:4D:4E:DD:33:C1:FA:A9:58:0B:D9:3A
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       018CC795609E14763043B6D237C44BC471A8
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/25vV_Hla1Uz5TU7dM8H6qVgL2To.roa
Signing time:             Tue 02 Jan 2024 00:31:44 +0000
ROA not before:           Tue 02 Jan 2024 00:31:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50864
IP address blocks:        185.160.89.0/24 maxlen: 24
                          185.160.88.0/24 maxlen: 24
                          2a07:bbc2:1::/48 maxlen: 48
                          2a07:bbc2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:60:9e:14:76:30:43:b6:d2:37:c4:4b:c4:71:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Jan  2 00:31:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=db9bd5fc795ad54cf94d4edd33c1faa9580bd93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c5:be:86:91:35:e3:e5:5f:8a:c4:81:fd:3b:
                    b1:50:df:65:56:52:47:d3:c4:a1:9e:98:ef:7c:73:
                    c5:15:c5:64:0a:37:d0:05:53:ae:fe:6a:ce:6e:f9:
                    92:40:e5:be:5f:a3:d7:2a:72:ec:45:6b:36:3f:32:
                    d5:d0:b1:f8:20:32:65:18:02:04:c9:a9:81:1b:73:
                    7f:3e:9c:f8:5e:8f:61:df:b3:65:44:3c:96:c3:dc:
                    1d:f9:0b:39:37:94:56:dc:30:51:37:22:0a:c1:bd:
                    fe:3d:f2:b5:ea:b9:2d:e1:4e:3c:45:44:5c:15:b3:
                    63:fa:c9:f0:a3:c4:1e:c7:2f:50:5d:ac:2f:ea:3d:
                    c5:3a:f1:b6:48:d1:e5:fc:0b:02:1f:1d:06:93:55:
                    bc:64:cf:ed:2f:2d:09:25:99:53:82:78:9d:29:ce:
                    ba:7b:1d:e6:cf:43:5c:b1:3b:a7:40:1c:d6:21:88:
                    e6:16:71:1e:82:78:85:cf:61:ff:62:aa:7b:63:d2:
                    a2:7c:90:b8:b7:45:dd:44:57:64:b1:4f:4e:ea:3a:
                    cc:a6:16:67:88:70:04:51:6b:9e:a1:bc:64:72:d9:
                    bf:f1:84:c8:3c:a0:5b:2a:eb:d4:61:68:02:6a:eb:
                    cb:d9:9e:b4:4a:6c:b7:ed:66:38:74:7b:7c:b1:a7:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9B:D5:FC:79:5A:D5:4C:F9:4D:4E:DD:33:C1:FA:A9:58:0B:D9:3A
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/25vV_Hla1Uz5TU7dM8H6qVgL2To.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.88.0/23
                IPv6:
                  2a07:bbc2::/47

    Signature Algorithm: sha256WithRSAEncryption
         94:24:84:c1:d9:ac:20:a1:41:f0:bc:e8:69:4e:c3:68:fd:8e:
         0a:03:17:d1:cf:be:16:6e:65:95:bf:76:89:56:05:3b:aa:f9:
         f1:49:62:09:af:77:35:d6:69:8a:b7:b0:a3:2c:df:ce:33:21:
         7c:de:2c:f2:b0:9c:f5:6a:a0:cb:04:13:6f:47:6c:75:26:d5:
         40:59:0b:9e:fe:5f:fe:6d:f1:90:88:9e:5a:9b:89:74:75:7d:
         e4:3a:11:96:cc:96:bd:ed:21:f0:cc:4f:cf:00:06:2a:82:da:
         f1:f7:7b:4e:31:a1:ec:9b:78:97:07:fc:7e:75:bb:20:c1:17:
         72:4c:23:c3:21:0e:13:9b:c8:53:f7:bb:10:c8:ec:29:7c:b0:
         47:fc:74:81:85:31:33:9e:00:5a:47:94:42:21:b3:11:8d:e1:
         6e:73:30:cb:ac:78:43:0a:27:41:5d:bb:2d:fd:b8:80:de:d4:
         f4:fa:24:59:88:cc:1c:fe:ab:46:75:2b:96:d0:3a:d7:67:84:
         9d:91:16:d9:8f:4a:01:a8:3a:21:46:9e:60:02:7d:6e:7b:dd:
         9d:eb:98:0e:35:ba:1a:b2:3f:5f:bb:b8:f5:51:d9:b8:82:f3:
         1a:35:74:dc:ea:a9:65:fc:6e:17:6a:b1:37:a6:82:7f:fe:05:
         cc:eb:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----