Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/GY2oZrtglfTkAGfhiGVH6OhdFsI.roa
File:                     GY2oZrtglfTkAGfhiGVH6OhdFsI.roa (raw, json)
Hash identifier:          99i9mYdyhOWi4HmmHb+dXMMBBgrRYRqP//RDsY72X1w=
Subject key identifier:   19:8D:A8:66:BB:60:95:F4:E4:00:67:E1:88:65:47:E8:E8:5D:16:C2
Certificate issuer:       /CN=bc70474792f5083e625f24d6d57aab72d657229e
Certificate serial:       018CC4251A1B6BEC53276394D836068A2053
Authority key identifier: BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/GY2oZrtglfTkAGfhiGVH6OhdFsI.roa
Signing time:             Mon 01 Jan 2024 08:30:14 +0000
ROA not before:           Mon 01 Jan 2024 08:30:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205158
IP address blocks:        194.56.182.0/24 maxlen: 24
                          2a11:3a00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:1a:1b:6b:ec:53:27:63:94:d8:36:06:8a:20:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc70474792f5083e625f24d6d57aab72d657229e
        Validity
            Not Before: Jan  1 08:30:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=198da866bb6095f4e40067e1886547e8e85d16c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:37:5c:91:a7:e7:54:35:ee:8b:69:3f:3c:
                    b5:b9:32:34:05:4f:4d:73:39:93:47:03:1e:81:57:
                    cb:40:b0:7d:41:84:4f:55:ab:50:a2:9c:0a:b9:c5:
                    af:59:4e:b0:a6:03:c7:2b:f2:b0:c4:8e:23:4c:8f:
                    ed:d0:43:33:ef:7d:48:96:47:51:ba:ba:8f:bf:4a:
                    3c:25:d4:d2:c1:97:58:09:70:28:3c:d4:39:57:33:
                    64:21:ba:ef:62:48:54:6a:98:8c:85:74:d5:cb:67:
                    65:5c:85:3b:5b:6c:81:d4:a8:e0:60:65:99:62:cf:
                    60:f8:a6:9e:86:bc:7a:7f:1a:10:c9:c6:13:20:eb:
                    b1:54:97:87:6b:ac:68:ab:bc:58:1c:46:53:f3:e1:
                    d0:58:e5:a6:e4:ae:3c:9a:60:09:44:34:38:07:9c:
                    ec:02:b6:97:b8:98:02:d1:3f:78:ed:8d:25:0c:61:
                    af:35:a2:17:ed:3b:27:2e:d2:31:c5:39:ae:dc:d4:
                    ff:b0:7a:f2:ed:e3:49:47:f8:5a:6a:c3:93:92:6c:
                    1b:b2:bd:fe:3b:a6:ea:2f:82:d6:6e:8c:a9:fb:17:
                    a2:f8:69:ea:03:6c:1a:db:55:c6:bd:d7:7c:24:9d:
                    03:6b:60:b0:01:5a:5e:96:03:54:e1:ec:b7:68:24:
                    48:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8D:A8:66:BB:60:95:F4:E4:00:67:E1:88:65:47:E8:E8:5D:16:C2
            X509v3 Authority Key Identifier:
                keyid:BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/GY2oZrtglfTkAGfhiGVH6OhdFsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.182.0/24
                IPv6:
