Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/9_HISp5np-rufXfGZ9CUq2lgGcs.roa
File:                     9_HISp5np-rufXfGZ9CUq2lgGcs.roa (raw, json)
Hash identifier:          Kw0i3jchC2gPLj/uCQsPUiJ5hKVHui+AiWevos0X1HA=
Subject key identifier:   F7:F1:C8:4A:9E:67:A7:EA:EE:7D:77:C6:67:D0:94:AB:69:60:19:CB
Certificate issuer:       /CN=7a3862134f141365ef887902e6057c28b2829c9d
Certificate serial:       018CC94E2A905E3559303A620325B9AC115E
Authority key identifier: 7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/9_HISp5np-rufXfGZ9CUq2lgGcs.roa
Signing time:             Tue 02 Jan 2024 08:33:12 +0000
ROA not before:           Tue 02 Jan 2024 08:33:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3303
IP address blocks:        194.124.232.0/23 maxlen: 23
                          2001:67c:1984::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:2a:90:5e:35:59:30:3a:62:03:25:b9:ac:11:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3862134f141365ef887902e6057c28b2829c9d
        Validity
            Not Before: Jan  2 08:33:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f7f1c84a9e67a7eaee7d77c667d094ab696019cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c8:83:2e:9d:fa:4b:a0:52:6f:5d:f0:b1:94:
                    c1:b7:bf:e4:f5:ad:69:fe:33:3f:b0:76:dd:9c:67:
                    ab:f2:20:3d:09:64:85:b2:03:d9:b5:1b:4c:80:f9:
                    74:71:fe:14:51:c2:45:fd:82:0b:72:c8:04:cc:b3:
                    1a:dc:15:26:e5:4c:e5:d1:46:24:e7:18:db:31:1c:
                    d9:82:6e:8e:aa:7c:47:05:df:69:cd:97:16:88:bb:
                    0b:d3:65:93:42:e6:a0:a4:41:30:ac:58:17:88:5e:
                    82:f0:81:41:c9:d6:ca:d1:a5:cb:1d:1c:cb:6f:d4:
                    70:e7:95:c1:8c:a8:bd:cc:67:62:ee:1f:84:6c:85:
                    b6:bb:da:49:d7:3e:41:a8:30:d1:87:17:99:2b:a2:
                    07:36:25:26:f8:7e:11:77:2f:47:07:b9:50:b7:2f:
                    35:fd:6e:57:aa:ce:f6:83:ee:2a:bb:cc:4e:6f:0c:
                    68:c6:85:b1:d2:bd:32:ec:42:13:28:75:d5:7f:8a:
                    f8:c4:2f:63:94:77:f9:c5:65:55:f0:3c:7e:c9:30:
                    46:8d:08:53:65:91:2e:5a:49:fe:a8:e8:f6:5f:0c:
                    7b:02:63:8f:45:c3:23:93:5e:c1:90:2f:2b:06:07:
                    dc:ef:e6:7a:71:a6:22:15:27:ce:cb:49:7c:00:88:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F1:C8:4A:9E:67:A7:EA:EE:7D:77:C6:67:D0:94:AB:69:60:19:CB
            X509v3 Authority Key Identifier:
                keyid:7A:38:62:13:4F:14:13:65:EF:88:79:02:E6:05:7C:28:B2:82:9C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejhiE08UE2XviHkC5gV8KLKCnJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/9_HISp5np-rufXfGZ9CUq2lgGcs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/434199-d26e-412e-a2bb-da0a4065e824/1/ejhiE08UE2XviHkC5gV8KLKCnJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.124.232.0/23
