Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/t_xtcXFL7SGI90sxP3ki0YoAbtQ.roa
File:                     t_xtcXFL7SGI90sxP3ki0YoAbtQ.roa (raw, json)
Hash identifier:          wiB5PHKPfz7YLTWBSr9KGWmgmb7QOuATolFwQLIAOwA=
Subject key identifier:   B7:FC:6D:71:71:4B:ED:21:88:F7:4B:31:3F:79:22:D1:8A:00:6E:D4
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01904F624BA74CDA16B0B180C074E4CF6611
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/t_xtcXFL7SGI90sxP3ki0YoAbtQ.roa
Signing time:             Tue 25 Jun 2024 12:32:40 +0000
ROA not before:           Tue 25 Jun 2024 12:32:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     396555
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:62:4b:a7:4c:da:16:b0:b1:80:c0:74:e4:cf:66:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Jun 25 12:32:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b7fc6d71714bed2188f74b313f7922d18a006ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c0:39:f1:10:81:fc:6b:08:1b:1b:b8:39:68:
                    cb:83:72:86:b6:34:14:f2:9a:ea:1b:47:dd:3d:b6:
                    0b:19:36:fa:11:43:27:46:6c:3c:b8:b3:a9:5b:c3:
                    db:b4:fb:98:11:d0:81:53:e5:b6:89:06:6d:ce:c3:
                    08:e4:c8:be:62:42:35:66:07:0f:07:a6:e5:4d:20:
                    8d:f8:a6:28:b5:18:5f:9c:b2:59:0b:75:a8:00:7f:
                    7c:c1:f3:6c:62:47:78:76:3a:98:d9:e2:b2:6b:f4:
                    51:3f:ee:e7:65:ca:e3:b3:4c:c3:ae:2c:9b:19:34:
                    4a:f3:f4:60:f1:1d:0b:aa:d7:39:83:eb:00:c5:62:
                    73:7d:b8:c2:11:d7:c1:8f:77:53:68:15:59:bb:ef:
                    9a:28:99:20:b4:2d:d5:17:12:9b:6b:62:28:e0:44:
                    cd:03:52:ff:e2:89:ea:29:94:de:b8:a6:a9:9f:32:
                    fe:5d:e2:90:b0:1a:59:78:36:32:17:d3:2b:c0:28:
                    1b:b8:75:20:05:fa:71:33:90:08:9b:f0:4c:a2:67:
                    b5:90:30:84:a3:83:51:16:3a:91:0c:cf:8a:c7:90:
                    f2:68:38:26:2b:eb:62:3f:88:b9:99:6c:2c:e4:b3:
                    be:5d:da:0e:a3:ac:a6:81:c4:85:ac:00:6c:fd:58:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FC:6D:71:71:4B:ED:21:88:F7:4B:31:3F:79:22:D1:8A:00:6E:D4
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/t_xtcXFL7SGI90sxP3ki0YoAbtQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:e1:c6:cc:70:8e:96:e6:ff:15:66:e8:39:35:d7:89:84:
         01:66:dd:7d:ad:47:b2:c0:7a:9e:a3:07:a4:52:e5:e4:48:1a:
         d3:d4:e7:86:63:86:61:c0:aa:f4:ec:9a:df:40:fa:5d:fb:d4:
         ee:5b:72:ff:84:43:54:4f:ad:41:07:e2:6b:a3:65:93:39:33:
         9b:75:4d:f5:68:e0:ca:b0:cb:44:8b:fe:39:20:93:0d:59:4b:
         f3:d6:b9:7b:02:36:98:2f:f3:fd:fb:9a:c8:04:b4:25:01:2c:
         46:28:c1:b4:96:9a:2f:d4:f6:c2:24:ef:6d:b6:f2:26:7c:b7:
         77:fc:10:f6:f3:ba:ec:4e:13:10:d4:85:7c:09:f9:5b:ea:b5:
         04:1a:3d:f5:84:71:27:37:03:2e:ff:51:dc:fc:21:2e:6e:c1:
         17:35:6e:fb:9d:1e:55:fa:d7:1a:98:9e:f0:f5:ce:58:dd:c3:
         89:e5:0c:f2:38:39:f7:f8:ec:34:a9:1a:01:16:ca:c6:b2:16:
         27:fe:00:1b:07:0e:ad:f8:7c:8d:f3:bf:b6:57:08:27:f8:67:
         c2:f8:a7:c0:ac:dd:ae:f5:98:b1:a2:f2:e4:06:95:8d:b3:94:
         5c:e5:db:bc:f7:83:36:81:a8:79:59:7c:54:0d:12:0d:ee:c9:
         fb:dc:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----