Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UEsZHDzSlKFmBDTfQ2P-D-htvb0.roa
File:                     UEsZHDzSlKFmBDTfQ2P-D-htvb0.roa (raw, json)
Hash identifier:          f4PQDvAKTaJisXdArIojGjdswOWs9576c6710VpkMZ8=
Subject key identifier:   50:4B:19:1C:3C:D2:94:A1:66:04:34:DF:43:63:FE:0F:E8:6D:BD:BD
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01904F6234C8C82519D8787084140958DE87
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UEsZHDzSlKFmBDTfQ2P-D-htvb0.roa
Signing time:             Tue 25 Jun 2024 12:32:34 +0000
ROA not before:           Tue 25 Jun 2024 12:32:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     19836
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:62:34:c8:c8:25:19:d8:78:70:84:14:09:58:de:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Jun 25 12:32:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=504b191c3cd294a1660434df4363fe0fe86dbdbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:65:03:6a:6c:2c:4a:9b:5c:36:a0:61:17:
                    4d:47:6a:cb:5c:0f:8b:a3:db:d0:68:b5:f0:fa:e4:
                    ea:a8:49:32:c7:22:0f:10:3e:6b:6e:b7:54:38:7c:
                    18:31:d6:1f:96:8a:91:75:8b:6a:ba:96:45:45:56:
                    d5:9d:6e:df:b4:50:e9:ca:c4:cd:e9:c6:b1:74:35:
                    a9:16:5a:24:1a:0b:1e:88:7b:59:3f:51:6a:50:98:
                    91:2a:a5:78:67:08:a6:57:f4:1b:f4:43:d2:d1:c8:
                    74:a8:0d:63:1c:0a:c0:63:a8:29:fc:89:59:12:3f:
                    c4:a8:ad:a6:7c:b1:a7:e0:28:34:03:b5:22:ff:49:
                    7f:c5:1d:76:8f:3a:80:7e:81:f8:2d:8f:2a:89:fb:
                    2f:84:9b:3c:3a:34:c9:22:90:96:c8:a9:51:13:55:
                    3f:81:6f:3b:98:a2:13:29:b5:88:63:1d:35:37:f7:
                    b8:3a:d2:55:19:c8:9d:75:03:2e:fc:a6:aa:f8:bd:
                    c7:a7:8b:25:cf:94:e6:6e:94:6c:b4:a9:9e:77:23:
                    e4:6b:35:78:63:75:01:10:0b:21:b4:1d:f4:be:b5:
                    bc:71:f9:43:cb:04:7a:e2:41:d7:c9:6c:00:e0:df:
                    97:5f:d6:56:7d:e5:eb:61:a2:64:63:d4:97:f3:c7:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:19:1C:3C:D2:94:A1:66:04:34:DF:43:63:FE:0F:E8:6D:BD:BD
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UEsZHDzSlKFmBDTfQ2P-D-htvb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:16:24:ff:ce:c4:b8:14:94:e8:0f:52:e3:2e:15:07:23:
         99:f0:66:81:f1:9a:40:a5:ac:75:d7:06:3f:c8:b9:f8:1f:5d:
         11:bc:91:ea:1f:98:0e:b4:8c:87:6f:d9:db:d8:49:50:e2:b9:
         3f:5e:8f:79:eb:6d:ae:4c:1c:2d:37:02:83:b1:48:ae:3c:f7:
         b7:6b:e9:12:db:9f:c1:e0:61:4c:05:87:63:ed:76:92:40:3b:
         e5:4d:44:82:64:ae:97:bf:8a:3f:e5:4b:3b:bb:83:af:74:ce:
         e3:8c:39:f1:4b:b7:b5:ea:20:e3:7d:ca:b9:2b:4a:1a:e2:4d:
         b0:34:e2:df:2e:c7:1a:a4:da:17:51:ec:1e:e4:df:4f:51:f4:
         7a:7b:66:51:60:17:84:06:b7:10:e7:24:23:6e:4d:15:7f:ca:
         59:44:b5:75:59:64:36:29:74:52:ba:2e:25:53:1e:a2:45:3f:
         65:db:b4:6f:66:17:d4:e4:5f:cb:4b:75:95:56:37:90:c4:5e:
         f4:3a:46:c3:67:08:88:a9:2d:f4:03:c5:cb:a7:ee:72:55:3e:
         7d:12:18:dc:dc:79:43:49:ef:61:4c:b1:2c:58:0f:e2:14:ac:
         32:7a:07:aa:95:9a:d9:01:e4:7e:44:37:de:96:91:5a:58:f8:
         57:68:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----