Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/a3ueRhvTbSK-uglGDirbW9AP4E0.roa
File:                     a3ueRhvTbSK-uglGDirbW9AP4E0.roa (raw, json)
Hash identifier:          RQOSkqjXZ4y7huP5QsHKSPLHjcFZ67qqOR2urPOPRyU=
Subject key identifier:   6B:7B:9E:46:1B:D3:6D:22:BE:BA:09:46:0E:2A:DB:5B:D0:0F:E0:4D
Certificate issuer:       /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial:       018CC6B7B9C1F6F03D21A4CE60EB1B8F5B3D
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/a3ueRhvTbSK-uglGDirbW9AP4E0.roa
Signing time:             Mon 01 Jan 2024 20:29:38 +0000
ROA not before:           Mon 01 Jan 2024 20:29:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59645
IP address blocks:        45.91.12.0/22 maxlen: 24
                          2a0e:a40::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:b9:c1:f6:f0:3d:21:a4:ce:60:eb:1b:8f:5b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
        Validity
            Not Before: Jan  1 20:29:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6b7b9e461bd36d22beba09460e2adb5bd00fe04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:8d:7a:b4:6a:05:64:34:2f:71:bb:56:54:
                    2a:c2:39:5e:88:09:b2:8a:40:b1:a9:7b:53:81:10:
                    c0:d8:a8:a8:ea:86:50:e9:e4:96:d1:40:05:6b:2b:
                    fa:d1:5c:d3:42:43:31:73:13:ee:64:07:f4:3e:67:
                    71:6f:c5:2b:d2:69:20:a3:ca:51:04:75:8f:b1:c9:
                    13:3e:c8:77:21:59:3d:a9:67:f7:f5:26:f4:02:c7:
                    91:93:29:73:d9:2b:42:4f:a3:85:8b:f9:6d:2b:d4:
                    91:e0:f4:f0:47:48:b5:a5:cf:45:dd:5d:ed:ca:30:
                    6a:93:31:67:7b:12:80:cd:c8:3c:8c:fc:8a:a4:bc:
                    c1:13:75:10:6e:67:31:4c:4a:c5:5b:dd:cf:09:be:
                    29:f9:d9:4d:76:65:31:93:22:ee:db:52:e0:ac:8f:
                    56:84:5f:c8:8b:74:0d:44:fd:b8:d9:60:ee:f4:79:
                    27:11:ce:84:77:5a:c4:f3:9e:ef:5b:49:99:c9:89:
                    6d:f3:56:f7:20:fb:23:b5:b8:36:54:54:ff:23:83:
                    e1:c2:5b:2a:4c:6e:25:55:03:9b:18:d6:61:8f:d6:
                    aa:cb:29:9f:d0:7e:24:2c:70:a5:1a:ae:74:b5:a4:
                    68:cb:a5:75:e5:e2:cf:c0:9d:cc:44:c6:06:94:cd:
                    b8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7B:9E:46:1B:D3:6D:22:BE:BA:09:46:0E:2A:DB:5B:D0:0F:E0:4D
            X509v3 Authority Key Identifier:
                keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/a3ueRhvTbSK-uglGDirbW9AP4E0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.12.0/22
                IPv6:
                  2a0e:a40::/29

