Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133332e3235302e302f32332d3332203d3e203531313637.roa
File:                     3138352e3133332e3235302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          7mWDugxdlYUHvecQCQcvHCALe/Ux40sMmxN9//Ux/GQ=
Subject key identifier:   FA:51:B1:D6:6D:0D:D9:A4:7D:F0:FA:E0:92:84:D0:91:E8:EF:D1:24
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       57F2CECE859271CE826970B437594655BA17AA32
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133332e3235302e302f32332d3332203d3e203531313637.roa
Signing time:             Wed 12 Jun 2024 10:16:33 +0000
ROA not before:           Wed 12 Jun 2024 10:11:33 +0000
ROA not after:            Wed 11 Jun 2025 10:16:33 +0000
asID:                     51167
IP address blocks:        185.133.250.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f2:ce:ce:85:92:71:ce:82:69:70:b4:37:59:46:55:ba:17:aa:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Jun 12 10:11:33 2024 GMT
            Not After : Jun 11 10:16:33 2025 GMT
        Subject: CN=FA51B1D66D0DD9A47DF0FAE09284D091E8EFD124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:39:ed:13:f8:a2:64:89:60:16:a0:84:61:
                    a7:4d:c0:99:13:2b:4f:5f:c4:76:f5:d7:7c:9b:b0:
                    2c:14:86:67:1d:ce:81:2e:1b:9e:ec:f2:68:3b:5e:
                    b5:84:13:67:d2:d0:16:2a:f7:e3:04:2f:9b:99:b8:
                    aa:e2:ad:df:86:ef:c7:0f:e8:2f:77:ec:14:b2:06:
                    2e:3d:4c:72:2b:5c:69:e3:c6:cb:4b:de:29:35:b3:
                    2f:f8:9c:ab:f8:f7:4b:0f:69:94:2d:8b:90:a2:f2:
                    b9:50:97:83:9e:f7:91:7b:91:de:37:b8:ab:ca:e7:
                    0e:67:d0:10:9c:b1:44:0b:d2:0a:04:69:c8:12:5d:
                    0b:8a:23:9f:c0:5b:a4:08:13:b4:b8:77:20:f3:f8:
                    be:49:b9:f7:c2:74:8f:d4:ef:20:7b:8d:9e:25:4b:
                    12:41:00:44:82:92:44:c8:9c:5d:15:dd:29:6e:c9:
                    54:9c:4c:52:7f:4f:d2:76:df:37:1f:b0:5d:28:7d:
                    40:4b:13:01:7d:f7:8a:c0:f6:74:26:9c:2a:56:5a:
                    bf:7c:83:48:3e:7a:8b:fa:3d:a7:79:42:8c:28:6e:
                    ce:63:a4:6c:8c:51:7d:52:67:35:43:00:ba:e3:26:
                    3c:5d:3b:66:3f:17:4b:b3:ea:28:aa:0a:a8:eb:49:
                    e4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:51:B1:D6:6D:0D:D9:A4:7D:F0:FA:E0:92:84:D0:91:E8:EF:D1:24
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133332e3235302e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.133.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:59:4f:84:23:9a:09:6a:df:2d:46:19:44:c3:50:2a:39:3d:
         55:18:3b:8c:40:5d:86:c8:40:b7:13:21:14:0f:69:85:d8:0c:
         69:4a:d1:4b:45:91:b0:3d:03:45:fc:e1:2f:3b:2c:1f:d5:21:
         a5:12:79:87:80:c5:c2:c6:7d:f9:8a:ea:a4:c6:70:e4:9b:1f:
         e8:8f:68:f2:13:25:03:4f:f4:57:28:6c:0b:08:4f:e1:e7:51:
         98:fd:47:14:0b:e3:e7:6a:a3:e5:1a:c5:af:b8:68:f9:d5:9a:
         39:e4:d0:1f:82:b8:c1:a6:fb:74:0a:88:8d:be:f1:be:5f:ea:
         d1:ff:ad:96:fe:08:14:36:b6:ad:5a:91:09:05:03:0e:2f:58:
         04:d2:24:af:04:91:39:4e:30:33:d9:fa:0d:a9:ea:b7:fc:43:
         ca:72:4e:6b:7b:f2:6a:1c:71:9e:7a:f1:00:fc:b2:26:e8:f0:
         9a:cd:80:92:bd:b8:34:b9:67:d7:06:d0:86:5b:77:c0:84:29:
         c6:4a:5a:ac:ed:9f:bd:ef:ed:04:66:0d:5c:38:a6:11:04:d7:
         b2:4a:15:d1:57:68:cc:7d:da:d3:30:5b:a6:70:9d:69:6a:26:
         65:50:29:e0:1a:89:c2:f3:17:7c:4b:c9:ff:e4:0b:4b:c8:35:
         a9:79:0d:50
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUV/LOzoWScc6CaXC0N1lGVboXqjIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDA2MTIxMDExMzNaFw0yNTA2MTExMDE2MzNaMDMxMTAvBgNV
BAMTKEZBNTFCMUQ2NkQwREQ5QTQ3REYwRkFFMDkyODREMDkxRThFRkQxMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQTntE/iiZIlgFqCEYadNwJkT
K09fxHb113ybsCwUhmcdzoEuG57s8mg7XrWEE2fS0BYq9+MEL5uZuKrird+G78cP
6C937BSyBi49THIrXGnjxstL3ik1sy/4nKv490sPaZQti5Ci8rlQl4Oe95F7kd43
uKvK5w5n0BCcsUQL0goEacgSXQuKI5/AW6QIE7S4dyDz+L5JuffCdI/U7yB7jZ4l
SxJBAESCkkTInF0V3SluyVScTFJ/T9J23zcfsF0ofUBLEwF994rA9nQmnCpWWr98
g0g+eov6Pad5Qowobs5jpGyMUX1SZzVDALrjJjxdO2Y/F0uz6iiqCqjrSeTxAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU+lGx1m0N2aR98PrgkoTQkejv0SQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTMzMzMyZTMy
MzUzMDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAG5hfowDQYJKoZIhvcNAQELBQADggEBAH5ZT4Qjmglq3y1GGUTDUCo5PVUYO4xA
XYbIQLcTIRQPaYXYDGlK0UtFkbA9A0X84S87LB/VIaUSeYeAxcLGffmK6qTGcOSb
H+iPaPITJQNP9FcobAsIT+HnUZj9RxQL4+dqo+Uaxa+4aPnVmjnk0B+CuMGm+3QK
iI2+8b5f6tH/rZb+CBQ2tq1akQkFAw4vWATSJK8EkTlOMDPZ+g2p6rf8Q8pyTmt7
8moccZ568QD8sibo8JrNgJK9uDS5Z9cG0IZbd8CEKcZKWqztn73v7QRmDVw4phEE
17JKFdFXaMx92tMwW6ZwnWlqJmVQKeAaicLzF3xLyf/kC0vINal5DVA=
-----END CERTIFICATE-----