Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/G1KtCem18xNVnjqg_i4gYFFnH08.roa
File:                     G1KtCem18xNVnjqg_i4gYFFnH08.roa (raw, json)
Hash identifier:          or489x/aFiy9otvfjwnsIAdgsCfe9WYAKyIX4ntgn0o=
Subject key identifier:   1B:52:AD:09:E9:B5:F3:13:55:9E:3A:A0:FE:2E:20:60:51:67:1F:4F
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       018D47B0678A9637F5000E0CE41A9571F771
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/G1KtCem18xNVnjqg_i4gYFFnH08.roa
Signing time:             Fri 26 Jan 2024 21:32:39 +0000
ROA not before:           Fri 26 Jan 2024 21:32:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15830
IP address blocks:        45.136.140.0/24 maxlen: 24
                          2a10:5a80::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:47:b0:67:8a:96:37:f5:00:0e:0c:e4:1a:95:71:f7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jan 26 21:32:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1b52ad09e9b5f313559e3aa0fe2e206051671f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:05:c1:0a:ff:16:83:01:7e:ef:bc:d6:bf:
                    ee:b0:c8:6b:16:1d:87:c9:5e:1f:a9:28:ed:6a:ea:
                    a0:af:0a:c2:b4:ca:56:1c:2f:90:77:68:ac:a6:be:
                    c2:c0:8d:54:75:73:5f:01:4b:17:cf:11:8f:9d:39:
                    0e:cc:44:fa:01:f6:40:60:67:34:06:87:ab:12:d1:
                    0e:47:6c:e3:4f:f3:11:60:d0:a3:3d:54:1a:9a:9f:
                    43:86:90:eb:47:50:78:7d:3e:70:6d:1d:42:72:98:
                    2a:09:a1:0c:c4:72:52:81:c8:e5:73:83:e2:9b:61:
                    da:c5:bf:a5:60:03:b0:6f:0c:b5:15:ba:c3:5e:c9:
                    20:d4:6e:3d:f2:8f:4c:8e:8e:64:39:0c:0e:1a:93:
                    b4:5f:8b:3b:cf:16:c3:46:30:4d:25:b2:82:9c:22:
                    ad:cb:b2:06:91:28:1b:05:8f:15:50:cb:9f:96:0d:
                    bb:3b:4a:0e:bb:09:68:00:7f:2b:b3:5c:c2:6f:1c:
                    5f:a5:32:3a:39:6a:31:ff:2b:2c:60:76:34:48:28:
                    f3:ce:10:14:e8:aa:73:9a:ae:68:59:7e:43:db:2d:
                    b7:5f:ad:8a:ae:e6:5e:7f:a7:6d:7d:9e:81:eb:9e:
                    f5:26:d3:68:76:69:61:56:35:56:bd:e6:f6:a2:0b:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:52:AD:09:E9:B5:F3:13:55:9E:3A:A0:FE:2E:20:60:51:67:1F:4F
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/G1KtCem18xNVnjqg_i4gYFFnH08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.140.0/24
                IPv6:
                  2a10:5a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:81:8c:8c:50:7e:07:6c:9c:40:99:6f:7d:b8:03:54:23:
         85:ed:62:5a:ff:fd:0e:1d:53:c0:c3:a9:b7:ad:f8:35:a7:c8:
         8d:f2:18:74:6c:88:b1:0c:de:d4:6f:c7:a9:a5:d2:6b:ea:2c:
         95:a1:e6:c7:e9:3a:b4:db:f8:f4:14:9f:29:00:3a:f2:0a:94:
         f6:fa:5c:b0:2b:b6:53:32:82:ac:bc:9f:18:cc:b4:5b:95:03:
         61:ce:1b:7f:b5:74:3a:75:3b:78:a2:7c:06:7a:e3:a7:8c:8b:
         ee:09:d4:57:a6:22:63:22:df:bc:d3:6a:04:e4:ea:6e:79:dc:
         bb:e8:57:f7:c0:b9:56:f5:54:95:84:08:42:3e:79:e5:e6:05:
         6a:83:87:66:73:9d:f9:10:85:88:c3:75:c3:bb:d4:28:54:27:
         68:27:5e:ee:f2:a1:90:3f:a5:f8:ea:57:65:2d:aa:67:2a:84:
         6c:0f:55:44:05:73:ec:6d:19:d8:66:cc:ed:15:cb:1b:1b:1d:
         44:7a:6c:ce:17:4e:67:ef:87:03:3a:d6:7f:8b:10:2e:73:31:
         a5:0d:d4:77:b8:78:fe:ed:70:1c:82:47:f1:b7:64:f4:5d:65:
         ca:f7:05:cd:94:f3:7d:de:73:5f:a6:2c:00:4d:82:af:fd:04:
         88:1a:70:0e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY1HsGeKljf1AA4M5BqVcfdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjQwMTI2MjEzMjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjUyYWQwOWU5YjVmMzEzNTU5ZTNhYTBmZTJlMjA2MDUxNjcxZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTUFwQr/FoMBfu+81r/usMhrFh2H
yV4fqSjtauqgrwrCtMpWHC+Qd2ispr7CwI1UdXNfAUsXzxGPnTkOzET6AfZAYGc0
BoerEtEOR2zjT/MRYNCjPVQamp9DhpDrR1B4fT5wbR1CcpgqCaEMxHJSgcjlc4Pi
m2Haxb+lYAOwbwy1FbrDXskg1G498o9Mjo5kOQwOGpO0X4s7zxbDRjBNJbKCnCKt
y7IGkSgbBY8VUMuflg27O0oOuwloAH8rs1zCbxxfpTI6OWox/yssYHY0SCjzzhAU
6Kpzmq5oWX5D2y23X62KruZef6dtfZ6B6571JtNodmlhVjVWveb2ogvoMQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBtSrQnptfMTVZ46oP4uIGBRZx9PMB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvRzFLdENlbTE4eE5WbmpxZ19pNGdZRkZuSDA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALYiMMA0E
AgACMAcDBQAqEFqAMA0GCSqGSIb3DQEBCwUAA4IBAQBcoYGMjFB+B2ycQJlvfbgD
VCOF7WJa//0OHVPAw6m3rfg1p8iN8hh0bIixDN7Ub8eppdJr6iyVoebH6Tq02/j0
FJ8pADryCpT2+lywK7ZTMoKsvJ8YzLRblQNhzht/tXQ6dTt4onwGeuOnjIvuCdRX
piJjIt+802oE5Opuedy76Ff3wLlW9VSVhAhCPnnl5gVqg4dmc535EIWIw3XDu9Qo
VCdoJ17u8qGQP6X46ldlLapnKoRsD1VEBXPsbRnYZsztFcsbGx1EemzOF05n74cD
OtZ/ixAuczGlDdR3uHj+7XAcgkfxt2T0XWXK9wXNlPN93nNfpiwATYKv/QSIGnAO
-----END CERTIFICATE-----