                  2a11:3a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:5a:0d:93:d6:25:b0:ed:d4:51:88:e8:fc:1a:03:4d:ce:
         1b:76:f9:86:4c:13:f7:ac:13:32:1b:ee:2e:99:d9:a1:56:02:
         fb:ea:4b:4b:9a:b2:d7:37:fe:e7:cc:5e:30:cf:ec:fc:4b:61:
         6e:4b:63:b8:bc:c7:a1:aa:cc:1c:8e:30:52:75:d5:56:fb:2c:
         9e:62:40:b4:a1:75:5d:08:f6:14:82:d8:ff:19:6f:b1:31:59:
         36:36:89:f9:62:78:12:23:15:4a:1b:e5:1d:cf:6d:af:97:e1:
         5b:53:01:fa:89:a2:cf:52:81:ff:ae:90:88:9b:f7:e8:75:72:
         20:7a:66:9e:94:56:09:37:86:67:9c:04:14:2d:d3:04:26:f0:
         e3:02:8f:92:d0:92:db:13:78:df:fe:e6:6c:4e:8d:bf:97:aa:
         78:9a:e0:84:b2:e8:b2:e3:1f:2f:1d:ef:fb:64:a2:36:de:fd:
         32:25:a3:72:0e:2a:19:63:a4:2e:3a:1a:d8:1e:92:bc:8d:22:
         3d:9d:01:8d:da:bf:82:80:0f:33:30:54:17:f6:17:f0:fc:ca:
         d1:88:9c:28:ef:9b:ba:68:d8:22:56:2a:93:18:14:d6:fa:88:
         b2:50:6c:68:bf:18:59:5a:57:da:e2:e2:3e:44:85:1e:dd:22:
         89:36:c6:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzEJRoba+xTJ2OU2DYGiiBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNzA0NzQ3OTJmNTA4M2U2MjVmMjRkNmQ1N2FhYjcyZDY1
NzIyOWUwHhcNMjQwMTAxMDgzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOThkYTg2NmJiNjA5NWY0ZTQwMDY3ZTE4ODY1NDdlOGU4NWQxNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz43XJGn51Q17otpPzy1uTI0BU9N
czmTRwMegVfLQLB9QYRPVatQopwKucWvWU6wpgPHK/KwxI4jTI/t0EMz731IlkdR
urqPv0o8JdTSwZdYCXAoPNQ5VzNkIbrvYkhUapiMhXTVy2dlXIU7W2yB1KjgYGWZ
Ys9g+Kaehrx6fxoQycYTIOuxVJeHa6xoq7xYHEZT8+HQWOWm5K48mmAJRDQ4B5zs
AraXuJgC0T947Y0lDGGvNaIX7TsnLtIxxTmu3NT/sHry7eNJR/haasOTkmwbsr3+
O6bqL4LWboyp+xei+GnqA2wa21XGvdd8JJ0Da2CwAVpelgNU4ey3aCRIpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBmNqGa7YJX05ABn4YhlR+joXRbCMB8GA1UdIwQY
MBaAFLxwR0eS9Qg+Yl8k1tV6q3LWVyKeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkhCSFI1TDFDRDVpWHlUVzFYcXJjdFpYSXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYjZhNmMtYzg3ZS00YzZkLWJiMGEt
YmJjODAyN2YwYTNhLzEvR1kyb1pydGdsZlRrQUdmaGlHVkg2T2hkRnNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYjZhNmMtYzg3ZS00YzZkLWJiMGEtYmJjODAyN2YwYTNh
LzEvdkhCSFI1TDFDRDVpWHlUVzFYcXJjdFpYSXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwji2MA8E
AgACMAkDBwAqEToAAAAwDQYJKoZIhvcNAQELBQADggEBAJT4Wg2T1iWw7dRRiOj8
GgNNzht2+YZME/esEzIb7i6Z2aFWAvvqS0uastc3/ufMXjDP7PxLYW5LY7i8x6Gq
zByOMFJ11Vb7LJ5iQLShdV0I9hSC2P8Zb7ExWTY2iflieBIjFUob5R3Pba+X4VtT
AfqJos9Sgf+ukIib9+h1ciB6Zp6UVgk3hmecBBQt0wQm8OMCj5LQktsTeN/+5mxO
jb+Xqnia4ISy6LLjHy8d7/tkojbe/TIlo3IOKhljpC46GtgekryNIj2dAY3av4KA
DzMwVBf2F/D8ytGInCjvm7po2CJWKpMYFNb6iLJQbGi/GFlaV9ri4j5EhR7dIok2
xm8=
-----END CERTIFICATE-----