Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/wVE_EY0h6ik1TVqAstHrAeIKxfw.roa
File:                     wVE_EY0h6ik1TVqAstHrAeIKxfw.roa (raw, json)
Hash identifier:          epFjjQ6RH3uJP/0Wcsqokjt+W7GXBlmIuOIBWKgh+as=
Subject key identifier:   C1:51:3F:11:8D:21:EA:29:35:4D:5A:80:B2:D1:EB:01:E2:0A:C5:FC
Certificate issuer:       /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial:       018CC26D44A1994DB88F5B64C28505CE72BC
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/wVE_EY0h6ik1TVqAstHrAeIKxfw.roa
Signing time:             Mon 01 Jan 2024 00:29:50 +0000
ROA not before:           Mon 01 Jan 2024 00:29:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     31477
IP address blocks:        91.206.136.0/23 maxlen: 24
                          2001:678:d0c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:44:a1:99:4d:b8:8f:5b:64:c2:85:05:ce:72:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
        Validity
            Not Before: Jan  1 00:29:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c1513f118d21ea29354d5a80b2d1eb01e20ac5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:96:e7:bd:c3:77:5d:a4:cc:46:a2:8d:4b:
                    d8:92:9c:5e:d7:d3:b8:ca:5c:b6:25:cc:0a:f1:a4:
                    15:03:e1:2c:40:c8:b4:62:ed:d3:17:4f:9d:e6:b3:
                    37:4f:4c:3b:5e:6f:2c:a1:88:dd:86:46:4d:0f:36:
                    03:6c:83:0c:8e:e7:19:f8:8b:c1:a0:ca:ea:f5:70:
                    98:89:a3:77:75:83:57:53:ad:34:34:13:78:b3:cf:
                    37:fe:17:1f:30:6a:d1:d4:a4:ec:ba:74:26:20:26:
                    fb:33:a2:b3:23:f5:b8:85:c7:4b:4c:fd:64:cf:bd:
                    c4:11:85:ad:a5:12:af:be:11:3a:9e:43:d9:d9:01:
                    4f:44:bc:2b:f7:99:01:5f:e6:93:b2:f3:47:d8:92:
                    46:8b:2c:8a:73:9f:2b:79:4a:68:d6:51:33:4f:6a:
                    cd:3a:d1:87:46:09:c5:0d:42:2c:49:67:56:85:67:
                    52:bc:53:98:15:cd:24:6e:c1:80:92:34:24:61:e8:
                    42:2f:71:b9:df:d3:e5:94:81:b4:61:f7:f4:8b:bc:
                    21:9a:5e:7b:8c:dc:73:18:ec:bc:b0:7b:06:de:b0:
                    25:64:29:19:99:d0:18:89:1e:0b:6a:94:93:64:d1:
                    ff:fb:84:3d:bf:e9:13:90:9d:ee:e4:5e:cf:02:e9:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:51:3F:11:8D:21:EA:29:35:4D:5A:80:B2:D1:EB:01:E2:0A:C5:FC
            X509v3 Authority Key Identifier:
                keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/wVE_EY0h6ik1TVqAstHrAeIKxfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.206.136.0/23
                IPv6:
                  2001:678:d0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:b9:29:84:cc:ec:b4:b9:a3:e4:1a:1f:6c:d4:77:e7:cd:
         b5:6d:df:9f:fe:e3:c4:19:25:46:d5:e6:42:dd:bb:7a:47:c6:
         dc:40:3f:37:a6:03:a9:36:3d:05:77:64:3b:07:cc:4c:6f:d6:
         e8:c2:d5:88:b4:d4:37:70:ca:42:a3:e7:71:af:65:bc:17:2c:
         72:67:77:27:f5:0f:d6:f6:92:99:c2:fc:d1:88:81:d3:ce:c9:
         3f:cc:d9:19:dc:7e:3b:22:7b:ad:26:f2:a8:46:d0:21:ed:f5:
         a8:20:70:22:2e:d7:21:f4:e6:7c:1f:f0:af:9f:3d:78:ea:49:
         53:82:b5:62:91:b5:79:42:90:45:7d:6a:7d:da:d3:89:1e:fb:
         c7:77:89:20:f0:55:fc:73:d1:84:cf:f6:52:42:fc:d0:e6:18:
         34:15:91:10:2d:31:06:ef:fe:59:74:cb:7b:bb:c7:c8:c9:6e:
         27:04:17:85:e6:8f:e7:eb:f8:06:79:48:14:1c:78:cf:b2:4f:
         d5:01:07:e1:46:62:69:ce:3a:ba:b5:7d:80:ca:0e:1f:64:7c:
         73:f2:4b:f8:e2:7c:b7:e1:0e:04:30:32:ba:37:6d:07:b8:4c:
         a7:1b:4f:27:be:c0:20:b6:b0:de:b5:28:66:43:f2:86:7a:d5:
         b9:e1:11:58
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzCbUShmU24j1tkwoUFznK8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl
NmRhNDEwHhcNMjQwMTAxMDAyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTUxM2YxMThkMjFlYTI5MzU0ZDVhODBiMmQxZWIwMWUyMGFjNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvymW573Dd12kzEaijUvYkpxe19O4
yly2JcwK8aQVA+EsQMi0Yu3TF0+d5rM3T0w7Xm8soYjdhkZNDzYDbIMMjucZ+IvB
oMrq9XCYiaN3dYNXU600NBN4s883/hcfMGrR1KTsunQmICb7M6KzI/W4hcdLTP1k
z73EEYWtpRKvvhE6nkPZ2QFPRLwr95kBX+aTsvNH2JJGiyyKc58reUpo1lEzT2rN
OtGHRgnFDUIsSWdWhWdSvFOYFc0kbsGAkjQkYehCL3G539PllIG0Yff0i7whml57
jNxzGOy8sHsG3rAlZCkZmdAYiR4LapSTZNH/+4Q9v+kTkJ3u5F7PAulAjQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMFRPxGNIeopNU1agLLR6wHiCsX8MB8GA1UdIwQY
MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt
ZWI2NTkxYjg3N2FlLzEvd1ZFX0VZMGg2aWsxVFZxQXN0SHJBZUlLeGZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl
LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW86IMA8E
AgACMAkDBwAgAQZ4DQwwDQYJKoZIhvcNAQELBQADggEBAI3SuSmEzOy0uaPkGh9s
1HfnzbVt35/+48QZJUbV5kLdu3pHxtxAPzemA6k2PQV3ZDsHzExv1ujC1Yi01Ddw
ykKj53GvZbwXLHJndyf1D9b2kpnC/NGIgdPOyT/M2Rncfjsie60m8qhG0CHt9agg
cCIu1yH05nwf8K+fPXjqSVOCtWKRtXlCkEV9an3a04ke+8d3iSDwVfxz0YTP9lJC
/NDmGDQVkRAtMQbv/ll0y3u7x8jJbicEF4Xmj+fr+AZ5SBQceM+yT9UBB+FGYmnO
Orq1fYDKDh9kfHPyS/jifLfhDgQwMro3bQe4TKcbTye+wCC2sN61KGZD8oZ61bnh
EVg=
-----END CERTIFICATE-----