Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Rm_Y-vBTV8v1KV9-qJGCm3iUP9o.roa
File:                     Rm_Y-vBTV8v1KV9-qJGCm3iUP9o.roa (raw, json)
Hash identifier:          XZExMyzW8ZRQA6XZ836w918Hd2lp3sfAWZwJprKtauw=
Subject key identifier:   46:6F:D8:FA:F0:53:57:CB:F5:29:5F:7E:A8:91:82:9B:78:94:3F:DA
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       018CC6B8F015E1E5A32CCBF0768C71480674
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Rm_Y-vBTV8v1KV9-qJGCm3iUP9o.roa
Signing time:             Mon 01 Jan 2024 20:30:57 +0000
ROA not before:           Mon 01 Jan 2024 20:30:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212925
IP address blocks:        2a0c:9a40:8020::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:f0:15:e1:e5:a3:2c:cb:f0:76:8c:71:48:06:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  1 20:30:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=466fd8faf05357cbf5295f7ea891829b78943fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:c3:a7:7d:94:1b:10:8f:85:ad:df:6e:87:
                    16:a7:9f:3e:b0:ba:71:d7:7d:ef:5d:a2:98:c2:cf:
                    48:d6:24:e5:32:42:68:6e:a7:c1:84:2f:dd:95:f5:
                    72:18:17:ea:c5:00:fb:ea:dd:d7:cd:d3:45:7f:d4:
                    01:78:0c:9d:28:ad:aa:57:7a:dd:f2:86:6c:11:42:
                    1a:52:9d:d8:39:9f:b4:7c:7e:1c:f7:b6:d3:c6:84:
                    d2:fd:5d:19:aa:77:49:16:75:4f:84:dd:5c:18:9f:
                    61:48:10:e0:7f:ef:73:55:0c:51:23:c3:d5:90:68:
                    26:b9:93:4c:59:fd:c6:98:d2:39:39:28:88:2e:91:
                    e2:f4:6f:72:36:a5:65:f9:44:4e:b3:c7:b7:47:91:
                    4a:49:7d:81:f2:5a:f4:a9:0b:77:b2:93:9c:7f:62:
                    d7:39:24:2c:b6:85:2e:e0:79:83:5d:18:64:54:ff:
                    bb:27:21:cb:d8:fc:e9:58:db:cf:cd:e3:fe:6e:eb:
                    65:91:28:2c:73:6e:f8:d8:9b:a1:ad:7f:6c:b6:79:
                    75:a4:44:56:96:1e:20:fc:c2:3b:72:4a:3a:52:28:
                    41:f6:8c:ce:4a:a1:59:db:76:47:ff:80:e0:0e:96:
                    c3:1f:aa:f0:ad:f0:57:99:2b:76:81:43:9b:b1:ce:
                    e7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:D8:FA:F0:53:57:CB:F5:29:5F:7E:A8:91:82:9B:78:94:3F:DA
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Rm_Y-vBTV8v1KV9-qJGCm3iUP9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8020::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:56:c8:95:78:49:3c:b0:e3:a9:6d:b1:6c:24:94:24:f8:52:
         b4:77:a3:cb:60:f3:26:b8:7c:89:8d:a3:55:93:7a:22:a8:de:
         9d:ec:e0:a0:8a:ea:1e:8a:03:a3:6b:0f:5e:ba:87:d9:8c:63:
         26:0c:c3:fc:74:98:d5:d8:26:7e:75:05:bd:6b:e3:3f:81:d4:
         1d:29:2e:8a:dd:fe:3c:d3:e5:4e:41:6d:a0:7e:2f:48:26:87:
         85:76:1a:70:17:f1:e8:89:1e:56:91:75:e0:70:c0:91:c2:e4:
         30:5c:42:19:35:35:d1:27:4f:87:73:f2:7a:36:d4:11:2b:f3:
         c6:d8:c5:2c:87:59:83:17:35:00:f8:bf:e5:5d:ee:9c:18:74:
         b6:82:33:f0:25:68:b9:4d:73:fb:44:94:b2:57:8c:74:58:64:
         20:63:d3:e0:1a:ff:e6:ac:3b:27:61:94:a9:61:5e:3a:79:57:
         f7:57:47:18:21:a9:c7:47:f8:0e:fb:89:c0:e5:83:c1:4a:bd:
         5c:23:ec:90:5f:b3:ac:3f:51:57:6f:bf:04:e3:eb:57:9e:1f:
         e9:f2:a9:7c:c5:05:c0:6a:c9:25:19:3f:07:04:66:b2:f5:0e:
         51:62:38:c8:a6:3b:1e:07:bf:68:dc:cf:37:0f:86:b1:ca:18:
         e1:b3:1f:a5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGuPAV4eWjLMvwdoxxSAZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjQwMTAxMjAzMDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjZmZDhmYWYwNTM1N2NiZjUyOTVmN2VhODkxODI5Yjc4OTQzZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQvDp32UGxCPha3fbocWp58+sLpx
133vXaKYws9I1iTlMkJobqfBhC/dlfVyGBfqxQD76t3XzdNFf9QBeAydKK2qV3rd
8oZsEUIaUp3YOZ+0fH4c97bTxoTS/V0ZqndJFnVPhN1cGJ9hSBDgf+9zVQxRI8PV
kGgmuZNMWf3GmNI5OSiILpHi9G9yNqVl+UROs8e3R5FKSX2B8lr0qQt3spOcf2LX
OSQstoUu4HmDXRhkVP+7JyHL2PzpWNvPzeP+butlkSgsc2742JuhrX9stnl1pERW
lh4g/MI7cko6UihB9ozOSqFZ23ZH/4DgDpbDH6rwrfBXmSt2gUObsc7n/QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEZv2PrwU1fL9SlffqiRgpt4lD/aMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvUm1fWS12QlRWOHYxS1Y5LXFKR0NtM2lVUDlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIAg
MA0GCSqGSIb3DQEBCwUAA4IBAQC4VsiVeEk8sOOpbbFsJJQk+FK0d6PLYPMmuHyJ
jaNVk3oiqN6d7OCgiuoeigOjaw9euofZjGMmDMP8dJjV2CZ+dQW9a+M/gdQdKS6K
3f480+VOQW2gfi9IJoeFdhpwF/HoiR5WkXXgcMCRwuQwXEIZNTXRJ0+Hc/J6NtQR
K/PG2MUsh1mDFzUA+L/lXe6cGHS2gjPwJWi5TXP7RJSyV4x0WGQgY9PgGv/mrDsn
YZSpYV46eVf3V0cYIanHR/gO+4nA5YPBSr1cI+yQX7OsP1FXb78E4+tXnh/p8ql8
xQXAasklGT8HBGay9Q5RYjjIpjseB79o3M83D4axyhjhsx+l
-----END CERTIFICATE-----