Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/ScBg_VrIhznoT-a2bUofdoGZFpw.roa
File:                     ScBg_VrIhznoT-a2bUofdoGZFpw.roa (raw, json)
Hash identifier:          91nMNiKEZ2+O85Sz0QTX6EFeJ/XdbvNBpvm1pMxPowc=
Subject key identifier:   49:C0:60:FD:5A:C8:87:39:E8:4F:E6:B6:6D:4A:1F:76:81:99:16:9C
Certificate issuer:       /CN=a13471b5002a4eb6496125cf58737f0debadae7b
Certificate serial:       018DA349890BBC78B9D7ED9C921A388E8984
Authority key identifier: A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/ScBg_VrIhznoT-a2bUofdoGZFpw.roa
Signing time:             Tue 13 Feb 2024 16:25:21 +0000
ROA not before:           Tue 13 Feb 2024 16:25:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215509
IP address blocks:        2001:67c:de8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a3:49:89:0b:bc:78:b9:d7:ed:9c:92:1a:38:8e:89:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a13471b5002a4eb6496125cf58737f0debadae7b
        Validity
            Not Before: Feb 13 16:25:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=49c060fd5ac88739e84fe6b66d4a1f768199169c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:ef:0a:25:34:fb:41:88:69:3f:e1:ae:67:
                    3b:2a:a8:9c:c7:65:07:77:7b:74:9b:2c:fb:83:cd:
                    f3:d1:85:c9:1f:98:64:dd:48:ff:70:0a:7c:3d:c8:
                    ce:8a:b5:f4:7c:21:8f:bb:0a:07:e2:30:95:36:94:
                    b1:2c:43:ac:59:88:e6:d3:33:43:07:4e:32:6c:76:
                    cb:f6:f6:29:f6:59:34:95:64:34:43:a2:08:3c:8d:
                    90:dd:85:2f:c6:7c:5a:8f:0f:64:0c:d9:a6:d1:3b:
                    1e:d9:e4:08:19:82:9f:66:2b:57:7a:bd:76:a3:05:
                    d8:55:54:19:6e:e8:d5:8f:1e:27:b4:d3:4d:fe:a2:
                    3e:8b:f6:99:2d:66:0b:41:e6:64:bf:e8:81:6c:cc:
                    19:34:46:2a:95:a0:49:ba:a2:a3:36:07:56:11:df:
                    ac:0a:c6:71:ee:b6:2a:b6:16:80:d3:3d:bb:67:c3:
                    0b:72:11:8d:eb:c0:85:d9:14:04:f0:ee:84:48:80:
                    4f:b5:8b:31:aa:f9:ce:06:ce:56:e0:85:71:dc:ca:
                    ba:b5:21:0f:b8:34:cf:99:9c:1b:ef:39:fb:df:e6:
                    71:33:51:b2:f5:85:69:81:37:9e:86:32:30:3e:b7:
                    b4:83:ed:88:e4:61:d0:05:f0:a0:0c:09:72:ab:62:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:60:FD:5A:C8:87:39:E8:4F:E6:B6:6D:4A:1F:76:81:99:16:9C
            X509v3 Authority Key Identifier:
