Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/fGvIhaEXV8DSH8FuD8UU3YncASI.roa
File:                     fGvIhaEXV8DSH8FuD8UU3YncASI.roa (raw, json)
Hash identifier:          fS/Mn06Coq4z+XV9Enq9uobRXHPfFYJyqu+8CmDdPSI=
Subject key identifier:   7C:6B:C8:85:A1:17:57:C0:D2:1F:C1:6E:0F:C5:14:DD:89:DC:01:22
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       018CC86F64EC115CD059BED8CB5F1C890E43
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/fGvIhaEXV8DSH8FuD8UU3YncASI.roa
Signing time:             Tue 02 Jan 2024 04:29:52 +0000
ROA not before:           Tue 02 Jan 2024 04:29:52 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35132
IP address blocks:        185.165.196.0/22 maxlen: 22
                          2a0a:2200::/29 maxlen: 29
                          2a0a:2200::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:64:ec:11:5c:d0:59:be:d8:cb:5f:1c:89:0e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: Jan  2 04:29:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7c6bc885a11757c0d21fc16e0fc514dd89dc0122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:99:6b:71:85:88:c8:fd:57:b1:6c:8d:7e:6d:
                    d8:f5:8a:a8:ec:21:84:06:13:0d:20:e7:0d:fd:54:
                    d7:b0:ee:c8:79:70:91:88:68:cb:60:69:d3:26:95:
                    33:fa:36:51:78:93:f7:0e:f8:84:28:c2:38:b8:8d:
                    f8:55:63:5d:80:52:e6:b0:fd:b7:a6:35:c9:0e:ec:
                    f0:69:e1:bc:68:99:8f:50:6c:63:45:ae:16:86:0f:
                    30:a7:38:96:79:2a:6a:bd:0d:50:8f:0d:01:f5:47:
                    f3:08:1a:4c:60:6f:90:4f:7d:af:97:55:3e:86:e5:
                    5a:8c:ce:46:26:0c:b0:1f:88:13:64:b6:22:ab:b5:
                    cc:af:c9:2c:95:4b:70:f2:a6:d8:d7:40:99:05:6a:
                    5e:eb:45:ab:9a:a4:cf:d1:3e:98:8c:79:c3:f6:08:
                    be:94:df:c4:74:c0:bb:c4:c2:1c:58:ca:d2:60:17:
                    87:66:f1:ee:0a:4c:a9:6a:57:21:e0:03:2c:38:51:
                    88:13:15:91:6a:fe:54:03:3e:dd:a2:61:14:6f:49:
                    00:85:b5:53:b9:5d:9b:58:14:86:98:e2:ec:5b:fc:
                    82:af:c2:93:f8:45:14:d3:13:13:a5:f2:8e:81:fb:
                    8e:7e:2d:99:ba:78:a9:c1:e9:99:01:bf:1b:97:fd:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6B:C8:85:A1:17:57:C0:D2:1F:C1:6E:0F:C5:14:DD:89:DC:01:22
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/fGvIhaEXV8DSH8FuD8UU3YncASI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.196.0/22
                IPv6:
                  2a0a:2200::/29

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:6a:99:87:d4:7b:dc:10:fe:71:b8:9b:7c:dc:29:03:cd:
         85:4d:c9:5d:98:5f:11:61:ae:41:3a:8f:22:56:81:8a:ef:fe:
         61:c7:48:ee:93:0a:b8:2a:c6:36:a7:b0:85:02:08:f3:e4:28:
         37:bb:3a:7b:73:2f:47:64:4d:08:a3:b7:9d:07:0f:c2:26:3b:
         a0:12:27:a8:b9:13:84:29:a4:14:f7:ce:fa:ca:97:09:91:e9:
         9c:7f:63:9c:fd:f8:29:9e:8d:3f:18:4e:c1:e3:84:f3:96:c2:
         78:e6:b6:32:c1:72:64:cc:ab:d3:76:3e:c2:ec:03:9c:3f:61:
         5e:2d:92:a4:5e:6f:d0:c8:e5:9c:19:22:57:a2:ea:d3:4a:f4:
         43:10:a6:2e:10:71:ec:3b:d2:e8:80:96:90:ff:74:25:c8:81:
         de:c9:db:06:56:f5:7e:64:74:2e:b9:05:8b:fa:dd:fc:9d:5b:
         a8:04:4f:3f:e6:bf:e0:f0:f0:15:fe:c2:76:b4:25:ec:9b:28:
         6c:b5:80:ca:73:11:44:b4:84:53:e8:dd:73:fa:62:60:fd:11:
         d3:64:61:4d:5d:fd:74:c0:76:47:3a:d8:e8:be:bf:6a:58:6b:
         ec:84:ea:39:b8:67:1b:bb:3a:ba:4d:3d:7c:89:34:fd:b6:3c:
         7c:98:34:a3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIb2TsEVzQWb7Yy18ciQ5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh
ZTA4N2MwHhcNMjQwMTAyMDQyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzZiYzg4NWExMTc1N2MwZDIxZmMxNmUwZmM1MTRkZDg5ZGMwMTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiplrcYWIyP1XsWyNfm3Y9Yqo7CGE
BhMNIOcN/VTXsO7IeXCRiGjLYGnTJpUz+jZReJP3DviEKMI4uI34VWNdgFLmsP23
pjXJDuzwaeG8aJmPUGxjRa4Whg8wpziWeSpqvQ1Qjw0B9UfzCBpMYG+QT32vl1U+
huVajM5GJgywH4gTZLYiq7XMr8kslUtw8qbY10CZBWpe60WrmqTP0T6YjHnD9gi+
lN/EdMC7xMIcWMrSYBeHZvHuCkypalch4AMsOFGIExWRav5UAz7domEUb0kAhbVT
uV2bWBSGmOLsW/yCr8KT+EUU0xMTpfKOgfuOfi2ZunipwemZAb8bl/2/fwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHxryIWhF1fA0h/Bbg/FFN2J3AEiMB8GA1UdIwQY
MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt
ZTAxNjI0MDFmZjdhLzEvZkd2SWhhRVhWOERTSDhGdUQ4VVUzWW5jQVNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh
LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaXEMA0E
AgACMAcDBQMqCiIAMA0GCSqGSIb3DQEBCwUAA4IBAQB2W2qZh9R73BD+cbibfNwp
A82FTcldmF8RYa5BOo8iVoGK7/5hx0jukwq4KsY2p7CFAgjz5Cg3uzp7cy9HZE0I
o7edBw/CJjugEieouROEKaQU9876ypcJkemcf2Oc/fgpno0/GE7B44TzlsJ45rYy
wXJkzKvTdj7C7AOcP2FeLZKkXm/QyOWcGSJXourTSvRDEKYuEHHsO9LogJaQ/3Ql
yIHeydsGVvV+ZHQuuQWL+t38nVuoBE8/5r/g8PAV/sJ2tCXsmyhstYDKcxFEtIRT
6N1z+mJg/RHTZGFNXf10wHZHOtjovr9qWGvshOo5uGcbuzq6TT18iTT9tjx8mDSj
-----END CERTIFICATE-----