Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31363a3a2f34382d3438203d3e203239383032.roa
File:                     326131333a393530303a31363a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          i4a+xYorkGe+kpl/MfwbXaQDTQSgVl/rQxISTYOgYVU=
Subject key identifier:   7A:11:51:BE:F8:5A:33:92:D6:F6:1F:0B:78:D8:CF:AD:50:1A:B9:EE
Certificate issuer:       /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial:       5FE0CDBF355D7BD4D003FEE58375C07EFE50EBAA
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31363a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 12 Feb 2024 16:01:09 +0000
ROA not before:           Mon 12 Feb 2024 15:56:09 +0000
ROA not after:            Mon 10 Feb 2025 16:01:09 +0000
asID:                     29802
IP address blocks:        2a13:9500:16::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 May 2024 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e0:cd:bf:35:5d:7b:d4:d0:03:fe:e5:83:75:c0:7e:fe:50:eb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
        Validity
            Not Before: Feb 12 15:56:09 2024 GMT
            Not After : Feb 10 16:01:09 2025 GMT
        Subject: CN=7A1151BEF85A3392D6F61F0B78D8CFAD501AB9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:ae:ac:e8:fa:82:3c:00:c2:0d:ee:50:1b:
                    89:3f:3e:d8:7e:6d:c7:e2:99:48:bd:21:52:bf:5b:
                    b9:d9:36:eb:6a:60:01:f9:73:1a:ea:01:fe:a6:d2:
                    4f:65:0f:dc:dc:a3:dc:e0:9a:dd:25:dd:06:0b:9f:
                    be:c9:f4:60:30:9d:49:7e:d1:4e:63:f8:cb:c1:26:
                    b7:52:ed:42:04:ff:d5:26:b1:09:f9:cd:02:90:42:
                    f6:14:82:db:b7:d4:4b:b3:72:44:25:f7:31:af:3e:
                    c5:74:01:71:fd:fe:1e:20:b0:63:76:80:2b:ab:59:
                    f0:0b:ca:5c:37:3a:26:ea:ee:cc:72:81:b7:dd:b6:
                    d5:b7:a5:5f:19:1b:ef:eb:6f:dc:7f:43:36:d6:90:
                    cf:fd:d1:c9:b0:0f:09:48:92:d0:99:83:0c:e3:f0:
                    96:e6:c2:05:26:60:e1:ff:eb:45:2b:39:ad:42:59:
                    f0:1b:b1:d6:57:72:f2:82:de:f4:55:ec:77:b4:c8:
                    fc:10:07:36:65:04:c2:c7:80:28:8a:54:0a:c7:45:
                    bc:c3:61:91:6c:b3:4c:ef:d8:ec:d4:41:4b:c1:50:
                    09:4d:f4:dc:21:3f:5a:84:83:e4:2b:d2:a6:04:6d:
                    a1:3e:fb:66:87:c8:5f:84:a2:1a:e5:b4:9b:af:fa:
                    fa:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:11:51:BE:F8:5A:33:92:D6:F6:1F:0B:78:D8:CF:AD:50:1A:B9:EE
            X509v3 Authority Key Identifier:
                keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31363a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:6f:9f:e2:56:97:bc:06:05:03:e3:88:9f:a0:1a:cb:9e:
         b8:17:c4:2d:41:3e:bf:af:eb:00:7b:d2:12:ab:d0:1b:dd:fe:
         a2:6a:b8:21:f2:e3:a7:83:6b:12:c1:d1:ee:6f:47:3d:9e:40:
         70:f4:12:62:a8:96:e3:12:e1:37:e0:26:f8:9a:5d:93:49:4d:
         d8:81:e0:f7:b4:b8:d5:6d:1b:4c:12:c8:a5:02:ff:c2:5e:a4:
         f9:2a:78:ac:98:7b:78:ba:4b:8a:04:d1:f1:04:21:34:09:20:
         5d:5e:5a:3f:66:35:b4:6f:ba:bf:45:0a:55:94:f9:bc:a5:67:
         d9:77:94:8b:9d:35:1e:15:05:17:11:9f:ad:6c:d8:1a:db:cc:
         15:1c:8e:18:11:ba:41:3f:a1:99:dd:64:07:59:76:72:1b:55:
         3f:70:e1:d5:ed:91:d7:e1:55:0f:8e:03:bf:c6:47:e5:7d:61:
         0a:d3:80:cb:8a:15:6c:54:71:6d:3a:45:86:32:e9:b0:2c:91:
         a3:a1:94:1e:d6:f5:9d:94:ea:48:00:30:10:51:13:2c:8b:a8:
         56:94:62:b9:5c:20:cd:c8:48:ea:f9:4c:d8:bd:cd:c0:f4:f1:
         9d:c8:e8:ff:d9:03:5a:f6:7f:f1:49:8e:d9:0f:09:21:fc:28:
         e0:61:ca:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----