Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/aYsqE8P7Xjo0tF1VjWoEUqczQ0Y.roa
File:                     aYsqE8P7Xjo0tF1VjWoEUqczQ0Y.roa (raw, json)
Hash identifier:          vz6HVZxrvX+zOIUYvsa1nQRS9Zf5faMlAxesKKujTgg=
Subject key identifier:   69:8B:2A:13:C3:FB:5E:3A:34:B4:5D:55:8D:6A:04:52:A7:33:43:46
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       01905EF6EA70EF2FBAB9D0B0A891BD21DAC0
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/aYsqE8P7Xjo0tF1VjWoEUqczQ0Y.roa
Signing time:             Fri 28 Jun 2024 13:09:18 +0000
ROA not before:           Fri 28 Jun 2024 13:09:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200216
IP address blocks:        2a13:2880::/29 maxlen: 29
                          2a13:d3c0::/29 maxlen: 29
                          2a14:1300::/29 maxlen: 29
                          2a14:1500::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5e:f6:ea:70:ef:2f:ba:b9:d0:b0:a8:91:bd:21:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Jun 28 13:09:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=698b2a13c3fb5e3a34b45d558d6a0452a7334346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:70:17:01:2c:de:58:1e:02:58:62:51:7b:
                    24:81:9f:a6:6b:b4:da:bb:54:cf:e5:76:c0:62:ce:
                    6b:16:2b:07:0c:a8:3e:aa:cf:b1:14:74:d4:a0:a7:
                    cf:c3:93:52:8d:5a:f8:81:b3:a8:13:c2:08:c2:4e:
                    da:03:8d:de:d6:00:57:76:7a:99:a3:f3:2f:f9:ca:
                    64:4d:0e:d6:0c:d4:6b:d1:d4:fc:50:ba:d1:56:27:
                    ab:de:b8:f9:fb:08:cc:9d:c6:9a:00:d7:e0:3e:e6:
                    15:f4:2b:96:ad:a0:31:dd:f3:e4:02:f7:0d:49:64:
                    ce:c5:69:f2:2a:d0:bb:ef:b5:9b:fa:48:69:b2:ee:
                    f8:cd:de:05:ba:65:f4:d0:ff:ad:75:97:a6:4d:d7:
                    2c:65:4c:d3:85:87:de:85:2b:85:78:1d:ad:4f:b5:
                    e9:d1:85:24:5e:52:95:1c:ef:59:6e:7b:5f:8b:85:
                    24:c5:08:2c:ba:b5:08:fd:cb:4e:54:5b:8c:e1:3f:
                    f9:7e:95:4d:7f:03:19:44:84:bd:5f:97:fd:75:8a:
                    71:61:11:53:57:73:30:d9:ed:76:f8:cc:09:c5:66:
                    57:f4:cb:99:4d:79:95:82:5f:7d:33:c2:0a:d1:b4:
                    2c:18:62:33:d3:80:e3:02:eb:11:c6:ce:0c:44:77:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8B:2A:13:C3:FB:5E:3A:34:B4:5D:55:8D:6A:04:52:A7:33:43:46
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/aYsqE8P7Xjo0tF1VjWoEUqczQ0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:2880::/29
                  2a13:d3c0::/29
                  2a14:1300::/29
                  2a14:1500::/29

    Signature Algorithm: sha256WithRSAEncryption
         68:ef:f7:70:61:fa:45:fb:4e:01:8a:c0:94:64:4e:2b:22:fd:
         4b:90:4a:ef:27:ef:ce:ac:ca:63:0a:87:43:b3:d0:ef:12:cd:
         d9:e4:d6:57:33:d6:47:b5:19:5c:d8:da:b0:c7:97:0f:66:8b:
         1f:4d:2d:f3:d0:b5:19:4e:ac:8a:67:08:ae:a9:65:3a:8e:12:
         b9:49:c4:65:6d:c3:44:8f:dd:4f:7d:7b:95:6c:5f:bd:b8:79:
         4c:7c:99:14:63:1e:16:78:89:13:20:f3:a3:e7:8b:37:fe:e9:
         be:7d:bf:05:36:6f:5a:fb:35:50:8a:9b:40:ae:64:fb:5a:ef:
         71:7a:ee:08:0d:e0:64:fb:6c:cc:4d:e5:55:66:71:51:e1:7f:
         d5:5e:b6:0d:80:6d:82:9a:4b:5c:93:d0:6c:41:12:13:40:c7:
         86:c1:5f:6d:92:75:ab:81:29:26:ba:f9:eb:5d:f8:39:f9:99:
         bb:6c:29:fd:a6:1c:b7:3d:ac:33:f7:16:90:d2:53:f9:95:5a:
         7e:c7:a1:88:34:79:04:f9:1b:2d:56:ff:41:c1:cb:91:d3:3f:
         24:fc:63:a4:21:36:a7:0b:06:7b:05:b9:ff:84:78:4d:ac:83:
         e4:b5:48:5d:1f:f8:9a:fa:0d:4a:40:86:7f:79:4f:5a:ac:13:
         fb:89:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----