Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/2_UiEMkdpxaB0cN4Y8_DTVu7bBY.roa
File:                     2_UiEMkdpxaB0cN4Y8_DTVu7bBY.roa (raw, json)
Hash identifier:          YcGmWgzSCeEMGBWPntjqaTtQMrmLYndNsYluTwnP6Ks=
Subject key identifier:   DB:F5:22:10:C9:1D:A7:16:81:D1:C3:78:63:CF:C3:4D:5B:BB:6C:16
Certificate issuer:       /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial:       018DACCF95CF8594D6DB77CF1AEEE11C0F40
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/2_UiEMkdpxaB0cN4Y8_DTVu7bBY.roa
Signing time:             Thu 15 Feb 2024 12:48:21 +0000
ROA not before:           Thu 15 Feb 2024 12:48:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209641
IP address blocks:        2a09:3907::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ac:cf:95:cf:85:94:d6:db:77:cf:1a:ee:e1:1c:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
        Validity
            Not Before: Feb 15 12:48:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dbf52210c91da71681d1c37863cfc34d5bbb6c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:d8:92:e9:42:54:92:53:16:fd:08:80:ee:
                    c2:12:43:72:63:c1:9f:cd:95:df:75:9e:af:33:4f:
                    41:b4:95:48:af:2a:53:78:a8:af:fc:53:4b:04:93:
                    5e:d8:79:db:60:8c:3d:81:c2:ae:c1:fa:18:fa:e4:
                    7c:7d:c9:0d:9a:e7:7f:dc:84:a9:de:64:39:f0:b4:
                    c4:68:50:76:9e:df:c3:18:f0:a9:47:17:49:36:1f:
                    91:86:5b:6c:b6:a7:0f:dd:80:b5:8c:09:10:99:ee:
                    06:a4:00:bc:52:54:22:3b:b2:82:f6:b0:20:5f:bb:
                    80:f0:bd:b2:49:79:38:6e:95:93:4d:81:ec:ef:2b:
                    8f:46:fc:da:ef:96:0e:3d:35:4f:1d:95:9d:21:06:
                    1e:cd:01:59:bc:7d:ee:81:8b:40:ee:a0:68:75:2a:
                    d9:d1:e5:ed:37:17:99:34:93:99:3f:27:a2:7f:14:
                    44:17:e9:ad:ea:ad:0a:1d:28:63:e9:0c:ed:33:46:
                    d5:a5:20:bd:9e:55:b8:ef:47:d8:38:cd:5c:5b:57:
                    fd:99:2e:be:1c:e5:bb:3c:d2:94:de:0b:a2:9a:15:
                    03:1e:90:17:10:e3:20:bd:0a:fa:cb:43:34:26:e9:
                    6a:52:9e:35:11:39:43:aa:7b:69:57:a6:46:85:99:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F5:22:10:C9:1D:A7:16:81:D1:C3:78:63:CF:C3:4D:5B:BB:6C:16
            X509v3 Authority Key Identifier:
                keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/2_UiEMkdpxaB0cN4Y8_DTVu7bBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:3907::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:9d:54:14:21:a3:e2:f5:20:5a:06:97:5d:72:8e:99:0e:51:
         24:a7:8e:47:73:b8:17:65:0e:24:d3:55:48:d3:98:c7:67:1c:
         95:3a:47:08:a8:bc:66:60:be:2a:85:94:77:61:51:c0:32:47:
         93:70:18:0a:20:b4:d9:11:ba:01:02:ba:14:24:80:d6:3d:a4:
         d5:ec:e4:55:34:50:08:7d:ca:9a:26:94:80:18:b2:90:4a:d7:
         87:13:5f:d1:fd:6e:00:95:2a:d2:e0:f6:5a:7b:41:1d:66:0c:
         38:42:71:17:4b:f2:28:08:20:ba:9c:a9:21:86:8e:7c:12:4a:
         00:b5:bc:54:85:dd:8c:7d:3b:df:5f:1a:ae:68:e1:ad:bc:95:
         be:71:3c:80:af:92:49:7b:d6:05:13:bb:98:05:41:86:fd:38:
         3f:d5:44:8a:a0:eb:f8:10:e5:cb:d6:47:34:50:f1:a2:c8:cf:
         b2:3a:53:c8:f2:ba:4d:b1:6d:fd:6c:df:e0:20:aa:b0:c9:60:
         85:cb:3b:80:a2:99:1e:1b:40:d0:eb:9e:9c:41:7b:fa:60:f7:
         2b:3c:40:72:62:c6:32:1a:29:81:49:16:9d:2f:22:49:0d:25:
         6f:3b:d1:32:a5:92:56:5a:1d:07:e6:7d:5f:72:c8:2d:dc:42:
         70:a9:2d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----