                IPv6:
                  2001:67c:1984::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:f5:fc:0d:3c:47:ef:bd:af:b1:b7:40:61:25:2d:21:cc:a3:
         b4:a1:55:e5:0a:9e:26:1c:9e:b4:d6:b6:59:d3:a2:c2:9a:c0:
         32:41:11:f8:c3:ed:0c:b6:fc:5b:0e:64:17:ed:5b:a7:70:2b:
         6e:d9:44:e7:79:b1:11:71:9d:e1:f3:20:ab:66:7b:87:d0:5c:
         87:18:3a:67:db:fb:af:b6:d2:63:4a:ca:e4:21:ed:4b:51:8f:
         e0:af:4b:90:73:31:d2:e7:a6:f3:33:1d:3e:4f:8f:c7:c5:37:
         8a:df:dc:81:e7:1c:6b:4b:47:86:e5:12:85:cc:9f:d1:f9:81:
         44:27:b6:7d:41:f3:b0:2f:81:69:10:4c:39:e7:e5:b1:f1:93:
         18:06:6f:86:77:aa:70:e5:9b:9c:0b:d4:1f:9c:10:26:69:4a:
         43:2c:e9:76:cd:06:dd:2a:ca:91:93:29:87:78:7f:7b:73:8f:
         fb:90:24:ca:06:e3:7d:d9:f0:b1:0c:9f:ec:c4:e9:17:c2:5d:
         31:f2:55:d2:11:f0:87:15:e1:59:fb:81:dd:f9:9c:ea:f2:60:
         82:7b:aa:25:87:7d:fb:33:21:b7:ca:7f:14:b9:45:a7:43:47:
         47:da:3d:a6:47:ee:6f:9b:76:ec:76:2c:78:66:5b:b5:e4:31:
         a8:b5:67:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzJTiqQXjVZMDpiAyW5rBFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMzg2MjEzNGYxNDEzNjVlZjg4NzkwMmU2MDU3YzI4YjI4
MjljOWQwHhcNMjQwMTAyMDgzMzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2YxYzg0YTllNjdhN2VhZWU3ZDc3YzY2N2QwOTRhYjY5NjAxOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8iDLp36S6BSb13wsZTBt7/k9a1p
/jM/sHbdnGer8iA9CWSFsgPZtRtMgPl0cf4UUcJF/YILcsgEzLMa3BUm5Uzl0UYk
5xjbMRzZgm6OqnxHBd9pzZcWiLsL02WTQuagpEEwrFgXiF6C8IFBydbK0aXLHRzL
b9Rw55XBjKi9zGdi7h+EbIW2u9pJ1z5BqDDRhxeZK6IHNiUm+H4Rdy9HB7lQty81
/W5Xqs72g+4qu8xObwxoxoWx0r0y7EITKHXVf4r4xC9jlHf5xWVV8Dx+yTBGjQhT
ZZEuWkn+qOj2Xwx7AmOPRcMjk17BkC8rBgfc7+Z6caYiFSfOy0l8AIg5EwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPfxyEqeZ6fq7n13xmfQlKtpYBnLMB8GA1UdIwQY
MBaAFHo4YhNPFBNl74h5AuYFfCiygpydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80MzQxOTktZDI2ZS00MTJlLWEyYmIt
ZGEwYTQwNjVlODI0LzEvOV9ISVNwNW5wLXJ1ZlhmR1o5Q1VxMmxnR2NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS80MzQxOTktZDI2ZS00MTJlLWEyYmItZGEwYTQwNjVlODI0
LzEvZWpoaUUwOFVFMlh2aUhrQzVnVjhLTEtDbkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwnzoMA8E
AgACMAkDBwAgAQZ8GYQwDQYJKoZIhvcNAQELBQADggEBAAP1/A08R++9r7G3QGEl
LSHMo7ShVeUKniYcnrTWtlnTosKawDJBEfjD7Qy2/FsOZBftW6dwK27ZROd5sRFx
neHzIKtme4fQXIcYOmfb+6+20mNKyuQh7UtRj+CvS5BzMdLnpvMzHT5Pj8fFN4rf
3IHnHGtLR4blEoXMn9H5gUQntn1B87AvgWkQTDnn5bHxkxgGb4Z3qnDlm5wL1B+c
ECZpSkMs6XbNBt0qypGTKYd4f3tzj/uQJMoG433Z8LEMn+zE6RfCXTHyVdIR8IcV
4Vn7gd35nOryYIJ7qiWHffszIbfKfxS5RadDR0faPaZH7m+bdux2LHhmW7XkMai1
Z6g=
-----END CERTIFICATE-----