Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/5DwQ5MgXHr_goxu01_jQF4-LUNU.roa
File:                     5DwQ5MgXHr_goxu01_jQF4-LUNU.roa (raw, json)
Hash identifier:          ANyX02InE6EehGGUcP9Q91SLlRrnob4nkODyk3V6cys=
Subject key identifier:   E4:3C:10:E4:C8:17:1E:BF:E0:A3:1B:B4:D7:F8:D0:17:8F:8B:50:D5
Certificate issuer:       /CN=0217c666cda23e920d14b90ae9363713350aac1e
Certificate serial:       018CC9BC97D75BBD3AA86EFFE16E64BAF780
Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/5DwQ5MgXHr_goxu01_jQF4-LUNU.roa
Signing time:             Tue 02 Jan 2024 10:33:49 +0000
ROA not before:           Tue 02 Jan 2024 10:33:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     44833
IP address blocks:        185.66.236.0/22 maxlen: 24
                          2a03:22a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:97:d7:5b:bd:3a:a8:6e:ff:e1:6e:64:ba:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e
        Validity
            Not Before: Jan  2 10:33:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e43c10e4c8171ebfe0a31bb4d7f8d0178f8b50d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:64:28:07:fb:16:1a:74:26:2d:1f:27:72:
                    d0:b7:77:1e:b7:1b:e4:c6:b6:ae:f5:cd:2d:a0:f1:
                    a9:d0:ba:a2:f0:3c:f5:c0:4f:d4:b5:e7:29:72:bf:
                    12:aa:e2:2b:b6:bc:98:be:d8:6a:4f:99:0f:80:7a:
                    28:6e:88:c8:ce:37:7f:ed:74:76:95:6b:93:b1:6a:
                    ac:8f:99:8f:b9:f7:40:c0:bc:f6:56:e3:76:d7:e7:
                    49:5e:92:b1:21:50:cc:91:3f:ca:dd:a3:90:b5:ab:
                    8c:ce:bd:40:67:9e:63:45:73:56:f1:65:fb:e9:e6:
                    09:3d:f2:84:ba:3e:fa:4b:38:57:29:50:9c:32:75:
                    d5:89:58:69:c6:30:33:d5:0c:ff:37:79:d9:21:47:
                    2f:3c:bc:25:ba:2e:76:70:98:ea:c5:3f:67:67:26:
                    42:28:f0:69:73:73:5e:cd:55:12:3d:52:ce:5c:23:
                    a9:b7:bd:2a:17:cb:a0:be:f4:53:55:6e:e0:26:b9:
                    04:55:16:d5:03:e4:f8:5d:f8:2c:d8:7a:21:41:75:
                    2a:51:b7:7f:fe:a8:7d:99:07:45:9b:c1:9e:33:69:
                    5f:32:45:91:a2:8e:a8:1e:61:5a:0d:39:f8:d2:41:
                    13:4d:6d:1d:a3:c0:37:27:46:cb:1c:e3:b0:55:cd:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:10:E4:C8:17:1E:BF:E0:A3:1B:B4:D7:F8:D0:17:8F:8B:50:D5
            X509v3 Authority Key Identifier:
                keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/5DwQ5MgXHr_goxu01_jQF4-LUNU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.66.236.0/22
                IPv6:
