Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dPmKb-vpVlBSoXRvqgC2tr26LOw.roa
File:                     dPmKb-vpVlBSoXRvqgC2tr26LOw.roa (raw, json)
Hash identifier:          n5AwA6S7bxHfUGAI4lsBrqRclB9r+bVwdrNUeuWp3Rk=
Subject key identifier:   74:F9:8A:6F:EB:E9:56:50:52:A1:74:6F:AA:00:B6:B6:BD:BA:2C:EC
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01904F624C1017AFCC87C13A8E05566699EF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dPmKb-vpVlBSoXRvqgC2tr26LOw.roa
Signing time:             Tue 25 Jun 2024 12:32:40 +0000
ROA not before:           Tue 25 Jun 2024 12:32:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     396557
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:62:4c:10:17:af:cc:87:c1:3a:8e:05:56:66:99:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Jun 25 12:32:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=74f98a6febe9565052a1746faa00b6b6bdba2cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:e1:6b:19:f7:09:b3:e7:aa:dc:f5:fa:a7:
                    98:56:23:00:a6:f4:ae:32:9d:6e:bc:f4:f6:c8:e3:
                    31:9e:04:5f:b2:e7:be:0e:b1:0a:17:c2:74:76:2e:
                    5e:45:c2:f1:f8:77:ed:70:d9:ca:d7:9e:ae:1f:45:
                    98:99:fc:a0:45:c0:96:4e:28:37:1f:c4:23:ec:41:
                    57:72:76:38:08:38:59:b3:4f:c6:34:c0:26:66:77:
                    f4:67:46:f2:16:93:27:ff:bc:28:ac:62:b0:27:98:
                    e4:35:ea:3d:65:41:41:37:33:d1:70:69:71:d4:79:
                    f0:56:63:5b:ae:49:f1:12:75:7d:a6:bd:ad:60:dc:
                    a6:61:02:d4:fb:60:49:37:3b:31:fc:45:2f:8a:97:
                    07:ac:61:40:00:30:8d:15:cb:49:be:2d:69:6e:bc:
                    00:d8:ac:4d:2f:95:4e:be:47:b2:e4:9b:80:9a:ef:
                    3a:20:4b:b5:45:2b:f0:5e:de:88:61:df:1e:6a:47:
                    c1:6c:e0:d2:2b:d3:4b:6d:ff:af:fe:e3:32:0b:0e:
                    e7:49:aa:18:07:01:cd:95:f3:6a:6c:3a:48:24:ae:
                    7a:18:9b:4d:dd:9c:75:d4:ba:38:e4:a8:68:46:69:
                    f1:21:24:57:34:2e:1d:a6:30:fb:37:ff:3a:df:12:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F9:8A:6F:EB:E9:56:50:52:A1:74:6F:AA:00:B6:B6:BD:BA:2C:EC
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dPmKb-vpVlBSoXRvqgC2tr26LOw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31

    Signature Algorithm: sha256WithRSAEncryption
         70:06:dc:f0:be:c3:ef:c2:44:f1:0d:3e:3a:56:f8:54:0c:18:
         8f:f7:bb:be:97:2d:47:9e:c0:2f:07:ba:a8:2a:e1:ef:7a:82:
         3b:b8:13:cf:ad:62:5b:cf:97:58:f2:77:44:c8:dc:2e:be:6d:
         46:0f:18:70:4c:07:96:5d:9e:f7:cf:b3:d5:47:f4:a4:83:ff:
         c7:da:f4:a6:39:56:e8:15:04:f9:88:7f:39:5c:7f:0b:b4:2f:
         e5:29:77:ec:67:40:1f:39:36:dd:39:a0:f5:7e:14:2b:ce:5e:
         e3:c0:21:ac:59:05:2e:3a:22:cb:54:b6:14:1e:97:9a:d7:8d:
         5d:2f:8a:66:09:e4:cd:7a:be:eb:d9:22:36:b2:89:f5:1a:59:
         5b:35:e2:7c:6d:eb:f5:5d:a0:ce:8e:22:b9:20:8f:9d:9f:f9:
         8c:a1:20:d7:be:0e:66:c1:2c:5a:b1:b6:c4:b4:4c:e0:4b:4d:
         62:c4:6c:2e:2f:a5:d7:14:ff:dd:35:5d:81:3a:91:f9:74:8d:
         bd:40:cd:0c:3a:12:58:ba:44:18:aa:57:d2:b2:ab:18:a4:8b:
         ac:0f:fe:44:71:c6:4c:e6:89:68:16:70:5d:ce:f4:f2:87:cf:
         ce:cf:82:42:ba:54:9f:72:b1:69:1b:ae:87:f6:7c:58:df:27:
         dc:15:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----