Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/s1d0X18wwVoJkZp-FOdcb7mJ0CQ.roa
File:                     s1d0X18wwVoJkZp-FOdcb7mJ0CQ.roa (raw, json)
Hash identifier:          hIG+nj6sqabnfXx1yGIKPR1/PErmmmf4YWciu+C3hd8=
Subject key identifier:   B3:57:74:5F:5F:30:C1:5A:09:91:9A:7E:14:E7:5C:6F:B9:89:D0:24
Certificate issuer:       /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial:       018CC3489642B9083E16C64E9EF9FD75CF73
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/s1d0X18wwVoJkZp-FOdcb7mJ0CQ.roa
Signing time:             Mon 01 Jan 2024 04:29:23 +0000
ROA not before:           Mon 01 Jan 2024 04:29:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204576
IP address blocks:        185.75.221.0/24 maxlen: 24
                          2a0d:a640::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:96:42:b9:08:3e:16:c6:4e:9e:f9:fd:75:cf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
        Validity
            Not Before: Jan  1 04:29:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b357745f5f30c15a09919a7e14e75c6fb989d024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:0b:19:c8:71:08:a4:ca:87:d0:55:20:e9:
                    67:4d:8d:7d:7d:46:53:ab:b4:55:62:84:51:30:d5:
                    9a:19:87:80:a7:6c:32:4b:1f:4a:ef:25:0d:9d:51:
                    47:ec:1b:2a:77:6e:85:f8:42:37:f8:f7:3c:8b:f7:
                    01:64:8b:a8:15:e6:7f:fb:db:97:a2:e1:e3:48:8d:
                    14:8b:a7:c5:99:7d:49:d2:63:af:0c:55:56:95:d7:
                    71:03:9e:1d:fb:a9:60:8d:8e:ec:a2:b6:17:3b:cb:
                    cd:14:34:9c:76:b2:1b:29:22:cf:ad:2b:0f:f7:ec:
                    fa:84:d9:56:7d:73:1b:79:2d:2e:f3:3e:37:64:be:
                    41:64:3f:04:ca:a8:b5:51:82:2a:47:f5:a4:22:80:
                    35:8a:0a:11:b7:d5:64:4a:17:b4:4e:b3:41:ac:f9:
                    c5:e7:34:93:6a:37:33:71:2f:50:78:39:62:54:61:
                    cd:97:ca:52:c8:4b:a0:11:a4:1e:b3:60:1a:bd:95:
                    2f:bd:cb:69:00:1b:5c:66:7c:75:a6:02:a8:21:3d:
                    56:27:70:2e:bd:53:e6:b6:f6:92:ee:c6:1d:ef:98:
                    a2:54:83:9d:29:5f:e4:71:50:b1:a2:df:3e:dd:c8:
                    93:0f:ff:c7:fd:42:07:25:2a:74:41:2c:58:d0:c1:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:57:74:5F:5F:30:C1:5A:09:91:9A:7E:14:E7:5C:6F:B9:89:D0:24
            X509v3 Authority Key Identifier:
                keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/s1d0X18wwVoJkZp-FOdcb7mJ0CQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.221.0/24
                IPv6:
                  2a0d:a640::/29

    Signature Algorithm: sha256WithRSAEncryption
         87:71:61:d7:37:73:b4:c0:ee:e7:b1:48:08:61:ca:52:80:de:
         68:44:c7:03:20:be:1b:2e:6c:02:38:30:5c:c4:71:47:a1:71:
         b0:af:14:7a:f3:50:be:b6:f5:62:7a:96:85:bf:a9:3e:a6:a4:
         a9:ec:c6:f4:25:a2:7a:4c:65:3c:d8:f3:d7:57:30:58:7b:bb:
         e6:1e:72:06:d4:38:1e:f5:90:30:5a:1d:ec:bb:aa:b3:64:48:
         1b:aa:8d:3d:14:36:f6:f2:18:80:32:a9:df:90:d6:b7:d9:51:
         97:bc:70:d0:ab:53:88:7b:d6:07:88:5f:65:98:ee:aa:ba:56:
         f5:af:55:dd:cc:c3:0c:08:fa:36:95:92:ba:d4:9d:94:09:b7:
         78:bc:32:27:9a:07:95:a8:19:ab:3f:94:25:dd:56:88:34:63:
         65:a3:74:20:cf:13:7f:90:39:ee:67:2b:4f:3c:0e:f9:dc:ce:
         ab:4a:07:7c:06:3d:86:17:d4:2b:22:11:d4:b3:24:32:5f:9c:
         88:3f:d1:cb:a5:6e:9a:a4:6a:0d:9b:31:6c:43:b0:18:4c:4b:
         a1:0d:03:23:77:02:28:01:63:13:71:3e:c1:20:b5:9e:cf:ee:
         09:a4:f8:ea:62:a9:09:a6:01:26:a3:48:6a:17:6d:72:ca:bb:
         37:92:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----