Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1M1shnmD-27HNVFTUlmmKrOtM9w.roa
File:                     1M1shnmD-27HNVFTUlmmKrOtM9w.roa (raw, json)
Hash identifier:          ia/7A+qFgoCVZzhPZuMaciJGH8jZ39LHLBGeTDKqcVw=
Subject key identifier:   D4:CD:6C:86:79:83:FB:6E:C7:35:51:53:52:59:A6:2A:B3:AD:33:DC
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       018CC64B4CBB4AB4093F545223398221C4E5
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1M1shnmD-27HNVFTUlmmKrOtM9w.roa
Signing time:             Mon 01 Jan 2024 18:31:12 +0000
ROA not before:           Mon 01 Jan 2024 18:31:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202283
IP address blocks:        2a02:1041::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:4c:bb:4a:b4:09:3f:54:52:23:39:82:21:c4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Jan  1 18:31:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d4cd6c867983fb6ec73551535259a62ab3ad33dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:6f:9f:b7:88:dc:a4:92:cc:57:c7:4a:a8:
                    ef:28:7b:91:bb:95:ed:b1:83:38:56:6b:65:9e:cc:
                    bb:8c:87:3c:5e:fd:16:42:e2:33:7a:b0:25:cf:22:
                    83:de:67:5d:ca:da:80:ed:cc:39:a1:bf:fa:11:0b:
                    1a:68:86:0e:23:5d:b8:9a:60:1f:45:27:b1:52:4f:
                    6e:f5:f2:2f:fe:62:71:82:a6:85:53:b2:fa:43:a3:
                    64:c3:68:bc:15:ab:81:a0:b1:88:f0:df:90:53:ab:
                    f2:ec:93:2c:cd:90:b5:67:e0:23:0b:0a:4a:d9:23:
                    af:5c:e3:bc:fb:b0:f4:d3:02:35:f8:b8:56:f6:96:
                    32:63:4c:a7:f7:92:84:fd:88:ed:f5:5f:0e:d7:a4:
                    a1:3f:dc:bd:0d:dd:06:0c:4a:9e:13:fc:87:0d:81:
                    e1:dc:ea:40:0e:b7:28:d5:eb:8f:fb:65:83:c4:24:
                    ed:96:ca:77:5e:00:a5:15:e1:00:33:96:d5:6e:7e:
                    bc:13:b8:27:20:a1:4d:82:3d:02:90:90:29:9f:72:
                    cf:0c:8b:d9:0f:e9:78:7e:46:b7:a9:ff:92:80:bb:
                    7a:a3:d6:2e:15:1f:a7:1a:ff:f3:bb:e3:55:a9:1f:
                    bb:69:8b:b2:50:b5:d4:a1:41:90:35:a0:25:80:a5:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CD:6C:86:79:83:FB:6E:C7:35:51:53:52:59:A6:2A:B3:AD:33:DC
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/1M1shnmD-27HNVFTUlmmKrOtM9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:1041::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:97:3a:89:2e:cd:5f:77:31:3a:61:45:0d:34:a6:ea:71:e6:
         7d:56:36:2c:34:f3:14:88:17:9b:84:b5:ed:7d:42:0e:17:2a:
         fc:87:d5:05:61:1f:08:eb:c0:25:55:a9:70:4b:d9:82:08:a4:
         1d:ee:22:85:8e:b8:6d:cd:68:14:c5:ce:38:40:9d:cc:b2:90:
         63:f0:67:6a:f3:f7:d6:71:99:42:ad:a1:56:fe:9e:ef:ea:ba:
         ce:cd:32:38:58:80:7c:c6:20:2d:29:a0:c8:25:6f:2b:3f:90:
         31:56:83:ea:ee:c7:65:b3:52:44:94:6a:d6:84:d5:cd:85:ff:
         c0:0a:2c:33:27:e4:37:42:a6:e8:d7:9c:87:d5:95:16:9d:b3:
         84:d8:2e:d2:b9:23:db:af:34:b7:09:c1:ba:f2:51:3f:0a:28:
         bb:af:12:ba:a1:35:dd:72:e5:5d:cc:66:bd:9b:61:0a:c3:c4:
         e6:fb:49:90:f7:d0:a5:a3:d9:1b:3c:fe:fd:c5:64:b6:cf:89:
         0a:d0:14:5a:58:00:4a:86:00:0e:f9:5f:30:49:59:e4:13:8d:
         f6:16:53:07:45:33:3d:5e:74:b2:25:d8:32:03:13:d0:61:98:
         41:00:09:5c:57:c2:60:dc:89:dd:c3:9e:03:e1:71:03:08:0a:
         70:15:fb:2d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzGS0y7SrQJP1RSIzmCIcTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjQwMTAxMTgzMTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGNkNmM4Njc5ODNmYjZlYzczNTUxNTM1MjU5YTYyYWIzYWQzM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Zvn7eI3KSSzFfHSqjvKHuRu5Xt
sYM4Vmtlnsy7jIc8Xv0WQuIzerAlzyKD3mddytqA7cw5ob/6EQsaaIYOI124mmAf
RSexUk9u9fIv/mJxgqaFU7L6Q6Nkw2i8FauBoLGI8N+QU6vy7JMszZC1Z+AjCwpK
2SOvXOO8+7D00wI1+LhW9pYyY0yn95KE/Yjt9V8O16ShP9y9Dd0GDEqeE/yHDYHh
3OpADrco1euP+2WDxCTtlsp3XgClFeEAM5bVbn68E7gnIKFNgj0CkJApn3LPDIvZ
D+l4fka3qf+SgLt6o9YuFR+nGv/zu+NVqR+7aYuyULXUoUGQNaAlgKWBXwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNTNbIZ5g/tuxzVRU1JZpiqzrTPcMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvMU0xc2hubUQtMjdITlZGVFVsbW1Lck90TTl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgIQQTAN
BgkqhkiG9w0BAQsFAAOCAQEAQ5c6iS7NX3cxOmFFDTSm6nHmfVY2LDTzFIgXm4S1
7X1CDhcq/IfVBWEfCOvAJVWpcEvZggikHe4ihY64bc1oFMXOOECdzLKQY/BnavP3
1nGZQq2hVv6e7+q6zs0yOFiAfMYgLSmgyCVvKz+QMVaD6u7HZbNSRJRq1oTVzYX/
wAosMyfkN0Km6Nech9WVFp2zhNgu0rkj2680twnBuvJRPwoou68SuqE13XLlXcxm
vZthCsPE5vtJkPfQpaPZGzz+/cVkts+JCtAUWlgASoYADvlfMElZ5BON9hZTB0Uz
PV50siXYMgMT0GGYQQAJXFfCYNyJ3cOeA+FxAwgKcBX7LQ==
-----END CERTIFICATE-----