                  2a03:22a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:92:b4:85:e1:60:f5:3f:b2:42:b9:58:93:4a:90:76:43:fc:
         b8:33:22:16:20:18:37:6d:ca:3a:76:74:09:e1:b0:85:35:87:
         45:54:91:f1:86:11:ec:d8:c5:9e:2b:c8:43:e5:63:5e:a7:37:
         5e:02:4c:75:bd:76:45:7a:54:e4:d4:1a:2d:dd:b7:d9:e4:0d:
         08:04:6e:04:1f:ce:49:54:4a:38:7b:77:b1:88:02:3a:52:5f:
         b3:1f:4d:d3:65:ff:56:82:4a:cc:a3:51:0f:b7:51:64:ab:ba:
         6b:c4:f2:3f:07:f3:81:7b:65:9f:e0:95:61:91:41:16:73:b7:
         4d:3d:1e:7d:0d:1c:b0:2d:f1:ef:78:7b:c1:b4:2f:f4:f8:c6:
         ed:33:59:9f:40:f0:0a:26:a0:ec:33:8c:0f:43:f5:18:2d:ea:
         9e:6a:df:02:3f:2a:1c:eb:5d:6b:08:64:dc:28:77:55:91:db:
         e4:74:16:6f:c8:76:33:4e:0c:bb:07:db:bf:7e:c1:c7:28:67:
         0e:d0:f8:05:fa:53:c0:37:0f:8d:3f:ff:44:0d:8e:d6:29:7f:
         2b:23:05:9a:d9:91:08:c6:dc:a0:ad:50:83:56:31:13:82:d5:
         5a:d9:d4:cc:01:6e:4c:bb:1a:ff:c5:fb:dc:37:a8:fa:03:85:
         94:d6:9d:0f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzJvJfXW706qG7/4W5kuveAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMTdjNjY2Y2RhMjNlOTIwZDE0YjkwYWU5MzYzNzEzMzUw
YWFjMWUwHhcNMjQwMTAyMTAzMzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDNjMTBlNGM4MTcxZWJmZTBhMzFiYjRkN2Y4ZDAxNzhmOGI1MGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoJkKAf7Fhp0Ji0fJ3LQt3cetxvk
xrau9c0toPGp0Lqi8Dz1wE/Utecpcr8SquIrtryYvthqT5kPgHoobojIzjd/7XR2
lWuTsWqsj5mPufdAwLz2VuN21+dJXpKxIVDMkT/K3aOQtauMzr1AZ55jRXNW8WX7
6eYJPfKEuj76SzhXKVCcMnXViVhpxjAz1Qz/N3nZIUcvPLwlui52cJjqxT9nZyZC
KPBpc3NezVUSPVLOXCOpt70qF8ugvvRTVW7gJrkEVRbVA+T4Xfgs2HohQXUqUbd/
/qh9mQdFm8GeM2lfMkWRoo6oHmFaDTn40kETTW0do8A3J0bLHOOwVc0zkwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOQ8EOTIFx6/4KMbtNf40BePi1DVMB8GA1UdIwQY
MBaAFAIXxmbNoj6SDRS5Cuk2NxM1CqweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWhmR1pzMmlQcElORkxrSzZUWTNFelVLckI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jZmEwYjUtZTFhMS00MWZmLTg4Y2It
MDI5NzE1ZGU0YzZmLzEvNUR3UTVNZ1hIcl9nb3h1MDFfalFGNC1MVU5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9jZmEwYjUtZTFhMS00MWZmLTg4Y2ItMDI5NzE1ZGU0YzZm
LzEvQWhmR1pzMmlQcElORkxrSzZUWTNFelVLckI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuULsMA0E
AgACMAcDBQAqAyKgMA0GCSqGSIb3DQEBCwUAA4IBAQCXkrSF4WD1P7JCuViTSpB2
Q/y4MyIWIBg3bco6dnQJ4bCFNYdFVJHxhhHs2MWeK8hD5WNepzdeAkx1vXZFelTk
1Bot3bfZ5A0IBG4EH85JVEo4e3exiAI6Ul+zH03TZf9WgkrMo1EPt1Fkq7prxPI/
B/OBe2Wf4JVhkUEWc7dNPR59DRywLfHveHvBtC/0+MbtM1mfQPAKJqDsM4wPQ/UY
Leqeat8CPyoc611rCGTcKHdVkdvkdBZvyHYzTgy7B9u/fsHHKGcO0PgF+lPANw+N
P/9EDY7WKX8rIwWa2ZEIxtygrVCDVjETgtVa2dTMAW5Muxr/xfvcN6j6A4WU1p0P
-----END CERTIFICATE-----