Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/YflcOjfckLQt7-QsdL-CecSiDpc.roa
File:                     YflcOjfckLQt7-QsdL-CecSiDpc.roa (raw, json)
Hash identifier:          kS5C4VpiF3p6eCrpj/WrI9yfqzr6pri1FRSQd/ydi0g=
Subject key identifier:   61:F9:5C:3A:37:DC:90:B4:2D:EF:E4:2C:74:BF:82:79:C4:A2:0E:97
Certificate issuer:       /CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
Certificate serial:       018CC3488DAE027CC04F58B4AC15A656D8C1
Authority key identifier: 19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/YflcOjfckLQt7-QsdL-CecSiDpc.roa
Signing time:             Mon 01 Jan 2024 04:29:21 +0000
ROA not before:           Mon 01 Jan 2024 04:29:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209050
IP address blocks:        5.183.216.0/22 maxlen: 24
                          2a0e:a600::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:8d:ae:02:7c:c0:4f:58:b4:ac:15:a6:56:d8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ca6549d264f8998ae8a8dbbd65a964504896ab
        Validity
            Not Before: Jan  1 04:29:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=61f95c3a37dc90b42defe42c74bf8279c4a20e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:57:22:95:27:fe:8a:6e:06:32:c8:f0:4a:
                    65:39:2e:17:fe:1f:5f:eb:4e:4f:c2:a2:51:f2:4a:
                    10:64:96:c0:1a:9f:bd:ee:1a:df:4b:bc:f6:5c:14:
                    85:3f:65:81:7d:62:a1:00:31:71:5e:6d:f3:16:07:
                    59:e8:58:bc:85:bf:22:1c:32:99:fa:0c:f8:8b:8f:
                    a9:69:bf:ce:02:5d:36:42:a0:a0:fb:8e:23:68:18:
                    31:a7:6a:fd:25:e2:b0:4d:9d:1b:62:e6:a5:2e:78:
                    25:db:fa:82:29:9c:c6:1d:65:5d:4b:91:a9:7d:b2:
                    8c:d3:d8:a5:68:2d:87:ed:c2:8b:92:32:da:71:7c:
                    f2:49:11:ca:43:32:e1:be:40:eb:76:69:00:00:6e:
                    09:de:54:66:7b:42:7f:27:2c:fa:db:52:d4:9b:15:
                    87:eb:50:b4:36:53:e9:a4:16:d0:eb:4f:e9:89:90:
                    9a:44:98:3c:85:5f:44:4b:f0:3f:e2:8d:be:ba:82:
                    d9:8e:48:c6:a4:9d:26:59:c7:7e:d1:4e:cb:35:1e:
                    f9:2e:8a:30:14:6d:2d:e3:50:34:f9:db:e9:af:94:
                    5d:a0:83:10:d7:b3:4c:50:ca:61:1b:ef:11:af:29:
                    57:44:67:47:3d:6a:a2:0f:1a:47:a2:0d:ba:1d:ee:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F9:5C:3A:37:DC:90:B4:2D:EF:E4:2C:74:BF:82:79:C4:A2:0E:97
            X509v3 Authority Key Identifier:
                keyid:19:CA:65:49:D2:64:F8:99:8A:E8:A8:DB:BD:65:A9:64:50:48:96:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcplSdJk-JmK6KjbvWWpZFBIlqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/YflcOjfckLQt7-QsdL-CecSiDpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/19500a-d8a9-4a31-8931-5e700dd6b9ee/1/GcplSdJk-JmK6KjbvWWpZFBIlqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.216.0/22
