Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/WMFTf2P7UB1MP8Dx-cIJgZbnEGA.roa
File:                     WMFTf2P7UB1MP8Dx-cIJgZbnEGA.roa (raw, json)
Hash identifier:          /lg7oZVPX/kboOZDWfta2Bw+WC23P6F+paYpKDz1wZE=
Subject key identifier:   58:C1:53:7F:63:FB:50:1D:4C:3F:C0:F1:F9:C2:09:81:96:E7:10:60
Certificate issuer:       /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial:       01931A75651B546CD9D4ABC2D2D42C47E1BB
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/WMFTf2P7UB1MP8Dx-cIJgZbnEGA.roa
Signing time:             Mon 11 Nov 2024 09:02:01 +0000
ROA not before:           Mon 11 Nov 2024 09:02:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49981
IP address blocks:        188.208.196.0/23 maxlen: 23
                          2a06:f940::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1a:75:65:1b:54:6c:d9:d4:ab:c2:d2:d4:2c:47:e1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
        Validity
            Not Before: Nov 11 09:02:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=58c1537f63fb501d4c3fc0f1f9c2098196e71060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:30:1a:54:2a:1c:ca:ea:80:2f:7f:75:3b:
                    1d:fd:42:bf:f6:55:34:91:68:2b:81:9e:18:62:34:
                    82:db:ea:23:79:4a:eb:ee:fe:55:ca:2c:5e:ba:78:
                    b9:2f:ed:e1:40:66:ba:58:3a:7a:65:1f:b5:46:3b:
                    97:f6:50:f4:75:60:d3:c7:40:72:10:bf:c6:41:08:
                    4c:d3:5c:fd:6a:10:4a:3f:63:c7:3a:12:0e:dd:47:
                    cf:e9:26:09:a3:8e:98:3d:a9:11:08:50:48:79:2d:
                    bc:14:36:37:a0:2f:e2:7e:c6:2c:74:73:7b:3d:52:
                    ba:20:86:e1:3c:ee:1a:bd:22:3c:79:31:cb:d0:73:
                    40:13:7a:ba:a5:75:12:8b:ff:6a:59:07:37:84:bc:
                    97:39:a2:ac:07:24:2d:43:63:5f:22:9c:f5:bb:c9:
                    63:be:43:c1:ff:df:97:76:a7:c7:2a:eb:fc:7a:d0:
                    f4:bf:7c:74:d4:be:1f:18:f4:d0:e0:31:4f:3e:5e:
                    02:98:f4:b4:9b:73:2b:29:eb:63:24:48:a0:11:3f:
                    96:50:b0:99:26:a5:d8:17:b3:46:2a:95:05:b7:75:
                    1d:57:5d:d7:11:01:06:fe:16:fd:c9:14:98:c9:d8:
                    c1:b2:3c:c1:88:a6:0c:20:0a:d0:c4:56:ba:82:b2:
                    32:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C1:53:7F:63:FB:50:1D:4C:3F:C0:F1:F9:C2:09:81:96:E7:10:60
            X509v3 Authority Key Identifier:
                keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/WMFTf2P7UB1MP8Dx-cIJgZbnEGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.208.196.0/23
                IPv6:
