Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/hy6t2HsHws40PnPv5E-a9Cb7Py0.roa
File:                     hy6t2HsHws40PnPv5E-a9Cb7Py0.roa (raw, json)
Hash identifier:          HhFNvzaNFMEcjQQepGvHlTUJiHJEuPRN2SkO8dFu1i4=
Subject key identifier:   87:2E:AD:D8:7B:07:C2:CE:34:3E:73:EF:E4:4F:9A:F4:26:FB:3F:2D
Certificate issuer:       /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial:       018FA5550180872BA33DDCAB7391A1888D72
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/hy6t2HsHws40PnPv5E-a9Cb7Py0.roa
Signing time:             Thu 23 May 2024 12:02:42 +0000
ROA not before:           Thu 23 May 2024 12:02:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8218
IP address blocks:        185.75.241.0/24 maxlen: 24
                          2a05:5504::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a5:55:01:80:87:2b:a3:3d:dc:ab:73:91:a1:88:8d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
        Validity
            Not Before: May 23 12:02:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=872eadd87b07c2ce343e73efe44f9af426fb3f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:06:ab:46:3e:6e:79:d6:3b:c1:ef:08:a7:
                    b0:ec:41:1d:6c:a6:41:f8:1d:52:92:a9:2a:60:f5:
                    23:1c:12:1f:ce:0f:8d:4b:4c:33:af:2e:e0:27:1b:
                    b0:72:8d:96:10:75:77:d9:17:e1:e0:26:38:09:b6:
                    b7:00:7b:c2:cf:32:48:fb:27:54:29:39:bd:66:01:
                    28:37:d2:aa:17:37:0e:7e:19:a0:51:a6:b3:ab:4b:
                    9d:b5:98:f9:5e:01:ab:cf:15:b1:bb:78:28:22:4f:
                    f0:3b:f8:fa:54:27:93:f7:a2:90:24:0f:5e:3c:cb:
                    54:ab:e6:af:57:55:9e:f3:3a:32:e6:f3:f3:2f:55:
                    33:bb:26:c9:d4:92:d1:17:d7:07:fb:72:b6:ed:01:
                    f8:5a:00:11:3c:c1:74:30:9e:00:2a:91:b3:8b:2d:
                    a5:17:53:2d:56:c2:ac:31:76:82:4d:94:c0:f6:ef:
                    a5:c8:5a:47:64:16:c3:f5:1a:81:37:00:36:a4:19:
                    f7:e0:a2:06:73:2f:87:e1:e6:31:84:16:c8:90:66:
                    ac:e8:08:c0:7d:3b:42:66:29:18:0a:5a:62:cc:fa:
                    d6:13:7f:e2:1a:85:4e:d4:d4:b1:3c:7f:01:ef:91:
                    ad:98:9e:ff:81:4d:d3:8b:cb:c1:c0:00:b0:73:63:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2E:AD:D8:7B:07:C2:CE:34:3E:73:EF:E4:4F:9A:F4:26:FB:3F:2D
            X509v3 Authority Key Identifier:
                keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/hy6t2HsHws40PnPv5E-a9Cb7Py0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.241.0/24
                IPv6:
                  2a05:5504::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:54:b8:75:b9:6a:69:f2:fe:d8:a3:e2:5e:58:5c:44:4c:85:
         ce:b6:2c:05:be:86:3f:12:06:e9:70:d5:e5:95:cd:43:10:dd:
         ff:bc:0c:55:44:e9:f2:cc:33:57:66:60:9a:f4:13:29:89:2f:
         ac:b8:80:ca:1e:93:ea:2e:be:0e:b7:a3:a4:36:a7:50:7c:29:
         00:ea:3e:48:b5:c9:d0:38:9b:8e:1d:c7:47:e7:e5:1d:d0:2b:
         80:e1:17:5c:ea:a0:17:c4:8e:86:78:b5:58:44:d3:c3:7a:ce:
         15:91:e1:60:28:c9:1a:79:e5:b4:01:88:b6:b0:a0:a8:9c:ff:
         42:f8:7a:77:09:58:c8:2d:62:fe:ac:71:64:b0:50:84:78:50:
         7b:38:32:c6:c2:59:3b:b6:92:85:f0:ad:52:5f:36:6b:9a:71:
         cb:78:c8:9f:22:e4:b9:e1:8c:2f:56:7e:00:06:22:24:5f:95:
         35:a7:a0:b7:cc:6d:0e:20:54:9a:78:10:69:4c:21:e3:85:97:
         5b:a9:38:ab:cd:b3:f1:8c:08:21:6d:9b:6a:58:8d:35:42:71:
         50:20:0b:dc:c1:d6:81:cb:0f:19:84:c1:f6:dd:9f:ac:d3:bf:
         f6:60:57:a4:7a:2e:44:ee:fe:d4:c1:3a:8d:1a:67:c8:f8:02:
         07:9d:d8:c3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY+lVQGAhyujPdyrc5GhiI1yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNjQ2OTFjMzE4OTJjYzk5MWFkNGU5YTk2NzExNDc3NTll
NDE3YWIwHhcNMjQwNTIzMTIwMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzJlYWRkODdiMDdjMmNlMzQzZTczZWZlNDRmOWFmNDI2ZmIzZjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bQGq0Y+bnnWO8HvCKew7EEdbKZB
+B1SkqkqYPUjHBIfzg+NS0wzry7gJxuwco2WEHV32Rfh4CY4Cba3AHvCzzJI+ydU
KTm9ZgEoN9KqFzcOfhmgUaazq0udtZj5XgGrzxWxu3goIk/wO/j6VCeT96KQJA9e
PMtUq+avV1We8zoy5vPzL1UzuybJ1JLRF9cH+3K27QH4WgARPMF0MJ4AKpGziy2l
F1MtVsKsMXaCTZTA9u+lyFpHZBbD9RqBNwA2pBn34KIGcy+H4eYxhBbIkGas6AjA
fTtCZikYClpizPrWE3/iGoVO1NSxPH8B75GtmJ7/gU3Ti8vBwACwc2MsrQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIcurdh7B8LOND5z7+RPmvQm+z8tMB8GA1UdIwQY
MBaAFO1kaRwxiSzJka1OmpZxFHdZ5BerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjIt
N2M3ZGIyMTIzMGEzLzEvaHk2dDJIc0h3czQwUG5QdjVFLWE5Q2I3UHkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mNjdkMDktODkyMy00MTUyLTk1ZjItN2M3ZGIyMTIzMGEz
LzEvN1dScEhER0pMTW1SclU2YWxuRVVkMW5rRjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUvxMA0E
AgACMAcDBQAqBVUEMA0GCSqGSIb3DQEBCwUAA4IBAQAjVLh1uWpp8v7Yo+JeWFxE
TIXOtiwFvoY/EgbpcNXllc1DEN3/vAxVROnyzDNXZmCa9BMpiS+suIDKHpPqLr4O
t6OkNqdQfCkA6j5ItcnQOJuOHcdH5+Ud0CuA4Rdc6qAXxI6GeLVYRNPDes4VkeFg
KMkaeeW0AYi2sKConP9C+Hp3CVjILWL+rHFksFCEeFB7ODLGwlk7tpKF8K1SXzZr
mnHLeMifIuS54YwvVn4ABiIkX5U1p6C3zG0OIFSaeBBpTCHjhZdbqTirzbPxjAgh
bZtqWI01QnFQIAvcwdaByw8ZhMH23Z+s07/2YFekei5E7v7UwTqNGmfI+AIHndjD
-----END CERTIFICATE-----