Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NkdrpytlYKXV0V_HyQbaqZeNDUY.roa
File:                     NkdrpytlYKXV0V_HyQbaqZeNDUY.roa (raw, json)
Hash identifier:          Ck/JAVr/vMaCGeh3KLfloZeX4/nhUMHP7VNDGgtRNCM=
Subject key identifier:   36:47:6B:A7:2B:65:60:A5:D5:D1:5F:C7:C9:06:DA:A9:97:8D:0D:46
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       018DFA4DA4B4C74273F2C91DC7CA17FFBD86
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NkdrpytlYKXV0V_HyQbaqZeNDUY.roa
Signing time:             Fri 01 Mar 2024 13:56:48 +0000
ROA not before:           Fri 01 Mar 2024 13:56:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49795
IP address blocks:        178.238.213.0/24 maxlen: 24
                          2a02:730:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:fa:4d:a4:b4:c7:42:73:f2:c9:1d:c7:ca:17:ff:bd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Mar  1 13:56:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=36476ba72b6560a5d5d15fc7c906daa9978d0d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:54:82:fb:7e:9f:3e:96:46:08:cb:c4:b1:
                    31:23:a0:e4:d1:32:43:13:94:39:d9:c8:6c:57:3d:
                    20:08:56:b9:40:25:b7:5c:29:d8:aa:8d:65:4c:d0:
                    96:57:00:24:8c:77:df:6c:69:e8:f9:58:d4:4b:db:
                    ac:dc:44:7a:a4:0a:3a:34:3b:2e:42:8f:7d:29:24:
                    6e:92:d2:1a:83:cc:ab:dd:b4:72:af:27:d5:3e:56:
                    cc:14:bc:a1:a2:ab:b6:c5:c8:fa:82:48:35:50:44:
                    c3:a7:24:ed:70:6a:a5:b3:47:7c:13:e0:7a:6e:fc:
                    3f:b9:23:56:42:24:5b:dd:1f:6a:ec:91:2b:3e:61:
                    65:0a:15:ba:74:ad:76:85:06:68:bc:60:8d:72:3a:
                    c0:d1:57:90:55:36:19:9f:8e:ef:be:15:c2:cb:41:
                    ed:13:d6:19:cf:37:fc:87:e0:31:a4:d1:9c:75:36:
                    71:bb:a3:a1:d4:2e:9c:a0:ed:9a:5c:f5:a2:30:47:
                    2d:41:0b:5c:02:ff:5d:6f:70:0c:49:88:7e:a9:b8:
                    9f:d8:01:04:df:2f:e8:15:9d:02:7d:a2:30:97:4a:
                    57:4d:62:26:e8:14:98:2a:9a:cd:d8:60:41:6e:31:
                    f8:90:f7:0b:77:aa:a5:83:02:a8:ce:21:f0:5e:04:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:6B:A7:2B:65:60:A5:D5:D1:5F:C7:C9:06:DA:A9:97:8D:0D:46
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/NkdrpytlYKXV0V_HyQbaqZeNDUY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.238.213.0/24
                IPv6:
                  2a02:730:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:82:b7:7d:75:a6:aa:86:31:c9:1d:73:9e:26:7f:f2:2e:5c:
         25:ce:d8:46:c5:6c:f3:f4:0f:6a:ea:f4:49:87:58:76:03:f2:
         60:35:72:39:62:f2:4e:2b:04:5e:ac:16:30:45:4a:e6:67:88:
         9b:2a:cd:45:c1:a8:b3:e3:9a:ba:42:b3:af:ec:ff:16:3e:96:
         5f:94:b8:a8:9f:3e:74:52:ee:22:d1:e1:dd:17:09:8d:39:cb:
         14:7d:ea:28:61:6e:a4:5a:c7:e0:72:cf:aa:10:ce:b1:39:4b:
         89:fd:e3:7b:af:8c:b3:76:28:92:6d:d6:09:5a:03:dd:88:b2:
         61:78:b2:e1:6f:65:8c:2a:07:d2:cd:92:1c:e4:4b:91:92:09:
         14:a8:e0:d7:f8:e6:cf:3d:a6:38:5f:72:fc:87:13:e0:73:cb:
         37:dc:5f:f5:e6:39:1c:2b:02:61:32:3a:d4:ea:c2:d1:39:cc:
         f1:73:4c:2e:37:82:00:94:6e:88:e5:47:92:e5:4f:f7:28:3d:
         0c:5d:0f:ad:a0:44:aa:34:f6:95:ae:54:1b:24:c1:e2:4c:63:
         fb:72:9e:75:83:59:b6:96:08:3e:01:18:ef:ab:cd:e3:50:32:
         4c:e4:08:f5:3d:aa:f2:75:95:85:82:4a:66:a7:da:87:8a:f6:
         95:f9:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----