Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/qAmdMn1ghtw8ixFWb2B-nOqB6k4.roa
File:                     qAmdMn1ghtw8ixFWb2B-nOqB6k4.roa (raw, json)
Hash identifier:          Fx4Sm3jn3JfbmeQ3kXnatXcXmFkvePSEkcJcbqLQdkE=
Subject key identifier:   A8:09:9D:32:7D:60:86:DC:3C:8B:11:56:6F:60:7E:9C:EA:81:EA:4E
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA296B39B4E115F32FFCE0D8A04F56DA
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/qAmdMn1ghtw8ixFWb2B-nOqB6k4.roa
Signing time:             Tue 02 Jan 2024 12:32:41 +0000
ROA not before:           Tue 02 Jan 2024 12:32:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212008
IP address blocks:        2a0e:8f02:20f0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 04:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:6b:39:b4:e1:15:f3:2f:fc:e0:d8:a0:4f:56:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a8099d327d6086dc3c8b11566f607e9cea81ea4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:3d:9d:a8:95:23:af:33:7b:93:bc:ef:77:
                    08:b1:11:36:ff:35:2d:c7:c9:86:7c:ce:bc:42:01:
                    29:0d:5f:bb:a8:1b:af:a1:0c:4d:1e:ec:09:49:eb:
                    8e:e3:9b:0f:7f:c5:35:22:f0:55:72:a8:d0:ad:c0:
                    d5:df:4f:3f:01:a0:55:fc:e3:cd:ca:e8:75:e8:f1:
                    b0:83:9c:12:0a:2b:69:89:54:85:9f:f3:cc:12:13:
                    59:a5:56:c0:b6:4d:7e:9a:bf:40:21:be:38:b7:fd:
                    9c:61:5e:e1:b3:aa:2a:ec:cb:4d:f7:13:35:e6:c9:
                    98:7e:62:d3:2a:b8:64:c7:ad:a8:f6:3a:9a:6f:b3:
                    b1:a3:35:35:04:9d:e8:20:21:91:b8:d5:0c:79:9d:
                    93:6c:12:73:31:79:ce:8e:91:9e:24:c8:9d:3b:c5:
                    2d:5d:2a:38:60:21:aa:3b:80:0e:97:aa:27:ca:21:
                    e9:c3:a2:7a:0d:32:f8:53:2a:48:92:cd:79:9d:42:
                    2b:74:d5:bc:ed:40:f9:4f:8f:69:17:f9:e3:cf:83:
                    c6:47:29:cf:e0:77:89:c7:e8:52:d5:2f:f0:49:1e:
                    ae:14:e0:0e:99:0d:59:05:6e:b1:a4:cb:e1:24:86:
                    cb:4d:ae:26:3b:81:a8:aa:dc:f6:88:ca:f2:cf:a3:
                    60:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:09:9D:32:7D:60:86:DC:3C:8B:11:56:6F:60:7E:9C:EA:81:EA:4E
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/qAmdMn1ghtw8ixFWb2B-nOqB6k4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:20f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:7b:7d:93:7f:68:1e:96:c2:ad:a2:6e:b8:24:9f:21:40:e1:
         8a:53:2b:5c:50:27:15:ec:46:a0:71:f4:a4:ac:74:11:a2:b8:
         bb:ce:41:5f:34:b2:57:b7:b3:c5:54:cb:d0:ee:2f:bb:2f:d3:
         1c:0d:75:09:0a:e9:93:82:e8:a8:a9:49:b7:c9:20:df:4f:23:
         f6:02:23:f2:6b:fb:fe:d1:1f:7a:c4:3e:07:4d:1c:08:13:42:
         f3:0b:16:c0:9f:97:f8:b4:6d:32:7f:77:15:0d:9f:c3:ad:fc:
         c9:a7:5f:94:40:09:8e:93:14:78:59:67:ff:f6:90:36:ce:62:
         fd:9b:dd:4c:cc:e1:fe:16:6c:90:a7:3f:c1:5c:88:24:af:d1:
         75:3e:96:10:ac:9a:09:4c:28:66:88:b1:62:e4:5c:ab:f0:63:
         41:ae:73:28:8c:13:5f:ff:03:1a:35:92:dd:43:17:08:14:94:
         7f:46:a8:32:07:30:a2:f4:94:83:a5:a1:f8:ac:16:b7:71:8c:
         52:af:05:4b:02:eb:76:0b:7a:e3:f4:df:93:e2:1f:0f:3d:d6:
         db:b3:cd:ca:8e:e2:f2:a7:f6:9a:df:27:34:b7:dd:8c:f4:2e:
         9b:e4:d8:39:5d:e7:ed:fc:bb:73:6e:04:33:11:91:78:3d:1c:
         11:32:3c:ae
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzKKWs5tOEV8y/84NigT1baMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjQwMTAyMTIzMjQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODA5OWQzMjdkNjA4NmRjM2M4YjExNTY2ZjYwN2U5Y2VhODFlYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpY9naiVI68ze5O873cIsRE2/zUt
x8mGfM68QgEpDV+7qBuvoQxNHuwJSeuO45sPf8U1IvBVcqjQrcDV308/AaBV/OPN
yuh16PGwg5wSCitpiVSFn/PMEhNZpVbAtk1+mr9AIb44t/2cYV7hs6oq7MtN9xM1
5smYfmLTKrhkx62o9jqab7OxozU1BJ3oICGRuNUMeZ2TbBJzMXnOjpGeJMidO8Ut
XSo4YCGqO4AOl6onyiHpw6J6DTL4UypIks15nUIrdNW87UD5T49pF/njz4PGRynP
4HeJx+hS1S/wSR6uFOAOmQ1ZBW6xpMvhJIbLTa4mO4Goqtz2iMryz6NgIwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKgJnTJ9YIbcPIsRVm9gfpzqgepOMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvcUFtZE1uMWdodHc4aXhGV2IyQi1uT3FCNms0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiDw
MA0GCSqGSIb3DQEBCwUAA4IBAQB7e32Tf2gelsKtom64JJ8hQOGKUytcUCcV7Eag
cfSkrHQRori7zkFfNLJXt7PFVMvQ7i+7L9McDXUJCumTguioqUm3ySDfTyP2AiPy
a/v+0R96xD4HTRwIE0LzCxbAn5f4tG0yf3cVDZ/DrfzJp1+UQAmOkxR4WWf/9pA2
zmL9m91MzOH+FmyQpz/BXIgkr9F1PpYQrJoJTChmiLFi5Fyr8GNBrnMojBNf/wMa
NZLdQxcIFJR/RqgyBzCi9JSDpaH4rBa3cYxSrwVLAut2C3rj9N+T4h8PPdbbs83K
juLyp/aa3yc0t92M9C6b5Ng5Xeft/LtzbgQzEZF4PRwRMjyu
-----END CERTIFICATE-----