Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/ofK6yQZuzc7bB5eBkq7OKP_zcIg.roa
File:                     ofK6yQZuzc7bB5eBkq7OKP_zcIg.roa (raw, json)
Hash identifier:          c+2Wvq5riJ3uEcgaHTzuOHvG49EHdwspAWlOwKBAotE=
Subject key identifier:   A1:F2:BA:C9:06:6E:CD:CE:DB:07:97:81:92:AE:CE:28:FF:F3:70:88
Certificate issuer:       /CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
Certificate serial:       018CC6B8484A759ACFFC945C4DB7F951F7BA
Authority key identifier: E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/ofK6yQZuzc7bB5eBkq7OKP_zcIg.roa
Signing time:             Mon 01 Jan 2024 20:30:14 +0000
ROA not before:           Mon 01 Jan 2024 20:30:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59992
IP address blocks:        185.62.133.0/24 maxlen: 24
                          185.62.132.0/24 maxlen: 24
                          2a03:3e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:48:4a:75:9a:cf:fc:94:5c:4d:b7:f9:51:f7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45e4c8c3a885026df8cd6337978e7faa91a446a
        Validity
            Not Before: Jan  1 20:30:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a1f2bac9066ecdcedb07978192aece28fff37088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8a:17:56:73:aa:79:3c:f0:00:4b:ca:fb:42:
                    4c:f9:57:32:8f:c4:32:88:ed:da:d1:4f:8d:98:a8:
                    2e:5e:b6:95:5a:7e:54:d5:3f:03:71:4a:12:79:1f:
                    7d:ab:cf:ad:60:15:b8:11:87:90:3b:60:ab:d4:e3:
                    9c:21:2b:50:b4:db:e1:38:d9:3d:ce:01:10:6b:ba:
                    25:78:b4:ab:5f:a0:5b:dd:9c:9c:61:43:11:db:3d:
                    2d:4a:26:6a:63:e3:1f:67:c8:40:2b:1e:e7:6e:80:
                    74:c4:a9:44:e4:24:59:81:c6:b8:cb:ff:44:ab:cf:
                    a9:f7:16:78:3f:94:94:5d:01:7b:ae:82:91:c1:7c:
                    17:12:a8:ab:e6:50:35:6e:ba:37:31:cd:03:9f:b7:
                    36:91:14:b6:fa:be:19:a8:c9:d2:75:93:d3:97:ae:
                    1b:c6:29:9f:68:a1:91:8f:b6:c8:cc:74:19:cb:d9:
                    99:cc:36:ef:be:dd:d6:d1:c1:55:30:03:28:09:16:
                    1f:f5:95:74:ec:8e:2f:6a:af:34:15:27:20:39:51:
                    d1:8c:a1:4a:54:77:53:2d:43:92:5c:15:46:05:b6:
                    55:3f:40:9f:a5:02:e9:c3:8e:6d:a3:eb:64:cb:0d:
                    0b:64:a1:a0:51:dd:57:e2:d0:9e:cc:47:9b:48:c6:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F2:BA:C9:06:6E:CD:CE:DB:07:97:81:92:AE:CE:28:FF:F3:70:88
            X509v3 Authority Key Identifier:
                keyid:E4:5E:4C:8C:3A:88:50:26:DF:8C:D6:33:79:78:E7:FA:A9:1A:44:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F5MjDqIUCbfjNYzeXjn-qkaRGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/ofK6yQZuzc7bB5eBkq7OKP_zcIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/b78cc4-4d7e-4d25-9a43-9b367ab2ccd3/1/5F5MjDqIUCbfjNYzeXjn-qkaRGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.132.0/23
