Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cDYVad05mDM4Rtj68pzEM4EETgw.roa
File:                     cDYVad05mDM4Rtj68pzEM4EETgw.roa (raw, json)
Hash identifier:          ezbb3GztritdOCHfUhVvaaTo/j1NonN9L7/eQW0oDJ8=
Subject key identifier:   70:36:15:69:DD:39:98:33:38:46:D8:FA:F2:9C:C4:33:81:04:4E:0C
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01904F623D405B4088AA0B0531DD145CBC55
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cDYVad05mDM4Rtj68pzEM4EETgw.roa
Signing time:             Tue 25 Jun 2024 12:32:36 +0000
ROA not before:           Tue 25 Jun 2024 12:32:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     36626
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:62:3d:40:5b:40:88:aa:0b:05:31:dd:14:5c:bc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Jun 25 12:32:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=70361569dd3998333846d8faf29cc43381044e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:ca:d8:53:d0:95:ea:61:a1:7a:70:2e:87:
                    23:d9:10:64:83:5b:c0:fe:2a:e2:be:b7:bc:9c:75:
                    58:01:b6:b2:39:bd:92:7c:5f:a7:70:8c:15:87:16:
                    9e:17:5c:60:11:bc:cf:20:40:f1:6c:15:8d:fc:23:
                    f0:83:cb:2a:0b:b4:1f:54:2a:7c:df:f4:1b:50:3c:
                    9a:17:90:8a:9e:8d:f9:2f:b9:be:b7:95:f3:e1:b2:
                    9a:66:b5:2d:71:55:a1:5f:38:3a:56:df:31:4b:ce:
                    f9:f1:0e:82:82:8f:b7:2b:c3:7f:55:75:d9:71:8f:
                    a7:e4:4d:f7:7b:84:37:f8:39:c8:20:b8:8e:a6:55:
                    10:bd:e7:70:e2:9b:5c:a7:fc:5d:02:2d:da:66:31:
                    0d:3c:45:dd:1a:71:c4:02:7d:1f:08:1d:1d:21:a6:
                    50:33:03:6e:51:19:67:3d:62:a3:88:82:a3:cf:77:
                    f2:4b:a8:e9:d3:69:b6:4c:77:0b:a9:08:4a:0e:73:
                    93:34:b3:eb:da:56:58:6b:90:4b:0d:9f:06:15:c1:
                    9d:23:35:b7:9c:86:3a:10:2c:14:6c:ef:54:87:b1:
                    ce:85:25:e1:56:8e:7b:6d:0d:59:11:ac:3b:0e:6e:
                    cd:78:60:00:f6:93:28:17:26:64:96:b9:4d:02:59:
                    98:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:36:15:69:DD:39:98:33:38:46:D8:FA:F2:9C:C4:33:81:04:4E:0C
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/cDYVad05mDM4Rtj68pzEM4EETgw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31

    Signature Algorithm: sha256WithRSAEncryption
         53:4d:54:fa:7f:ad:36:ea:21:cc:4e:57:e0:10:f8:83:1e:a2:
         f4:9a:f9:47:23:c1:0d:d8:c1:cd:b9:80:bf:2e:cf:22:42:ac:
         dd:c2:08:95:9b:e9:5c:d6:8f:3b:86:2d:ac:59:c6:5d:f0:e2:
         bb:70:71:19:c8:01:9b:8f:b7:43:fd:45:8b:4e:dc:04:85:86:
         78:b6:30:2c:e6:37:0a:bf:43:f4:dc:04:d5:3c:f7:2a:83:11:
         55:86:96:6e:6d:6f:47:09:2f:93:c3:2b:4a:27:9e:af:84:e6:
         c7:c5:c0:9f:9e:ce:4f:77:48:c3:01:ca:09:b3:7a:d0:36:9f:
         5c:48:b2:ef:f5:c3:81:f4:7b:49:46:a0:b0:8a:4d:c9:d9:4a:
         6f:99:ad:13:ce:d7:d8:57:a6:b3:90:17:e0:29:0f:3b:3b:b9:
         fb:c8:4c:8b:af:e8:5b:aa:7a:17:d8:1c:28:c2:da:5d:38:e6:
         e6:79:63:91:57:10:f1:f2:41:1e:59:16:53:d1:54:14:c8:03:
         0f:3f:aa:15:9a:ce:5f:fc:af:98:0d:d4:35:71:54:b9:99:91:
         4c:ea:d4:e5:db:9b:5a:c2:5f:6d:30:4d:33:4f:44:f2:3d:ae:
         f5:e4:5d:ee:39:64:fc:91:9c:2c:fb:1e:cd:a2:e9:51:49:32:
         4f:7b:eb:bb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYj1AW0CIqgsFMd0UXLxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDM2MTU2OWRkMzk5ODMzMzg0NmQ4ZmFmMjljYzQzMzgxMDQ0ZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx7K2FPQlephoXpwLocj2RBkg1vA
/irivre8nHVYAbayOb2SfF+ncIwVhxaeF1xgEbzPIEDxbBWN/CPwg8sqC7QfVCp8
3/QbUDyaF5CKno35L7m+t5Xz4bKaZrUtcVWhXzg6Vt8xS8758Q6Cgo+3K8N/VXXZ
cY+n5E33e4Q3+DnIILiOplUQvedw4ptcp/xdAi3aZjENPEXdGnHEAn0fCB0dIaZQ
MwNuURlnPWKjiIKjz3fyS6jp02m2THcLqQhKDnOTNLPr2lZYa5BLDZ8GFcGdIzW3
nIY6ECwUbO9Uh7HOhSXhVo57bQ1ZEaw7Dm7NeGAA9pMoFyZklrlNAlmYLQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHA2FWndOZgzOEbY+vKcxDOBBE4MMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvY0RZVmFkMDVtRE00UnRqNjhwekVNNEVFVGd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAU01U+n+tNuohzE5X4BD4gx6i9Jr5RyPBDdjBzbmA
vy7PIkKs3cIIlZvpXNaPO4YtrFnGXfDiu3BxGcgBm4+3Q/1Fi07cBIWGeLYwLOY3
Cr9D9NwE1Tz3KoMRVYaWbm1vRwkvk8MrSieer4Tmx8XAn57OT3dIwwHKCbN60Daf
XEiy7/XDgfR7SUagsIpNydlKb5mtE87X2Fems5AX4CkPOzu5+8hMi6/oW6p6F9gc
KMLaXTjm5nljkVcQ8fJBHlkWU9FUFMgDDz+qFZrOX/yvmA3UNXFUuZmRTOrU5dub
WsJfbTBNM09E8j2u9eRd7jlk/JGcLPsezaLpUUkyT3vruw==
-----END CERTIFICATE-----