                keyid:A1:34:71:B5:00:2A:4E:B6:49:61:25:CF:58:73:7F:0D:EB:AD:AE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTRxtQAqTrZJYSXPWHN_Deutrns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/ScBg_VrIhznoT-a2bUofdoGZFpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d9e87b-450a-4152-a242-d6910b21ab42/1/oTRxtQAqTrZJYSXPWHN_Deutrns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:de8::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:ac:85:06:79:84:34:24:dd:d8:30:7a:da:a2:d5:4b:62:d2:
         70:65:e0:a3:7b:56:fe:62:36:04:11:8d:ae:aa:6a:14:98:7e:
         cf:5c:e0:93:ee:a7:16:d8:f0:63:bb:f6:59:ec:b0:75:f7:09:
         e0:a2:97:03:d7:52:90:26:4e:3c:e5:bf:ef:43:1d:c1:c5:7a:
         ad:a2:49:48:30:77:9f:3b:a5:fa:ae:db:31:81:03:44:d4:62:
         0b:8d:af:87:ee:ae:90:96:5f:bd:b3:59:4a:9d:ee:7e:2b:0a:
         9d:83:53:39:70:8f:95:d8:5e:ae:eb:69:14:ca:05:34:8b:c5:
         72:53:9e:b5:75:5d:1e:fb:72:12:4a:ac:ca:36:3c:f5:2d:b8:
         26:cc:d3:e6:0a:c1:b8:5a:ca:50:2e:1a:fb:dd:29:fe:8c:2c:
         c6:1f:13:04:99:f8:91:42:05:fe:44:93:0e:8b:c2:d1:d4:57:
         1d:cb:ad:30:bf:96:79:21:f1:9d:af:68:a9:cb:47:57:39:c4:
         7a:55:6a:d7:a7:c7:05:77:af:db:2d:92:fb:8f:59:82:09:00:
         97:c7:9e:1d:1c:fb:c7:62:c7:64:bb:70:9a:9c:2e:1f:71:e0:
         0a:ad:36:02:3f:21:26:c9:e0:ef:c0:6e:5b:bc:6c:fa:41:d4:
         b4:7d:24:c3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY2jSYkLvHi51+2ckho4jomEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzQ3MWI1MDAyYTRlYjY0OTYxMjVjZjU4NzM3ZjBkZWJh
ZGFlN2IwHhcNMjQwMjEzMTYyNTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWMwNjBmZDVhYzg4NzM5ZTg0ZmU2YjY2ZDRhMWY3NjgxOTkxNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVXvCiU0+0GIaT/hrmc7Kqicx2UH
d3t0myz7g83z0YXJH5hk3Uj/cAp8PcjOirX0fCGPuwoH4jCVNpSxLEOsWYjm0zND
B04ybHbL9vYp9lk0lWQ0Q6IIPI2Q3YUvxnxajw9kDNmm0Tse2eQIGYKfZitXer12
owXYVVQZbujVjx4ntNNN/qI+i/aZLWYLQeZkv+iBbMwZNEYqlaBJuqKjNgdWEd+s
CsZx7rYqthaA0z27Z8MLchGN68CF2RQE8O6ESIBPtYsxqvnOBs5W4IVx3Mq6tSEP
uDTPmZwb7zn73+ZxM1Gy9YVpgTeehjIwPre0g+2I5GHQBfCgDAlyq2JSoQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEnAYP1ayIc56E/mtm1KH3aBmRacMB8GA1UdIwQY
MBaAFKE0cbUAKk62SWElz1hzfw3rra57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDIt
ZDY5MTBiMjFhYjQyLzEvU2NCZ19Wckloem5vVC1hMmJVb2Zkb0daRnB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kOWU4N2ItNDUwYS00MTUyLWEyNDItZDY5MTBiMjFhYjQy
LzEvb1RSeHRRQXFUclpKWVNYUFdITl9EZXV0cm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA3o
MA0GCSqGSIb3DQEBCwUAA4IBAQBIrIUGeYQ0JN3YMHraotVLYtJwZeCje1b+YjYE
EY2uqmoUmH7PXOCT7qcW2PBju/ZZ7LB19wngopcD11KQJk485b/vQx3BxXqtoklI
MHefO6X6rtsxgQNE1GILja+H7q6Qll+9s1lKne5+Kwqdg1M5cI+V2F6u62kUygU0
i8VyU561dV0e+3ISSqzKNjz1LbgmzNPmCsG4WspQLhr73Sn+jCzGHxMEmfiRQgX+
RJMOi8LR1Fcdy60wv5Z5IfGdr2ipy0dXOcR6VWrXp8cFd6/bLZL7j1mCCQCXx54d
HPvHYsdku3CanC4fceAKrTYCPyEmyeDvwG5bvGz6QdS0fSTD
-----END CERTIFICATE-----