                  2a06:f940::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:ba:c0:08:f8:32:cd:1b:87:6f:0e:77:90:4a:39:ae:60:ab:
         5c:76:3a:8f:2d:55:e6:d0:df:f6:17:eb:70:32:c0:ac:6d:a1:
         36:16:1c:9a:16:27:41:38:6c:19:97:9b:02:5f:d4:3b:3e:8b:
         d8:bd:6a:f6:19:14:05:63:ab:13:38:2a:8d:83:d8:be:e0:a3:
         61:23:a9:a3:21:14:09:c9:3d:da:47:f6:b6:10:9f:6c:16:6d:
         46:d4:f6:06:59:ae:d1:65:30:11:a4:30:2f:88:ad:97:d3:90:
         74:07:53:0c:e7:73:2f:cd:e1:81:70:bd:5e:5f:12:2a:74:35:
         41:0d:97:1d:fb:29:15:c9:04:25:a8:66:a1:f9:14:29:33:33:
         71:fa:0e:5a:07:cd:9c:a9:30:ad:83:48:07:4e:eb:6b:c6:e0:
         55:6a:66:3f:97:5b:cc:52:0d:fd:7e:39:a8:95:77:69:c9:0b:
         4e:ec:5d:d7:77:15:b8:47:fa:92:ee:de:a2:03:c9:e7:04:72:
         47:5a:f8:e1:d6:db:13:e1:aa:3e:a9:4e:a1:c6:aa:3d:1c:4d:
         99:59:cd:75:7f:61:be:e3:d9:57:5f:3c:79:71:27:34:a8:fc:
         2e:41:58:e2:41:b4:50:b9:03:ef:46:d1:9c:e2:3a:59:bd:b6:
         b8:fb:bc:f2
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAZMadWUbVGzZ1KvC0tQsR+G7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMmFhNWFjZmM5YmIwZmU2YjkxMWYxZWNhZDNlYjU0ZDQ1
Y2IzNmYwHhcNMjQxMTExMDkwMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGMxNTM3ZjYzZmI1MDFkNGMzZmMwZjFmOWMyMDk4MTk2ZTcxMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFMwGlQqHMrqgC9/dTsd/UK/9lU0
kWgrgZ4YYjSC2+ojeUrr7v5Vyixeuni5L+3hQGa6WDp6ZR+1RjuX9lD0dWDTx0By
EL/GQQhM01z9ahBKP2PHOhIO3UfP6SYJo46YPakRCFBIeS28FDY3oC/ifsYsdHN7
PVK6IIbhPO4avSI8eTHL0HNAE3q6pXUSi/9qWQc3hLyXOaKsByQtQ2NfIpz1u8lj
vkPB/9+XdqfHKuv8etD0v3x01L4fGPTQ4DFPPl4CmPS0m3MrKetjJEigET+WULCZ
JqXYF7NGKpUFt3UdV13XEQEG/hb9yRSYydjBsjzBiKYMIArQxFa6grIy9QIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFFjBU39j+1AdTD/A8fnCCYGW5xBgMB8GA1UdIwQY
MBaAFPsqpaz8m7D+a5EfHsrT61TUXLNvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15cWxyUHlic1A1cmtSOGV5dFByVk5SY3MyOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2
LWVlMDU3Y2Y5YzE2MS8xL1dNRlRmMlA3VUIxTVA4RHgtY0lKZ1pibkVHQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjEvZDllN2VkLTNjMGYtNGE5Mi04NzE2LWVlMDU3Y2Y5YzE2
MS8xLzEteXFsclB5YnNQNXJrUjhleXRQclZOUmNzMjguY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAG80MQw
DwQCAAIwCQMHACoG+UAAADANBgkqhkiG9w0BAQsFAAOCAQEAMLrACPgyzRuHbw53
kEo5rmCrXHY6jy1V5tDf9hfrcDLArG2hNhYcmhYnQThsGZebAl/UOz6L2L1q9hkU
BWOrEzgqjYPYvuCjYSOpoyEUCck92kf2thCfbBZtRtT2Blmu0WUwEaQwL4itl9OQ
dAdTDOdzL83hgXC9Xl8SKnQ1QQ2XHfspFckEJahmofkUKTMzcfoOWgfNnKkwrYNI
B07ra8bgVWpmP5dbzFIN/X45qJV3ackLTuxd13cVuEf6ku7eogPJ5wRyR1r44dbb
E+GqPqlOocaqPRxNmVnNdX9hvuPZV188eXEnNKj8LkFY4kG0ULkD70bRnOI6Wb22
uPu88g==
-----END CERTIFICATE-----