                IPv6:
                  2a0e:a600::/29

    Signature Algorithm: sha256WithRSAEncryption
         49:84:ae:1a:b7:27:63:96:7f:b2:d6:c7:e7:26:3e:0a:35:f6:
         35:b0:5a:c8:2c:19:4c:c3:d5:c0:3e:34:8f:6b:bd:2d:e4:a7:
         67:7a:17:ac:77:b8:80:c9:0a:f9:55:36:01:b5:05:e9:ff:8a:
         4d:ec:85:9e:a2:5a:60:00:05:00:58:c0:32:ee:e1:d5:fb:8d:
         f5:3a:c8:e0:a7:68:50:3a:68:94:0e:33:a9:80:5a:a2:a3:7c:
         58:b3:fc:0e:73:f0:9f:e6:e0:60:55:ec:ac:cd:a0:91:bb:d5:
         70:3f:d3:66:08:01:26:8d:44:9b:cd:78:10:5b:c7:3a:31:62:
         5a:82:1f:ea:c1:03:5c:6f:ad:07:6a:fc:dd:91:d1:37:01:7c:
         19:88:0a:14:4a:a7:13:bf:05:cb:64:8e:06:ca:59:df:1f:50:
         b8:11:73:c9:84:15:db:5e:74:7f:48:0c:1a:15:fa:ae:6f:85:
         71:d7:78:71:8b:6c:6e:3f:21:d0:73:17:46:b3:c1:09:06:96:
         63:21:cf:03:ce:6c:bb:6b:a7:f3:ac:e6:d3:3c:ca:f8:bc:8a:
         24:ae:96:5d:85:3e:71:80:1d:c3:16:91:43:33:75:70:a0:32:
         79:5b:f4:73:c4:72:71:8c:b9:f7:29:83:76:1d:07:7d:68:b1:
         66:4a:f0:38
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzDSI2uAnzAT1i0rBWmVtjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2E2NTQ5ZDI2NGY4OTk4YWU4YThkYmJkNjVhOTY0NTA0
ODk2YWIwHhcNMjQwMTAxMDQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWY5NWMzYTM3ZGM5MGI0MmRlZmU0MmM3NGJmODI3OWM0YTIwZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSBXIpUn/opuBjLI8EplOS4X/h9f
605PwqJR8koQZJbAGp+97hrfS7z2XBSFP2WBfWKhADFxXm3zFgdZ6Fi8hb8iHDKZ
+gz4i4+pab/OAl02QqCg+44jaBgxp2r9JeKwTZ0bYualLngl2/qCKZzGHWVdS5Gp
fbKM09ilaC2H7cKLkjLacXzySRHKQzLhvkDrdmkAAG4J3lRme0J/Jyz621LUmxWH
61C0NlPppBbQ60/piZCaRJg8hV9ES/A/4o2+uoLZjkjGpJ0mWcd+0U7LNR75Loow
FG0t41A0+dvpr5RdoIMQ17NMUMphG+8RrylXRGdHPWqiDxpHog26He7qAwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGH5XDo33JC0Le/kLHS/gnnEog6XMB8GA1UdIwQY
MBaAFBnKZUnSZPiZiuio271lqWRQSJarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEt
NWU3MDBkZDZiOWVlLzEvWWZsY09qZmNrTFF0Ny1Rc2RMLUNlY1NpRHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xOTUwMGEtZDhhOS00YTMxLTg5MzEtNWU3MDBkZDZiOWVl
LzEvR2NwbFNkSmstSm1LNktqYnZXV3BaRkJJbHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCBbfYMA0E
AgACMAcDBQMqDqYAMA0GCSqGSIb3DQEBCwUAA4IBAQBJhK4atydjln+y1sfnJj4K
NfY1sFrILBlMw9XAPjSPa70t5Kdnehesd7iAyQr5VTYBtQXp/4pN7IWeolpgAAUA
WMAy7uHV+431Osjgp2hQOmiUDjOpgFqio3xYs/wOc/Cf5uBgVeyszaCRu9VwP9Nm
CAEmjUSbzXgQW8c6MWJagh/qwQNcb60HavzdkdE3AXwZiAoUSqcTvwXLZI4Gylnf
H1C4EXPJhBXbXnR/SAwaFfqub4Vx13hxi2xuPyHQcxdGs8EJBpZjIc8Dzmy7a6fz
rObTPMr4vIokrpZdhT5xgB3DFpFDM3VwoDJ5W/RzxHJxjLn3KYN2HQd9aLFmSvA4
-----END CERTIFICATE-----