Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/YcwI2fZlMwxUA69CQFBEmIR733E.roa
File:                     YcwI2fZlMwxUA69CQFBEmIR733E.roa (raw, json)
Hash identifier:          et8GDR6ngYKl0AZO8Wq7BvgLSkJvYviEhnike/pXqBE=
Subject key identifier:   61:CC:08:D9:F6:65:33:0C:54:03:AF:42:40:50:44:98:84:7B:DF:71
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       018CC649BF8E5DADE5A8873086ECFDD29078
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/YcwI2fZlMwxUA69CQFBEmIR733E.roa
Signing time:             Mon 01 Jan 2024 18:29:31 +0000
ROA not before:           Mon 01 Jan 2024 18:29:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204652
IP address blocks:        185.25.142.0/24 maxlen: 24
                          2a02:2339:c000::/34 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:49:bf:8e:5d:ad:e5:a8:87:30:86:ec:fd:d2:90:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Jan  1 18:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=61cc08d9f665330c5403af4240504498847bdf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:5a:4f:b8:ad:02:22:a5:13:11:ff:5a:0e:
                    14:ab:51:0b:fb:a4:a3:c4:9d:b7:9f:b7:3c:67:1a:
                    5e:b2:a0:6a:b2:61:7e:26:8b:7e:57:54:db:a0:38:
                    8a:ab:dd:7e:ae:58:ba:c5:d8:06:ee:34:16:55:a3:
                    6f:ea:65:2f:7a:d0:35:ba:10:a3:cd:f4:6b:ba:2b:
                    b8:7c:07:ac:52:46:f1:3c:93:c9:af:8f:c4:23:00:
                    26:94:fb:58:d0:36:8a:ad:02:c1:01:a3:f7:69:6a:
                    29:5c:b3:e0:80:14:cc:e3:d3:23:91:9c:d5:1b:9e:
                    a5:e1:0c:2f:5a:87:f0:0e:16:51:da:ab:d4:be:fa:
                    f0:8e:7f:28:3a:58:c0:5b:88:64:12:c4:90:7b:c7:
                    15:90:11:6b:12:6c:cd:e8:12:fc:e3:ab:3f:20:68:
                    4e:21:9a:65:75:02:a2:be:92:98:2e:76:82:0c:05:
                    87:16:33:67:c0:9f:50:bb:8d:be:59:0c:26:33:75:
                    5a:0c:bd:25:83:bc:1c:5a:55:3d:0e:cc:d7:07:ea:
                    eb:58:a6:11:95:66:88:25:4c:b6:96:95:bc:a9:0d:
                    be:72:45:23:64:b3:f0:86:89:61:ae:75:40:18:6c:
                    0c:d3:03:ac:5b:f2:77:e7:95:a1:2d:f9:0a:59:6b:
                    cb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CC:08:D9:F6:65:33:0C:54:03:AF:42:40:50:44:98:84:7B:DF:71
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/YcwI2fZlMwxUA69CQFBEmIR733E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.25.142.0/24
                IPv6:
                  2a02:2339:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:0f:4d:d7:14:dd:f1:de:62:50:c1:bf:3f:0f:3f:a3:d9:3c:
         ba:33:89:68:3e:af:60:a9:10:c5:3e:fe:56:b8:bb:73:b9:9c:
         83:34:6f:06:84:76:e5:05:26:7d:d6:bc:96:21:0a:8a:7a:28:
         e7:e4:2e:44:7d:a0:51:a6:f9:24:56:90:a7:62:83:db:b9:b8:
         f3:d1:ec:0a:67:1d:97:58:86:0b:21:f9:54:53:04:d9:01:55:
         a7:3c:b5:e3:37:e7:a4:8f:4a:f3:5b:46:07:ce:ff:96:7b:23:
         21:fd:d9:87:99:ab:11:58:9e:7b:d6:1d:9e:13:27:44:80:c6:
         9b:ee:2f:b2:d4:7c:bd:f5:20:5b:e9:0d:7f:aa:8e:21:05:8e:
         7c:f8:ed:98:50:54:b5:7f:6d:92:09:c3:39:c4:f6:b2:95:e8:
         d2:d1:51:81:76:c1:32:a3:a6:c2:46:2f:91:a2:03:1f:31:a3:
         06:c1:ca:e9:22:dc:74:8a:70:59:5a:f0:7e:a8:e5:5f:79:f0:
         77:e1:fc:01:d4:c0:d8:00:8a:39:63:18:94:29:00:6d:41:96:
         f0:97:fd:c7:2d:01:ec:02:90:83:66:fc:0e:41:83:cf:70:a4:
         5b:ef:34:33:47:d5:f7:b0:a9:3a:28:fe:db:80:f7:54:df:a7:
         d5:33:87:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----