Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nZplEZcZql4PUy2yUDgDtW7DxmM.roa
File:                     nZplEZcZql4PUy2yUDgDtW7DxmM.roa (raw, json)
Hash identifier:          h6ZkHMUJNBrOmbm9Ivib/d+BR/VL5EGZaszVV3VfrAA=
Subject key identifier:   9D:9A:65:11:97:19:AA:5E:0F:53:2D:B2:50:38:03:B5:6E:C3:C6:63
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       018CE99ABBEDD79599C866200BB72375ECAE
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nZplEZcZql4PUy2yUDgDtW7DxmM.roa
Signing time:             Mon 08 Jan 2024 15:04:40 +0000
ROA not before:           Mon 08 Jan 2024 15:04:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42371
IP address blocks:        213.181.199.0/24 maxlen: 24
                          2a02:730:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:e9:9a:bb:ed:d7:95:99:c8:66:20:0b:b7:23:75:ec:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Jan  8 15:04:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9d9a65119719aa5e0f532db2503803b56ec3c663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:55:cc:33:c1:7b:b9:f1:8f:0d:95:a6:ad:c7:
                    b8:4c:2c:1d:fa:14:89:78:49:79:58:c9:65:3e:de:
                    e3:6f:df:fb:7a:6a:83:2b:52:b0:e6:c7:cb:a7:7d:
                    16:a1:e2:60:a8:c5:fd:e1:1a:7e:4c:ed:20:ac:de:
                    2b:35:29:df:20:f4:e3:b0:4e:78:a6:aa:97:1f:f3:
                    c6:73:f9:8c:75:fa:88:52:5b:17:a7:41:b4:3f:6f:
                    bd:eb:c9:6a:b3:b6:0c:d8:a4:e1:8e:07:f2:e0:d9:
                    a3:98:f9:71:53:46:6d:6c:92:e0:75:0f:43:3c:93:
                    4e:0b:de:1e:1d:f9:f9:ff:f5:d9:61:9e:73:62:0e:
                    51:16:1f:70:04:60:c8:18:2d:4d:dd:2b:da:5d:e5:
                    1c:64:ec:e9:7d:2d:71:9d:5a:43:f0:6b:34:ff:83:
                    f7:66:7a:da:97:f7:c9:8e:6f:dd:98:dd:7a:f9:65:
                    98:78:a1:33:46:55:08:8c:2a:81:99:a4:8c:5c:af:
                    29:92:bc:2f:6a:a3:4f:6b:d6:09:df:49:f3:ce:f8:
                    07:2e:c7:67:00:94:b8:a9:61:40:7d:15:e7:18:38:
                    3c:d6:b6:1d:2a:46:59:84:3e:d8:b6:f9:13:c1:49:
                    e2:95:ff:73:1e:0b:5c:4e:46:ee:3c:dd:cb:e5:bb:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9A:65:11:97:19:AA:5E:0F:53:2D:B2:50:38:03:B5:6E:C3:C6:63
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nZplEZcZql4PUy2yUDgDtW7DxmM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.181.199.0/24
                IPv6:
                  2a02:730:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:7b:ba:69:e2:1b:a3:f6:86:a9:31:b8:59:35:bd:45:bd:
         a5:85:81:f6:ab:77:f8:8c:66:b1:f0:b6:b5:75:a4:f4:a4:0f:
         bb:3a:6c:d4:65:04:73:0d:8e:3c:61:b8:e9:00:63:b6:74:79:
         4c:6b:75:eb:eb:3e:02:96:ac:ea:f1:45:e2:72:a2:cb:08:f6:
         31:81:4e:90:a0:8e:a0:3d:fb:33:2c:40:65:74:3a:f9:52:2c:
         da:32:48:e7:86:d2:31:90:d2:89:ab:0e:5f:96:97:f1:e8:37:
         a2:d4:81:a7:20:ab:7a:70:17:6c:96:e9:05:7b:12:12:65:71:
         74:ca:29:27:eb:29:87:01:32:11:28:0b:8e:5e:5e:03:47:7a:
         b6:df:69:a8:ef:32:ce:10:5b:90:2a:9e:7f:16:bb:26:3d:ce:
         e6:f3:6e:d6:02:d2:b5:09:6a:26:22:83:b3:36:e3:f6:d7:21:
         cc:8d:94:c4:dd:ce:0b:aa:af:30:6a:f9:bd:2f:f3:32:83:2f:
         1f:aa:ea:40:b8:22:18:2e:37:c9:cf:51:68:fa:b9:fb:f1:b9:
         a1:84:34:49:2e:bf:68:3e:2d:8d:e7:ca:d5:1b:0d:d7:b4:9a:
         0d:d6:51:85:78:d1:ed:d4:76:85:b3:d3:bd:99:ca:7f:32:af:
         89:6a:75:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzpmrvt15WZyGYgC7cjdeyuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwMTA4MTUwNDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDlhNjUxMTk3MTlhYTVlMGY1MzJkYjI1MDM4MDNiNTZlYzNjNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVXMM8F7ufGPDZWmrce4TCwd+hSJ
eEl5WMllPt7jb9/7emqDK1Kw5sfLp30WoeJgqMX94Rp+TO0grN4rNSnfIPTjsE54
pqqXH/PGc/mMdfqIUlsXp0G0P2+968lqs7YM2KThjgfy4NmjmPlxU0ZtbJLgdQ9D
PJNOC94eHfn5//XZYZ5zYg5RFh9wBGDIGC1N3SvaXeUcZOzpfS1xnVpD8Gs0/4P3
Znral/fJjm/dmN16+WWYeKEzRlUIjCqBmaSMXK8pkrwvaqNPa9YJ30nzzvgHLsdn
AJS4qWFAfRXnGDg81rYdKkZZhD7YtvkTwUnilf9zHgtcTkbuPN3L5bu+PwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ2aZRGXGapeD1MtslA4A7Vuw8ZjMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvblpwbEVaY1pxbDRQVXkyeVVEZ0R0VzdEeG1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1bXHMA8E
AgACMAkDBwAqAgcwQAAwDQYJKoZIhvcNAQELBQADggEBAIRqe7pp4huj9oapMbhZ
Nb1FvaWFgfard/iMZrHwtrV1pPSkD7s6bNRlBHMNjjxhuOkAY7Z0eUxrdevrPgKW
rOrxReJyossI9jGBTpCgjqA9+zMsQGV0OvlSLNoySOeG0jGQ0omrDl+Wl/HoN6LU
gacgq3pwF2yW6QV7EhJlcXTKKSfrKYcBMhEoC45eXgNHerbfaajvMs4QW5Aqnn8W
uyY9zubzbtYC0rUJaiYig7M24/bXIcyNlMTdzguqrzBq+b0v8zKDLx+q6kC4Ihgu
N8nPUWj6ufvxuaGENEkuv2g+LY3nytUbDde0mg3WUYV40e3UdoWz072Zyn8yr4lq
dUM=
-----END CERTIFICATE-----