Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/IVZG3zAF8lT3jfbBgMJadxjWFE8.roa
File:                     IVZG3zAF8lT3jfbBgMJadxjWFE8.roa (raw, json)
Hash identifier:          +mqGCIP7u5HxsN0WTJh2Fub1hAoN4PwMvZcSyDaKH6U=
Subject key identifier:   21:56:46:DF:30:05:F2:54:F7:8D:F6:C1:80:C2:5A:77:18:D6:14:4F
Certificate issuer:       /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial:       018CC8013A3C37F94424AD85006B648C023E
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/IVZG3zAF8lT3jfbBgMJadxjWFE8.roa
Signing time:             Tue 02 Jan 2024 02:29:32 +0000
ROA not before:           Tue 02 Jan 2024 02:29:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     397518
IP address blocks:        2a01:488:bb17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:3a:3c:37:f9:44:24:ad:85:00:6b:64:8c:02:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
        Validity
            Not Before: Jan  2 02:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=215646df3005f254f78df6c180c25a7718d6144f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:09:5b:ea:7d:82:a2:1b:e8:48:83:eb:28:0b:
                    9b:d2:21:01:04:88:32:4b:22:91:79:e3:32:f7:92:
                    00:7e:81:73:65:a5:8a:92:db:da:29:2d:50:3a:26:
                    b4:b2:8b:67:77:b8:d7:02:92:19:03:4a:ef:48:a8:
                    30:e2:ed:28:b7:28:5f:8c:e4:b7:91:2f:82:68:ff:
                    2b:10:98:1c:12:a9:6d:73:36:57:c2:9e:b9:1f:f0:
                    c9:4b:73:18:41:24:90:30:bf:87:5f:c5:5d:12:19:
                    7d:65:29:0a:02:36:41:c8:7c:ef:b0:47:ab:6a:ea:
                    24:75:7d:d5:ae:9f:e1:41:37:70:e6:7c:53:ed:d8:
                    a1:0b:88:76:27:a6:ad:f7:ce:86:8d:e8:35:68:66:
                    44:20:87:20:7a:e7:c6:17:35:ff:ae:be:1e:e9:f3:
                    a8:86:8e:27:5c:0a:ba:e7:62:7e:b5:74:76:1e:84:
                    f8:58:71:36:cf:ce:bb:1b:1c:26:cd:8a:1d:14:6c:
                    6c:d3:04:2d:8f:ca:d5:e6:50:7f:6a:ab:4b:97:b4:
                    0c:44:40:e4:34:a5:72:8e:5e:35:6e:37:f0:51:16:
                    4f:01:fe:b1:8c:72:38:0a:af:bd:1d:35:76:f0:c2:
                    96:b9:da:81:dc:77:e6:2a:14:e1:f8:fd:47:cd:13:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:56:46:DF:30:05:F2:54:F7:8D:F6:C1:80:C2:5A:77:18:D6:14:4F
            X509v3 Authority Key Identifier:
                keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/IVZG3zAF8lT3jfbBgMJadxjWFE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:488:bb17::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:3b:cd:6d:25:1b:ba:ed:bf:71:d4:0c:55:3e:10:1a:2b:
         42:ba:3f:4f:52:31:4a:32:2f:81:f7:9f:39:f2:7a:e9:55:7e:
         37:d0:44:b6:d1:0b:93:cf:d7:26:68:cd:c0:29:6b:5c:f5:7b:
         f0:31:fe:a0:82:fb:ad:03:33:64:2b:8d:52:d5:76:e3:76:26:
         4c:0f:4e:79:60:6f:d9:c2:0a:dc:5c:11:8a:06:c5:f5:27:dd:
         79:37:65:05:fd:67:8e:b0:2c:6d:31:c2:37:89:9e:e0:f9:37:
         86:86:be:7d:6b:81:8c:43:a1:6e:9d:ce:ce:41:65:2e:08:49:
         d2:dc:75:fd:65:38:7b:d5:1c:54:c4:b1:63:af:da:54:36:40:
         f1:61:07:97:87:0e:43:81:37:6f:50:5a:db:60:3d:aa:4e:9f:
         b0:88:35:a0:06:4c:63:85:41:a0:6c:e8:09:03:88:8b:00:6a:
         40:4f:a9:29:a0:44:c7:10:d8:2a:1c:95:ae:e9:24:5d:4c:76:
         31:36:57:76:7b:f8:cb:b8:bd:ad:95:ce:49:3a:0d:c8:ff:e3:
         f4:b6:25:0a:e8:e4:99:8d:49:6f:80:0c:34:0b:6f:f0:ed:d3:
         d0:58:28:dd:12:b4:fa:ea:9d:23:16:10:1f:38:b6:7c:ef:0d:
         29:d7:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----