Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/6e0bUWbuK69A43URUAQkm8oFHPM.roa
File:                     6e0bUWbuK69A43URUAQkm8oFHPM.roa (raw, json)
Hash identifier:          k205XjSEURDubp4OZOguIzuviTJDF6O+jykEq1zfMkU=
Subject key identifier:   E9:ED:1B:51:66:EE:2B:AF:40:E3:75:11:50:04:24:9B:CA:05:1C:F3
Certificate issuer:       /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial:       018CC424635E8606058E4340D42A8C1B3EC9
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/6e0bUWbuK69A43URUAQkm8oFHPM.roa
Signing time:             Mon 01 Jan 2024 08:29:28 +0000
ROA not before:           Mon 01 Jan 2024 08:29:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     24951
IP address blocks:        77.244.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:63:5e:86:06:05:8e:43:40:d4:2a:8c:1b:3e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
        Validity
            Not Before: Jan  1 08:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e9ed1b5166ee2baf40e375115004249bca051cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:d9:f5:dd:fe:1f:c8:75:9b:b3:c7:9c:ef:
                    f3:46:d5:4f:2d:bb:d1:f9:9b:d7:37:b1:00:37:1b:
                    8c:81:be:bc:7f:a9:64:82:b3:dc:b9:c3:a3:5f:a5:
                    f8:fe:77:22:5b:42:8f:1c:22:35:df:01:54:3d:f8:
                    35:bc:93:7d:c6:66:48:89:8b:1e:ce:e5:76:d2:6f:
                    95:e8:b7:cb:d7:78:5e:29:68:a6:d7:be:c9:0b:db:
                    8d:c9:2f:b9:b8:fe:3c:2c:3e:d6:59:69:1c:28:25:
                    38:06:d7:83:14:75:62:f5:f5:74:66:d4:9b:74:1f:
                    1b:14:7a:dd:26:78:45:f1:5f:c6:4d:e3:2d:68:10:
                    ce:92:d9:99:06:75:d2:dc:3a:04:ed:73:f0:5e:85:
                    d9:8e:3c:a0:d0:b8:58:0d:c2:45:27:3d:43:ff:2f:
                    0d:9d:df:10:34:ea:45:e7:c1:f0:c6:cc:26:29:fe:
                    6f:8f:b6:39:1a:b4:a7:43:f5:28:fa:f5:4d:1c:52:
                    b0:e6:b4:41:9a:99:67:c0:74:43:a4:a4:09:27:ab:
                    bb:20:f1:c3:6b:f0:83:6d:b4:ce:30:8a:05:da:3e:
                    9a:33:02:a8:0e:bf:0d:c3:f2:55:72:81:c7:e2:a0:
                    35:9e:b8:e2:82:b4:d2:73:3d:10:b4:0c:d7:ec:da:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:ED:1B:51:66:EE:2B:AF:40:E3:75:11:50:04:24:9B:CA:05:1C:F3
            X509v3 Authority Key Identifier:
                keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/6e0bUWbuK69A43URUAQkm8oFHPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.244.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:86:a8:86:43:ae:0c:13:b4:0b:9f:0a:60:85:ee:55:85:64:
         72:f0:20:a9:d9:ea:0b:aa:15:17:0b:9c:58:97:2f:1f:48:0b:
         3e:72:08:b8:34:8c:a1:fc:2f:1e:d6:d6:51:e5:48:c5:80:c8:
         ac:f9:da:aa:f6:d4:47:ec:32:3d:72:6f:0e:b1:1e:bb:f6:29:
         84:ad:6d:4a:50:2e:bd:68:ac:c0:a8:19:5d:8b:11:17:a4:0b:
         16:0d:47:ea:cc:3a:2a:87:c5:56:d2:d3:6a:79:a0:1e:c3:71:
         8e:3b:30:f8:19:78:09:d9:df:ed:d7:c5:61:73:2b:ba:26:b0:
         50:6b:62:99:14:cc:b1:89:fe:84:89:7d:91:99:a3:a0:1f:84:
         a2:ba:fa:c1:49:3c:60:93:d1:bb:51:89:b4:78:db:af:7d:b8:
         7d:c9:50:08:74:41:7c:4d:16:a9:23:55:5e:3b:07:33:9f:06:
         ec:98:0b:22:90:2d:62:eb:38:fb:5a:a7:f3:65:a8:df:f1:3d:
         b9:f9:6a:e5:d7:32:1a:2a:a9:77:dd:53:cb:5b:9a:04:93:42:
         41:50:fd:8a:90:95:e6:e1:82:13:b1:8a:0c:fb:8f:ac:09:3f:
         7b:15:bc:32:58:c5:d4:e9:fd:50:1d:af:1d:4b:7e:08:b1:af:
         7a:84:9e:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJGNehgYFjkNA1CqMGz7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTAwOTllMzM1NDA5ZGIwM2FjMTEzM2QxNjRmMDJhMGQ1
ZGM2NmYwHhcNMjQwMTAxMDgyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWVkMWI1MTY2ZWUyYmFmNDBlMzc1MTE1MDA0MjQ5YmNhMDUxY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFrZ9d3+H8h1m7PHnO/zRtVPLbvR
+ZvXN7EANxuMgb68f6lkgrPcucOjX6X4/nciW0KPHCI13wFUPfg1vJN9xmZIiYse
zuV20m+V6LfL13heKWim177JC9uNyS+5uP48LD7WWWkcKCU4BteDFHVi9fV0ZtSb
dB8bFHrdJnhF8V/GTeMtaBDOktmZBnXS3DoE7XPwXoXZjjyg0LhYDcJFJz1D/y8N
nd8QNOpF58HwxswmKf5vj7Y5GrSnQ/Uo+vVNHFKw5rRBmplnwHRDpKQJJ6u7IPHD
a/CDbbTOMIoF2j6aMwKoDr8Nw/JVcoHH4qA1nrjigrTScz0QtAzX7No7IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOntG1Fm7iuvQON1EVAEJJvKBRzzMB8GA1UdIwQY
MBaAFGBQCZ4zVAnbA6wRM9Fk8CoNXcZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUt
NGM2NWJkMzNkNmY2LzEvNmUwYlVXYnVLNjlBNDNVUlVBUWttOG9GSFBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wYzU1ZDItYzg5Yy00NmQ2LWJhMzUtNGM2NWJkMzNkNmY2
LzEvWUZBSm5qTlVDZHNEckJFejBXVHdLZzFkeG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETfQwMA0G
CSqGSIb3DQEBCwUAA4IBAQAShqiGQ64ME7QLnwpghe5VhWRy8CCp2eoLqhUXC5xY
ly8fSAs+cgi4NIyh/C8e1tZR5UjFgMis+dqq9tRH7DI9cm8OsR679imErW1KUC69
aKzAqBldixEXpAsWDUfqzDoqh8VW0tNqeaAew3GOOzD4GXgJ2d/t18Vhcyu6JrBQ
a2KZFMyxif6EiX2RmaOgH4SiuvrBSTxgk9G7UYm0eNuvfbh9yVAIdEF8TRapI1Ve
OwcznwbsmAsikC1i6zj7WqfzZajf8T25+Wrl1zIaKql33VPLW5oEk0JBUP2KkJXm
4YITsYoM+4+sCT97FbwyWMXU6f1QHa8dS34Isa96hJ4n
-----END CERTIFICATE-----