Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dCkaS9az6VyatBLvIyMFCVKm4Dg.roa
File:                     dCkaS9az6VyatBLvIyMFCVKm4Dg.roa (raw, json)
Hash identifier:          MQg2zjyPpyIii6Sj0FMu1YCXDQgFaPklrcVVtQAtd7A=
Subject key identifier:   74:29:1A:4B:D6:B3:E9:5C:9A:B4:12:EF:23:23:05:09:52:A6:E0:38
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018EF0E3D3098CE8120B2542A866DF930441
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dCkaS9az6VyatBLvIyMFCVKm4Dg.roa
Signing time:             Thu 18 Apr 2024 11:07:26 +0000
ROA not before:           Thu 18 Apr 2024 11:07:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206150
IP address blocks:        45.130.140.0/24 maxlen: 24
                          2a07:e342::/32 maxlen: 48
                          2a0f:f40::/32 maxlen: 48
                          2a0f:f41::/32 maxlen: 32
                          2a0f:f43::/32 maxlen: 48
                          2a0f:f44::/32 maxlen: 48
                          2a0f:f45::/32 maxlen: 48
                          2a0f:f46::/32 maxlen: 48
                          2a0f:f47::/32 maxlen: 48
                          2a0f:e386::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f0:e3:d3:09:8c:e8:12:0b:25:42:a8:66:df:93:04:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Apr 18 11:07:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=74291a4bd6b3e95c9ab412ef2323050952a6e038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:1f:88:64:43:bf:c2:6e:5f:b7:e7:63:78:
                    01:39:c4:05:8c:30:56:1a:59:a3:ef:5f:e3:dc:55:
                    bf:7c:c8:0b:9e:90:e0:6a:e5:62:32:fb:81:e3:53:
                    a7:b8:cd:e2:7b:f5:8f:a8:0d:3f:a2:0e:52:b0:82:
                    09:5d:00:41:23:42:02:9b:3c:de:02:cc:21:d1:b9:
                    ad:25:cf:61:6f:cd:06:b8:c5:09:46:bc:fa:ba:cc:
                    e2:a2:26:cf:c9:67:a4:12:b0:b2:74:ba:cb:61:c2:
                    c3:be:1c:09:50:53:c0:13:0f:00:54:2f:a5:e8:f6:
                    36:df:86:9b:56:02:5a:29:38:ef:ad:fa:7e:6b:93:
                    b0:87:9c:6a:00:05:4e:a9:d2:13:31:76:11:fd:5c:
                    2a:9e:25:ac:7b:f5:b3:af:97:12:f9:df:af:e4:5d:
                    1f:7f:39:26:e3:14:a9:10:89:f3:1f:51:5d:dd:6d:
                    8b:28:46:f9:01:8f:d8:5c:22:b6:ce:1b:c6:37:3d:
                    46:94:42:f9:87:5f:af:96:53:a0:20:67:de:27:29:
                    69:53:04:9d:14:fe:cb:56:89:46:02:11:f2:ae:21:
                    93:f1:12:0d:57:14:7a:a5:f3:b6:e3:af:23:d7:94:
                    87:c1:52:1b:9c:99:c8:20:b6:78:e7:5c:b8:50:4d:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:1A:4B:D6:B3:E9:5C:9A:B4:12:EF:23:23:05:09:52:A6:E0:38
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/dCkaS9az6VyatBLvIyMFCVKm4Dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.140.0/24
                IPv6:
                  2a07:e342::/32
                  2a0f:f40::/31
                  2a0f:f43::-2a0f:f47:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0f:e386::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:93:74:fa:0a:a5:60:0a:d1:cc:2a:1f:61:dc:d3:80:02:38:
         65:2f:30:86:96:55:84:c8:13:84:56:eb:4e:d3:3e:f8:8d:73:
         0c:c9:cd:34:5f:4e:9b:b0:fe:de:5d:27:53:9f:ff:da:4c:37:
         95:0e:0e:92:a5:7c:08:df:7e:c7:a3:16:13:08:fa:b1:66:59:
         95:a6:55:0e:12:3d:db:6c:86:4e:e3:21:32:3a:2c:a2:42:1d:
         a5:93:26:b8:3a:1c:f9:a6:e3:ac:d5:4f:72:dd:5c:00:33:ac:
         ea:14:05:1f:f0:e5:4f:ad:45:3a:c1:55:f8:c4:fd:66:64:81:
         85:f9:bd:05:68:20:43:50:ae:2d:ec:09:f1:3c:55:98:d2:93:
         41:c1:d5:b9:3d:df:3b:9b:5c:6e:0f:86:6d:56:a5:85:5f:19:
         78:9f:a6:57:40:c6:b3:ba:d8:14:ca:77:ca:2f:4b:5f:e4:cd:
         b9:c7:56:c3:69:f5:61:4d:30:f7:11:0c:db:c7:0c:9f:d3:2a:
         7e:4e:76:b9:c0:5b:b7:71:30:98:c7:ab:c5:6e:1b:7c:e7:41:
         f0:24:51:2d:45:0f:a9:92:cf:44:87:f4:f9:57:76:1a:28:93:
         a2:93:03:82:da:02:72:b6:c6:52:33:99:c1:0d:3d:ce:41:91:
         b9:d7:03:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----