Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/PdV0WmAorqvekQKnSq4mwPT8hhU.roa
File:                     PdV0WmAorqvekQKnSq4mwPT8hhU.roa (raw, json)
Hash identifier:          RSYaCSDMBA8srYXCcYip00Znic1kFTiiVy5MWENuroE=
Subject key identifier:   3D:D5:74:5A:60:28:AE:AB:DE:91:02:A7:4A:AE:26:C0:F4:FC:86:15
Certificate issuer:       /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial:       018CC3B700DC575B19D5DC6A9124E7865593
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/PdV0WmAorqvekQKnSq4mwPT8hhU.roa
Signing time:             Mon 01 Jan 2024 06:29:59 +0000
ROA not before:           Mon 01 Jan 2024 06:29:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12605
IP address blocks:        83.164.0.0/17 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:00:dc:57:5b:19:d5:dc:6a:91:24:e7:86:55:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
        Validity
            Not Before: Jan  1 06:29:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3dd5745a6028aeabde9102a74aae26c0f4fc8615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:ea:a3:6e:32:c4:65:5e:e8:b9:1c:15:86:
                    a3:f5:de:aa:c4:51:80:68:4b:38:ee:ab:ca:16:69:
                    11:90:dd:17:32:f5:39:d4:58:dd:19:6f:af:07:79:
                    97:a8:02:30:cb:39:af:60:45:35:7d:35:78:78:2b:
                    29:2f:16:94:ac:1b:2f:fa:34:3f:5b:89:5e:8e:39:
                    44:08:5e:28:1d:91:a2:4b:fe:b3:88:b4:fc:ab:f3:
                    73:07:7a:28:61:6a:fa:a6:98:49:f8:c8:a4:ed:af:
                    1e:fa:96:4d:41:a4:df:86:5b:47:13:fd:5c:c9:98:
                    42:6c:fc:2c:d2:b0:74:cf:d8:be:07:37:34:3b:f3:
                    c5:72:9a:c9:19:9e:6d:41:2f:b4:1b:36:45:00:c3:
                    4c:76:d4:06:e2:0e:a3:da:af:d7:82:6e:bc:9a:c8:
                    7f:89:93:80:55:71:e0:66:1a:5b:87:97:dc:2d:4f:
                    72:61:bc:7a:c5:33:27:9e:c4:c7:ea:59:27:9a:ca:
                    28:69:5e:69:67:2b:b1:f1:6b:86:de:d1:13:4a:5c:
                    9b:6e:c4:4d:57:00:f8:d1:d8:73:85:ce:9d:64:38:
                    cd:de:c9:57:c3:db:6a:78:a7:a8:7d:8c:35:fe:96:
                    ec:31:1c:ea:ab:2d:2a:1f:10:f1:12:c0:74:f9:0c:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D5:74:5A:60:28:AE:AB:DE:91:02:A7:4A:AE:26:C0:F4:FC:86:15
            X509v3 Authority Key Identifier:
                keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/PdV0WmAorqvekQKnSq4mwPT8hhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.164.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         08:56:3f:96:de:aa:17:b2:74:60:79:7a:88:74:d6:b7:ba:10:
         9e:0e:b5:4c:09:39:69:1d:6c:b9:c3:56:ba:72:9c:3e:54:dc:
         a3:96:a5:33:d8:0f:e3:8e:f1:d9:23:e2:5b:55:84:7e:aa:4b:
         a0:5a:29:81:e8:ce:9c:93:1b:b0:99:11:ef:41:52:78:af:01:
         b8:24:f4:ff:5d:94:00:3b:d8:7a:3e:eb:b3:99:23:16:19:18:
         7b:78:6b:e3:68:8f:0c:91:38:10:97:63:c7:bc:eb:70:17:e8:
         7e:7a:fb:0f:7d:03:56:bc:ab:e8:76:a5:90:35:15:ab:10:02:
         d5:ca:1d:2f:ef:4e:4e:d5:50:8f:3e:0f:f0:62:55:63:df:66:
         49:2a:39:fd:ff:3a:7e:df:78:e7:83:8d:e4:8f:78:a2:e6:82:
         a4:45:69:44:21:ad:2d:48:2f:5e:68:6d:40:4c:2b:48:95:aa:
         88:aa:11:19:9d:b6:4f:4a:99:64:7b:4d:46:11:59:28:e3:ba:
         e9:28:89:66:23:9c:08:7b:ae:e0:b1:bd:0d:45:44:b9:c7:3e:
         b7:94:74:ef:af:ac:8b:6d:61:c6:fe:f2:65:2c:06:d2:76:4f:
         1d:5f:67:39:45:30:ee:3f:08:e2:5c:47:c6:41:f6:18:14:7f:
         8f:c0:88:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtwDcV1sZ1dxqkSTnhlWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjQ1ZTU4NGYxZWY5YTg4MWYxZmJiYzRkMjdhMzQyM2Rl
M2RmZjEwHhcNMjQwMTAxMDYyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGQ1NzQ1YTYwMjhhZWFiZGU5MTAyYTc0YWFlMjZjMGY0ZmM4NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wnqo24yxGVe6LkcFYaj9d6qxFGA
aEs47qvKFmkRkN0XMvU51FjdGW+vB3mXqAIwyzmvYEU1fTV4eCspLxaUrBsv+jQ/
W4lejjlECF4oHZGiS/6ziLT8q/NzB3ooYWr6pphJ+Mik7a8e+pZNQaTfhltHE/1c
yZhCbPws0rB0z9i+Bzc0O/PFcprJGZ5tQS+0GzZFAMNMdtQG4g6j2q/Xgm68msh/
iZOAVXHgZhpbh5fcLU9yYbx6xTMnnsTH6lknmsooaV5pZyux8WuG3tETSlybbsRN
VwD40dhzhc6dZDjN3slXw9tqeKeofYw1/pbsMRzqqy0qHxDxEsB0+QzTDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD3VdFpgKK6r3pECp0quJsD0/IYVMB8GA1UdIwQY
MBaAFH1kXlhPHvmogfH7vE0no0I949/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZDFjMzMtOTExNy00YTExLWJiZmUt
ZGI4MWExOGUyNDJlLzEvUGRWMFdtQW9ycXZla1FLblNxNG13UFQ4aGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZDFjMzMtOTExNy00YTExLWJiZmUtZGI4MWExOGUyNDJl
LzEvZldSZVdFOGUtYWlCOGZ1OFRTZWpRajNqM19FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHU6QAMA0G
CSqGSIb3DQEBCwUAA4IBAQAIVj+W3qoXsnRgeXqIdNa3uhCeDrVMCTlpHWy5w1a6
cpw+VNyjlqUz2A/jjvHZI+JbVYR+qkugWimB6M6ckxuwmRHvQVJ4rwG4JPT/XZQA
O9h6PuuzmSMWGRh7eGvjaI8MkTgQl2PHvOtwF+h+evsPfQNWvKvodqWQNRWrEALV
yh0v705O1VCPPg/wYlVj32ZJKjn9/zp+33jng43kj3ii5oKkRWlEIa0tSC9eaG1A
TCtIlaqIqhEZnbZPSplke01GEVko47rpKIlmI5wIe67gsb0NRUS5xz63lHTvr6yL
bWHG/vJlLAbSdk8dX2c5RTDuPwjiXEfGQfYYFH+PwIjB
-----END CERTIFICATE-----