Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/iWBAR1OSSXBoMflzHe0qbIrF3FU.roa
File:                     iWBAR1OSSXBoMflzHe0qbIrF3FU.roa (raw, json)
Hash identifier:          rpKSuxScT2SachfPDTxZm8SPZLmo9ym/QvFcyjf38Z4=
Subject key identifier:   89:60:40:47:53:92:49:70:68:31:F9:73:1D:ED:2A:6C:8A:C5:DC:55
Certificate issuer:       /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial:       0194282323F422D11B46393E97115DBA129D
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/iWBAR1OSSXBoMflzHe0qbIrF3FU.roa
Signing time:             Thu 02 Jan 2025 17:49:38 +0000
ROA not before:           Thu 02 Jan 2025 17:49:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203871
IP address blocks:        2a00:4cc6::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Apr 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:23:23:f4:22:d1:1b:46:39:3e:97:11:5d:ba:12:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
        Validity
            Not Before: Jan  2 17:49:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=89604047539249706831f9731ded2a6c8ac5dc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:73:d0:dd:c9:5a:93:34:9a:0f:6a:97:58:
                    e3:ae:1c:1b:de:b3:38:ff:60:67:4e:d0:5f:b4:6d:
                    b6:32:e7:18:25:6d:5c:a2:3e:d0:60:6a:fb:2a:bc:
                    63:71:cb:3f:a5:64:1f:de:60:68:03:fa:31:69:1f:
                    1a:1b:c1:49:ec:06:2e:68:c2:31:78:68:55:c5:48:
                    d5:e0:bf:fa:50:e0:9a:d0:58:dd:3e:63:ae:ff:4b:
                    20:a0:44:1c:8a:f6:03:a0:ba:55:24:7a:f4:75:96:
                    9e:94:36:9c:20:ae:0b:55:15:61:02:45:75:de:4c:
                    b9:4a:aa:e2:d9:eb:8f:10:19:68:b3:0f:77:43:6a:
                    09:ba:36:94:42:7c:43:60:b4:40:be:52:f7:df:bb:
                    68:2b:53:a2:fc:48:b0:1e:ca:7b:dd:40:54:08:0d:
                    78:0f:8d:16:c5:6a:74:ee:fd:66:64:10:06:39:bf:
                    dd:82:a9:bc:1b:6a:e1:1a:b6:9c:c7:8a:2e:b1:1f:
                    5f:6e:f8:65:75:53:35:54:c3:fa:85:54:9c:8c:37:
                    66:3d:5e:12:74:20:f0:2a:00:9f:61:11:71:32:45:
                    31:bb:2d:83:0c:2a:7d:ae:c2:3f:b0:04:eb:e6:4b:
                    8a:3e:32:a1:61:44:7b:4d:7e:87:2f:d5:5d:54:af:
                    a9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:60:40:47:53:92:49:70:68:31:F9:73:1D:ED:2A:6C:8A:C5:DC:55
            X509v3 Authority Key Identifier:
                keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/iWBAR1OSSXBoMflzHe0qbIrF3FU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:4cc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:6e:e6:ee:cf:64:0e:d2:c5:a4:7c:78:eb:27:2f:0d:d7:a4:
         f9:5f:39:ec:22:c6:1a:eb:8b:ea:a7:83:1e:f5:fb:9b:63:e6:
         78:2d:1a:d3:09:dd:4c:25:85:c2:6a:58:c0:57:25:d3:1a:0e:
         30:3e:5e:25:a5:cc:5e:b8:7f:2d:35:58:b0:eb:d4:f7:a3:dd:
         96:bf:65:6a:38:37:fb:0f:2c:2e:c1:8d:0a:5b:0d:42:59:c0:
         5c:37:94:81:67:77:50:00:ed:57:28:36:00:c1:c3:b9:fa:01:
         34:77:07:d4:cf:f0:d4:0b:b2:eb:83:ea:f6:1c:ff:7a:08:f1:
         42:5e:14:28:42:e3:79:1e:4b:08:8b:67:65:7c:11:e1:10:e8:
         b6:43:71:ef:7b:7b:da:93:87:b5:7b:69:e1:45:ee:ef:10:f9:
         24:52:04:ec:92:a5:91:a7:e5:ca:46:ea:83:67:db:f5:dc:aa:
         d0:c5:7c:d1:83:de:ed:28:f7:09:29:9f:78:ee:7d:d1:ed:60:
         0a:35:5f:b4:26:bf:d0:f2:8e:95:94:04:8d:8f:4e:6f:c3:a2:
         d1:c0:ef:5e:2c:cc:a0:a4:1d:11:ac:a7:53:ba:6f:f7:b1:00:
         27:98:1e:e0:ab:4e:0b:6c:d1:ad:13:39:46:d3:5e:75:a3:db:
         9b:8d:69:86
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQoIyP0ItEbRjk+lxFduhKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzRlNDZiZjYzNmVhNjNlNWQxMjM2MmY1NTFiODBiMjc3
MTQ3ODAwHhcNMjUwMTAyMTc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTYwNDA0NzUzOTI0OTcwNjgzMWY5NzMxZGVkMmE2YzhhYzVkYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjpz0N3JWpM0mg9ql1jjrhwb3rM4
/2BnTtBftG22MucYJW1coj7QYGr7Krxjccs/pWQf3mBoA/oxaR8aG8FJ7AYuaMIx
eGhVxUjV4L/6UOCa0FjdPmOu/0sgoEQcivYDoLpVJHr0dZaelDacIK4LVRVhAkV1
3ky5Sqri2euPEBlosw93Q2oJujaUQnxDYLRAvlL337toK1Oi/EiwHsp73UBUCA14
D40WxWp07v1mZBAGOb/dgqm8G2rhGracx4ousR9fbvhldVM1VMP6hVScjDdmPV4S
dCDwKgCfYRFxMkUxuy2DDCp9rsI/sATr5kuKPjKhYUR7TX6HL9VdVK+pwwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFIlgQEdTkklwaDH5cx3tKmyKxdxVMB8GA1UdIwQY
MBaAFCh05Gv2Nupj5dEjYvVRuAsncUeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYt
YzEwZGE2YWFjMWIxLzEvaVdCQVIxT1NTWEJvTWZsekhlMHFiSXJGM0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYtYzEwZGE2YWFjMWIx
LzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgBMxjAN
BgkqhkiG9w0BAQsFAAOCAQEAbG7m7s9kDtLFpHx46ycvDdek+V857CLGGuuL6qeD
HvX7m2PmeC0a0wndTCWFwmpYwFcl0xoOMD5eJaXMXrh/LTVYsOvU96Pdlr9lajg3
+w8sLsGNClsNQlnAXDeUgWd3UADtVyg2AMHDufoBNHcH1M/w1Auy64Pq9hz/egjx
Ql4UKELjeR5LCItnZXwR4RDotkNx73t72pOHtXtp4UXu7xD5JFIE7JKlkaflykbq
g2fb9dyq0MV80YPe7Sj3CSmfeO590e1gCjVftCa/0PKOlZQEjY9Ob8Oi0cDvXizM
oKQdEaynU7pv97EAJ5ge4KtOC2zRrRM5RtNedaPbm41phg==
-----END CERTIFICATE-----