    Signature Algorithm: sha256WithRSAEncryption
         2e:ca:04:16:62:96:45:55:8c:79:e3:67:07:3e:cd:9e:23:b9:
         f3:9b:ff:50:f7:33:72:4c:20:f5:2d:e8:49:8e:ab:5e:69:b7:
         15:01:2a:ca:bf:d7:49:a9:84:e8:b8:bc:5c:06:7a:1b:78:94:
         80:6f:ff:96:ca:aa:ce:dd:ca:9c:d7:7f:a2:a1:22:a3:45:a0:
         85:44:b6:6c:8d:6e:84:2e:71:64:9e:4f:01:80:2d:44:c7:bd:
         8f:4c:78:e4:8f:cd:20:c8:92:00:77:9b:67:87:bf:20:2a:b7:
         75:ce:ad:42:dc:ef:0c:bd:6e:0a:91:25:8c:0b:2d:c4:b6:5c:
         8e:b0:b5:56:50:92:bd:31:d8:af:c8:2b:d9:43:36:7b:28:60:
         b1:11:fa:d9:1b:91:1b:fd:20:3d:0d:85:be:e9:39:c1:ad:6b:
         d4:70:83:44:07:56:f1:cf:aa:ef:4e:50:bc:27:bc:bc:5b:3c:
         82:6b:c6:9c:c5:6f:90:45:9b:68:5e:db:bf:cb:86:43:5d:5d:
         02:8e:30:b6:c2:75:79:a9:65:d7:f3:48:2a:58:08:85:37:54:
         b2:ee:39:c6:68:22:2a:51:bc:06:73:4c:af:40:1c:45:29:d3:
         ff:64:30:8e:d8:53:7c:42:ad:cc:e2:6a:91:92:1a:bf:5d:ff:
         e8:ad:1e:0f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGt7nB9vA9IaTOYOsbj1s9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzA2NTA5ODU3NDYyOWQ0YTdlMmQyYjIwNTVhYTdiZjIz
MDJmZWUwHhcNMjQwMTAxMjAyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjdiOWU0NjFiZDM2ZDIyYmViYTA5NDYwZTJhZGI1YmQwMGZlMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxiNerRqBWQ0L3G7VlQqwjleiAmy
ikCxqXtTgRDA2Kio6oZQ6eSW0UAFayv60VzTQkMxcxPuZAf0Pmdxb8Ur0mkgo8pR
BHWPsckTPsh3IVk9qWf39Sb0AseRkylz2StCT6OFi/ltK9SR4PTwR0i1pc9F3V3t
yjBqkzFnexKAzcg8jPyKpLzBE3UQbmcxTErFW93PCb4p+dlNdmUxkyLu21LgrI9W
hF/Ii3QNRP242WDu9HknEc6Ed1rE857vW0mZyYlt81b3IPsjtbg2VFT/I4Phwlsq
TG4lVQObGNZhj9aqyymf0H4kLHClGq50taRoy6V15eLPwJ3MRMYGlM24jwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGt7nkYb020ivroJRg4q21vQD+BNMB8GA1UdIwQY
MBaAFF/AZQmFdGKdSn4tKyBVqnvyMC/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhCbENZVjBZcDFLZmkwcklGV3FlX0l3TC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZmZhMDMtMWNkNi00MDM0LWE3YmQt
ODU3NTk5NjgzYzNlLzEvYTN1ZVJodlRiU0stdWdsR0RpcmJXOUFQNEUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iZmZhMDMtMWNkNi00MDM0LWE3YmQtODU3NTk5NjgzYzNl
LzEvWDhCbENZVjBZcDFLZmkwcklGV3FlX0l3TC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVsMMA0E
AgACMAcDBQMqDgpAMA0GCSqGSIb3DQEBCwUAA4IBAQAuygQWYpZFVYx542cHPs2e
I7nzm/9Q9zNyTCD1LehJjqteabcVASrKv9dJqYTouLxcBnobeJSAb/+WyqrO3cqc
13+ioSKjRaCFRLZsjW6ELnFknk8BgC1Ex72PTHjkj80gyJIAd5tnh78gKrd1zq1C
3O8MvW4KkSWMCy3EtlyOsLVWUJK9MdivyCvZQzZ7KGCxEfrZG5Eb/SA9DYW+6TnB
rWvUcINEB1bxz6rvTlC8J7y8WzyCa8acxW+QRZtoXtu/y4ZDXV0CjjC2wnV5qWXX
80gqWAiFN1Sy7jnGaCIqUbwGc0yvQBxFKdP/ZDCO2FN8Qq3M4mqRkhq/Xf/orR4P
-----END CERTIFICATE-----