Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/XUftfYvz2MS8TmpmPjs3y7W7frw.roa
File:                     XUftfYvz2MS8TmpmPjs3y7W7frw.roa (raw, json)
Hash identifier:          lXeQYJT3EORnfWSNaQ8Nx2fzSPZnOvz/IdsnTKStMM0=
Subject key identifier:   5D:47:ED:7D:8B:F3:D8:C4:BC:4E:6A:66:3E:3B:37:CB:B5:BB:7E:BC
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA295709DFD68013DEE71C6B961DD553
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/XUftfYvz2MS8TmpmPjs3y7W7frw.roa
Signing time:             Tue 02 Jan 2024 12:32:36 +0000
ROA not before:           Tue 02 Jan 2024 12:32:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198480
IP address blocks:        2a0e:8f02:2260::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:57:09:df:d6:80:13:de:e7:1c:6b:96:1d:d5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5d47ed7d8bf3d8c4bc4e6a663e3b37cbb5bb7ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a2:d6:e3:a1:63:ca:03:dc:79:fd:6f:35:1b:
                    f3:d4:38:8c:01:a9:2e:c6:d0:f1:7a:f9:13:ff:28:
                    db:65:7c:3c:de:59:72:4e:8f:1b:bf:f8:79:6a:76:
                    2c:82:75:b2:58:fe:29:f5:ff:3d:b5:2e:0a:7f:83:
                    01:ab:dd:1a:c9:fe:70:ad:bc:85:ce:07:16:d3:a3:
                    a6:85:09:1e:68:e1:01:66:7d:e1:c4:5c:33:52:19:
                    79:4e:37:01:e4:f2:82:e1:de:a6:a2:fc:f5:96:3c:
                    85:42:12:3e:92:a5:df:da:0d:be:f8:f1:36:46:f2:
                    09:7a:f5:18:f0:da:a3:a3:1b:f5:93:b4:bf:08:b2:
                    72:3e:82:68:5f:92:49:dc:f8:7f:03:07:d3:cd:c7:
                    2e:b8:69:91:d1:21:37:e2:19:c9:3b:fc:f2:d3:20:
                    cc:22:1e:10:85:d8:6d:f7:bd:d6:64:54:1b:ed:5a:
                    18:ba:ed:0d:cc:1a:a6:b4:da:b6:95:57:87:f5:91:
                    47:2b:f8:fd:a4:b9:7a:c2:98:8e:53:40:0a:5d:36:
                    ae:ec:a9:7f:1f:57:f5:66:19:ac:80:d3:86:37:92:
                    42:16:f7:c4:00:8b:87:16:c8:13:d0:b7:c2:f9:0e:
                    8b:53:94:7e:48:51:51:1d:23:43:b4:19:11:b0:6e:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:47:ED:7D:8B:F3:D8:C4:BC:4E:6A:66:3E:3B:37:CB:B5:BB:7E:BC
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/XUftfYvz2MS8TmpmPjs3y7W7frw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:2260::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:b0:f8:26:48:4d:b8:89:3c:24:09:c5:b7:5a:96:a7:4a:49:
         77:d3:9d:43:46:22:ad:4f:7d:c6:09:f1:ea:6b:1b:23:50:7a:
         0b:26:65:7b:7e:4e:e8:28:22:3e:ed:20:48:8c:77:5f:88:8b:
         80:4e:40:58:98:4a:4a:5f:23:ff:d7:f3:c1:e0:f7:c2:a4:06:
         b9:10:b5:63:71:e8:66:e7:e8:4c:da:1e:ee:9d:8b:72:5a:da:
         7e:e4:de:8a:05:1c:e4:92:db:e3:66:56:09:cb:33:bf:a5:e6:
         9e:95:6e:3a:99:3e:5b:57:0a:8c:0d:f8:2b:40:ff:f8:52:7d:
         a1:09:fb:a1:ba:89:95:fa:d2:73:51:a4:be:12:14:c7:b4:ab:
         00:dc:d8:e1:42:01:bb:12:aa:e9:41:d8:70:6e:89:93:80:a5:
         b2:ca:81:a2:77:44:a5:ba:b0:d2:8f:61:8f:65:9d:f2:47:35:
         5c:b2:55:81:52:55:d4:fd:d1:e2:1b:bf:9d:3b:af:ff:68:cd:
         9e:de:30:e3:9c:15:7e:5d:22:e1:8e:75:5e:af:0f:80:59:1e:
         33:c2:7c:bb:06:68:28:01:05:66:9d:1e:f8:4f:4e:b1:43:8c:
         b7:f6:ff:ad:8e:ff:b3:0a:8c:a9:86:d8:90:87:54:bf:51:67:
         b4:93:96:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----