Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/y3Ulg4MRl2Rp-uPtFxq5ljgzEc4.roa
File:                     y3Ulg4MRl2Rp-uPtFxq5ljgzEc4.roa (raw, json)
Hash identifier:          s3tlub+gijUYdIpKjxBrWCMS3eH9fSAksqiHKZHCeA8=
Subject key identifier:   CB:75:25:83:83:11:97:64:69:FA:E3:ED:17:1A:B9:96:38:33:11:CE
Certificate issuer:       /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial:       018CC500EADB41E2C7B21A226478BED76345
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/y3Ulg4MRl2Rp-uPtFxq5ljgzEc4.roa
Signing time:             Mon 01 Jan 2024 12:30:20 +0000
ROA not before:           Mon 01 Jan 2024 12:30:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29208
IP address blocks:        185.176.137.0/24 maxlen: 32
                          185.176.136.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Jun 2024 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:ea:db:41:e2:c7:b2:1a:22:64:78:be:d7:63:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
        Validity
            Not Before: Jan  1 12:30:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cb7525838311976469fae3ed171ab996383311ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:16:a5:61:fc:b7:20:c6:ed:82:b6:2f:74:
                    14:fd:ec:8e:da:97:b5:21:1a:71:db:00:c6:11:71:
                    c5:4b:34:c6:0e:d0:be:18:2e:55:4c:af:bb:2f:91:
                    ea:1a:47:fd:8c:7c:e5:45:27:c8:19:f0:be:98:76:
                    9b:8d:11:6e:ee:79:17:34:83:1e:30:57:dc:8e:97:
                    70:60:df:f3:28:da:c0:c9:12:fb:29:d1:6a:e3:92:
                    7a:ff:09:c2:67:40:f7:64:c8:1e:55:c3:a8:90:db:
                    a7:3d:0a:8c:85:30:37:7d:76:84:fd:4a:08:56:4a:
                    28:db:09:01:3f:4e:ff:f5:74:c9:90:8b:07:f9:4a:
                    5b:13:94:19:27:64:8c:0f:5c:4b:4c:04:74:9f:73:
                    27:54:be:3c:0e:26:1a:e6:d8:e5:55:9f:da:d1:98:
                    81:30:c5:f2:49:aa:49:b8:f6:81:16:14:fb:77:3d:
                    c8:bf:6f:d8:d1:31:85:59:b7:3b:89:a5:3d:d9:4d:
                    01:19:fa:85:9c:38:d1:67:ef:c5:d3:16:c5:81:15:
                    10:4b:96:b3:0f:df:23:33:20:da:8f:b9:d0:17:7a:
                    e4:2b:b6:2a:67:0d:3e:b7:8c:74:0a:8e:88:d9:2a:
                    0d:d6:38:1e:a4:92:6a:d0:7a:8f:33:cb:61:bf:62:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:75:25:83:83:11:97:64:69:FA:E3:ED:17:1A:B9:96:38:33:11:CE
            X509v3 Authority Key Identifier:
                keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/y3Ulg4MRl2Rp-uPtFxq5ljgzEc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:49:d6:d2:6d:57:35:9b:3a:c3:83:e2:36:6e:e6:db:9f:5a:
         8a:b9:7a:13:8a:ff:c9:ec:0a:5c:28:d6:8a:0f:d0:4c:e6:98:
         20:9b:2a:7c:f6:9e:6c:6a:6c:57:48:f8:fa:36:ae:94:f2:3c:
         8c:54:66:68:dc:f1:18:20:da:07:7d:c8:c3:37:d8:0f:dd:c7:
         2f:64:e8:f4:ec:bc:1d:70:c4:ca:31:19:09:e1:91:13:31:1f:
         61:b6:54:68:8f:19:1a:39:e5:f4:f5:ad:65:5c:f9:71:92:39:
         d4:be:6e:4f:25:e1:37:4b:b6:58:1c:c0:c7:a7:ec:17:04:03:
         ec:08:34:b2:bd:32:54:08:6c:0a:3e:a3:96:a0:4d:d6:ae:e0:
         7a:fc:6b:6e:5f:4c:98:ce:91:53:8a:27:40:ba:34:af:d6:9c:
         47:3e:e1:a9:25:43:87:7a:41:c8:5e:44:30:b3:cd:3e:59:17:
         74:0b:89:ff:2f:da:73:51:2b:0b:2e:ce:23:e8:b1:83:6c:93:
         9e:28:43:ed:0b:d1:ed:14:94:af:d0:75:53:97:a7:9a:1b:9b:
         83:55:af:52:eb:c9:ba:d1:13:d4:27:d9:28:2c:76:af:de:1d:
         70:ae:d4:e5:a1:0a:dd:62:f3:e2:9a:64:ca:81:42:b4:ed:ca:
         ba:71:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----