Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GOViSBTW1hLoJWhPic64VKs4g5A.roa
File:                     GOViSBTW1hLoJWhPic64VKs4g5A.roa (raw, json)
Hash identifier:          ADtsgw/1rmVT/0+dY4koI+9yJys3FtA6ZcutiAJftD0=
Subject key identifier:   18:E5:62:48:14:D6:D6:12:E8:25:68:4F:89:CE:B8:54:AB:38:83:90
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       0194282762E059EA1D9F0CF90E4EBCBAAA59
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GOViSBTW1hLoJWhPic64VKs4g5A.roa
Signing time:             Thu 02 Jan 2025 17:54:17 +0000
ROA not before:           Thu 02 Jan 2025 17:54:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199785
IP address blocks:        93.115.175.0/24 maxlen: 24
                          193.228.139.0/24 maxlen: 24
                          212.192.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Feb 2025 09:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:27:62:e0:59:ea:1d:9f:0c:f9:0e:4e:bc:ba:aa:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  2 17:54:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=18e5624814d6d612e825684f89ceb854ab388390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:01:63:f9:f7:af:3e:d1:3f:eb:4d:1d:0a:
                    f4:a7:9e:fd:1f:f0:09:34:6f:43:3f:8b:97:5c:e5:
                    b5:66:07:a5:aa:73:24:a0:8d:41:cd:97:f5:e0:70:
                    88:23:c5:c5:3d:74:fb:90:e6:79:2c:72:df:52:95:
                    73:9d:69:4e:3c:6c:7d:67:a0:0b:2e:d8:60:18:a0:
                    96:f8:76:26:06:ad:25:c5:75:7d:dd:60:98:84:37:
                    3a:27:e8:5c:3f:79:df:a5:b0:b1:51:a5:97:3c:26:
                    62:74:9f:41:da:c4:58:27:df:b5:f6:80:44:5e:00:
                    03:48:e1:aa:12:4f:6c:d6:ad:0c:16:52:4e:1b:1b:
                    44:e5:18:58:78:77:b7:c7:73:8f:8f:ea:f0:39:6d:
                    3f:b0:19:ec:04:62:19:18:fb:89:84:69:f4:cb:9a:
                    52:c9:25:cd:8b:67:40:d5:17:6b:5c:f3:e5:00:1e:
                    c8:db:96:6d:0c:c4:44:59:71:56:18:6f:22:1a:d9:
                    d0:0d:3d:91:81:8f:59:5a:ba:9f:09:32:62:63:ae:
                    34:e1:c8:06:c7:15:28:5a:dc:70:0d:e0:e9:e1:af:
                    51:cb:31:ea:ad:64:87:37:21:57:b7:a1:38:ce:84:
                    da:ef:ab:89:24:81:03:ac:31:3f:c6:9c:ee:fc:4a:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:62:48:14:D6:D6:12:E8:25:68:4F:89:CE:B8:54:AB:38:83:90
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/GOViSBTW1hLoJWhPic64VKs4g5A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.175.0/24
                  193.228.139.0/24
                  212.192.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:bb:a0:9a:94:a6:1e:85:5f:31:a9:40:b2:fd:39:44:8f:99:
         64:ba:5d:92:a4:a5:b0:99:3b:50:74:05:65:1e:21:2d:4f:52:
         09:2b:5b:09:75:da:7c:a6:eb:d2:26:d2:c6:f3:de:08:dc:fb:
         e8:2d:33:18:e2:2e:70:18:0e:ee:1d:6f:16:17:ce:80:54:67:
         70:1a:b1:58:5c:2b:3b:3d:81:b2:52:d9:2c:49:92:0e:e6:18:
         6b:ef:bb:32:a1:6f:8f:32:9f:a3:4e:16:84:0d:ea:1e:de:97:
         2f:2e:a5:00:4b:e3:e3:a3:82:01:2a:b0:88:40:5a:c6:da:68:
         77:8e:61:3a:77:23:fd:a1:97:18:91:03:8f:25:c4:c2:81:b5:
         04:11:fa:88:76:09:3a:4d:54:72:d8:3c:d9:70:00:14:81:29:
         16:e1:9d:66:67:ea:90:46:7e:81:1a:f5:e4:1c:6a:4f:36:36:
         d3:60:fb:a3:cd:79:1b:2c:e6:1b:0a:0f:15:8d:f4:12:a1:2b:
         5a:e2:22:e7:c1:6e:1e:62:3e:59:30:4b:1a:05:b0:84:15:b6:
         14:90:f4:a2:90:29:c3:d3:59:46:22:60:c7:c6:39:a9:5e:e0:
         1c:3c:e0:89:bb:c4:89:83:88:83:ef:d9:ae:5c:9c:28:ec:71:
         85:78:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:56:54 2025 by rpki-client