Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gmk_R-ZzBrqXrS1qawCqWO7EJKI.roa
File:                     gmk_R-ZzBrqXrS1qawCqWO7EJKI.roa (download)
Hash identifier:          Lp/1NJ/AzwVTu8ss16917YmrrAjFLtfUi6yXZ77PFaA=
Subject key identifier:   82:69:3F:47:E6:73:06:BA:97:AD:2D:6A:6B:00:AA:58:EE:C4:24:A2
Certificate issuer:       /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial:       1AA5B550
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gmk_R-ZzBrqXrS1qawCqWO7EJKI.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 107.181.140.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447067472 (0x1aa5b550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
        Validity
            Not Before: Jan  1 12:02:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82693f47e67306ba97ad2d6a6b00aa58eec424a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:e1:2e:92:bf:30:68:68:2d:7c:ea:ee:b7:
                    a0:14:80:08:65:ea:db:80:02:f0:b7:51:6a:de:1b:
                    6a:97:63:d0:ca:49:58:76:0c:4a:d6:d9:48:dd:e4:
                    b1:bc:56:55:94:94:02:a3:5c:87:71:b7:97:eb:0b:
                    75:d6:d0:a0:fe:ec:d0:8a:45:0b:b7:f2:17:2f:79:
                    e9:6f:0f:33:11:20:e9:90:c9:a3:03:b0:63:4d:1c:
                    66:64:4e:a7:46:c9:6a:5b:70:5c:33:46:5a:f9:a9:
                    7e:56:40:f2:39:65:67:d2:50:9b:cf:08:ec:9a:0a:
                    6a:c4:32:2d:a4:33:18:56:00:8f:0b:d8:ae:bb:22:
                    8c:e0:20:fa:b7:d1:eb:17:42:70:d8:96:8a:2d:2b:
                    8b:da:49:79:f1:d9:da:7c:f2:af:68:2a:e3:8c:22:
                    bc:35:98:b9:56:d5:18:2c:11:16:1b:a9:0b:10:0d:
                    cf:b2:f2:9d:01:9b:60:98:60:99:0c:5a:2a:06:96:
                    b9:5e:94:20:d0:ef:e3:01:75:b5:31:7d:6d:b0:14:
                    c2:64:da:c1:a7:54:20:5f:d6:b2:48:d7:37:0d:94:
                    5f:2d:ff:fa:b3:95:b9:ff:0e:6b:91:a5:88:4a:88:
                    2f:e3:e1:89:72:dc:54:30:b5:70:d1:ca:a3:ff:13:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                82:69:3F:47:E6:73:06:BA:97:AD:2D:6A:6B:00:AA:58:EE:C4:24:A2
            X509v3 Authority Key Identifier: 
                keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/gmk_R-ZzBrqXrS1qawCqWO7EJKI.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.181.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:35:8b:12:5b:fc:21:cb:10:ad:92:aa:00:b3:42:21:55:
         b5:dc:bb:91:98:2f:c8:a0:6d:64:ad:5c:36:46:0a:62:d8:36:
         4f:b2:8c:00:20:f8:5b:70:71:a3:a7:69:42:00:98:81:32:51:
         77:9d:dd:cd:d3:75:49:13:76:2b:1c:03:e6:59:26:e0:b0:b0:
         8d:04:05:9f:c4:0c:f4:6d:10:b4:3e:6b:27:37:f4:f1:d3:e3:
         7f:75:d0:98:76:de:db:6c:68:f0:f0:b2:0b:ff:ae:70:ac:da:
         79:b2:36:ae:78:d3:86:7d:6f:f8:86:d3:4c:7e:15:03:fa:e6:
         07:b0:9e:d7:8b:a7:51:2b:08:af:a5:7c:38:81:fe:c4:f6:b0:
         47:ae:92:24:6c:b1:9e:a3:8d:8a:87:da:fd:a5:67:5f:fb:9f:
         31:13:1d:f5:b6:9c:03:67:66:66:44:c6:58:d9:0f:aa:e7:df:
         18:94:22:50:6d:d8:85:45:88:03:54:3c:82:fa:d2:5b:33:77:
         7e:90:15:32:0e:7a:a8:94:0c:6f:db:68:c7:63:09:ce:b8:2e:
         69:c8:3a:28:6d:fc:b8:49:16:f8:7e:d3:19:23:7a:d6:c0:90:
         c3:03:a0:10:0d:8d:81:8a:29:23:68:5f:b0:ff:13:79:5f:a8:
         08:fd:01:21
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGqW1UDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NzU0YzM0N2Q2OGQxNTQ5M2RlNzFiYjk2MmYwYTU2N2UxMzRkNjAzMB4XDTIyMDEw
MTEyMDIzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODI2OTNmNDdlNjcz
MDZiYTk3YWQyZDZhNmIwMGFhNThlZWM0MjRhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWY4S6SvzBoaC186u63oBSACGXq24AC8LdRat4bapdj0MpJ
WHYMStbZSN3ksbxWVZSUAqNch3G3l+sLddbQoP7s0IpFC7fyFy956W8PMxEg6ZDJ
owOwY00cZmROp0bJaltwXDNGWvmpflZA8jllZ9JQm88I7JoKasQyLaQzGFYAjwvY
rrsijOAg+rfR6xdCcNiWii0ri9pJefHZ2nzyr2gq44wivDWYuVbVGCwRFhupCxAN
z7LynQGbYJhgmQxaKgaWuV6UINDv4wF1tTF9bbAUwmTawadUIF/WskjXNw2UXy3/
+rOVuf8Oa5GliEqIL+PhiXLcVDC1cNHKo/8TEJkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSCaT9H5nMGupetLWprAKpY7sQkojAfBgNVHSMEGDAWgBTnVMNH1o0VST3n
G7li8KVn4TTWAzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzUxVERSOWFORlVrOTV4dTVZdkNsWi1FMDFnTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNDZkYjNhLWE1NzMtNGYyOC1iNDNiLTM3YjYyZDIyMzkyNC8x
L2dta19SLVp6QnJxWHJTMXFhd0NxV083RUpLSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NDZkYjNhLWE1NzMtNGYyOC1iNDNiLTM3YjYyZDIyMzkyNC8xLzUxVERSOWFORlVr
OTV4dTVZdkNsWi1FMDFnTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGu1jDANBgkqhkiG9w0BAQsFAAOC
AQEAWjY1ixJb/CHLEK2SqgCzQiFVtdy7kZgvyKBtZK1cNkYKYtg2T7KMACD4W3Bx
o6dpQgCYgTJRd53dzdN1SRN2KxwD5lkm4LCwjQQFn8QM9G0QtD5rJzf08dPjf3XQ
mHbe22xo8PCyC/+ucKzaebI2rnjThn1v+IbTTH4VA/rmB7Ce14unUSsIr6V8OIH+
xPawR66SJGyxnqONiofa/aVnX/ufMRMd9bacA2dmZkTGWNkPquffGJQiUG3YhUWI
A1Q8gvrSWzN3fpAVMg56qJQMb9tox2MJzrguacg6KG38uEkW+H7TGSN61sCQwwOg
EA2NgYopI2hfsP8TeV+oCP0BIQ==
-----END CERTIFICATE-----
Generated at Fri Dec 9 02:20:15 2022 by rpki-client.