                IPv6:
                  2a03:3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:54:97:f3:ef:7a:e4:79:4b:18:ba:6b:2f:7a:38:0b:ea:66:
         12:e0:8c:c0:19:2f:12:0f:77:98:47:a7:55:de:22:e7:f3:f8:
         cc:84:30:ce:5c:c6:a8:40:0a:4d:44:cb:c5:f8:b9:d2:e0:7f:
         dc:88:03:41:39:cc:55:79:5f:b4:81:0f:71:12:c5:9e:b0:64:
         c4:35:d8:a7:96:55:b5:b9:a0:f8:56:c0:49:1e:fb:cd:e9:0f:
         cb:2f:a2:7f:ec:db:f7:50:07:ea:b6:85:16:8d:18:7c:a3:34:
         d5:a8:a4:8c:79:e3:f2:9c:17:c4:29:a1:73:4d:ce:b6:ab:d7:
         6d:40:ef:6c:03:22:ef:97:d3:48:dc:23:a0:09:90:c6:50:a1:
         54:b5:cc:64:79:6f:bd:1b:9e:1c:18:9b:fa:4c:97:af:3c:0a:
         74:19:da:b9:5e:35:ec:d9:e7:31:38:7a:f8:76:a2:6f:10:31:
         5a:b6:55:9e:46:0f:6f:56:4e:47:8d:69:f3:d9:f9:59:50:33:
         9a:8b:bf:65:1f:2c:c5:de:25:86:1b:68:86:62:84:f6:77:05:
         7c:11:f7:70:83:bd:4d:39:4d:a5:30:05:93:8b:66:1b:5d:a4:
         50:55:be:68:35:8d:b1:30:2f:1d:b2:9d:07:79:37:d6:52:a4:
         4d:36:de:28
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGuEhKdZrP/JRcTbf5Ufe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NWU0YzhjM2E4ODUwMjZkZjhjZDYzMzc5NzhlN2ZhYTkx
YTQ0NmEwHhcNMjQwMTAxMjAzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWYyYmFjOTA2NmVjZGNlZGIwNzk3ODE5MmFlY2UyOGZmZjM3MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIoXVnOqeTzwAEvK+0JM+Vcyj8Qy
iO3a0U+NmKguXraVWn5U1T8DcUoSeR99q8+tYBW4EYeQO2Cr1OOcIStQtNvhONk9
zgEQa7oleLSrX6Bb3ZycYUMR2z0tSiZqY+MfZ8hAKx7nboB0xKlE5CRZgca4y/9E
q8+p9xZ4P5SUXQF7roKRwXwXEqir5lA1bro3Mc0Dn7c2kRS2+r4ZqMnSdZPTl64b
ximfaKGRj7bIzHQZy9mZzDbvvt3W0cFVMAMoCRYf9ZV07I4vaq80FScgOVHRjKFK
VHdTLUOSXBVGBbZVP0CfpQLpw45to+tkyw0LZKGgUd1X4tCezEebSMY34wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKHyuskGbs3O2weXgZKuzij/83CIMB8GA1UdIwQY
MBaAFOReTIw6iFAm34zWM3l45/qpGkRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iNzhjYzQtNGQ3ZS00ZDI1LTlhNDMt
OWIzNjdhYjJjY2QzLzEvb2ZLNnlRWnV6YzdiQjVlQmtxN09LUF96Y0lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iNzhjYzQtNGQ3ZS00ZDI1LTlhNDMtOWIzNjdhYjJjY2Qz
LzEvNUY1TWpEcUlVQ2Jmak5ZemVYam4tcWthUkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuT6EMA0E
AgACMAcDBQAqAwPgMA0GCSqGSIb3DQEBCwUAA4IBAQABVJfz73rkeUsYumsvejgL
6mYS4IzAGS8SD3eYR6dV3iLn8/jMhDDOXMaoQApNRMvF+LnS4H/ciANBOcxVeV+0
gQ9xEsWesGTENdinllW1uaD4VsBJHvvN6Q/LL6J/7Nv3UAfqtoUWjRh8ozTVqKSM
eePynBfEKaFzTc62q9dtQO9sAyLvl9NI3COgCZDGUKFUtcxkeW+9G54cGJv6TJev
PAp0Gdq5XjXs2ecxOHr4dqJvEDFatlWeRg9vVk5HjWnz2flZUDOai79lHyzF3iWG
G2iGYoT2dwV8Efdwg71NOU2lMAWTi2YbXaRQVb5oNY2xMC8dsp0HeTfWUqRNNt4o
-----END CERTIFICATE-----