Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/6OXgE8owcQm91KmGn0bna3nVdPQ.roa
File:                     6OXgE8owcQm91KmGn0bna3nVdPQ.roa (raw, json)
Hash identifier:          5hUImKOQ8fDdvozLppaJXQwPXIZz1mtKpGEsbKgOXXk=
Subject key identifier:   E8:E5:E0:13:CA:30:71:09:BD:D4:A9:86:9F:46:E7:6B:79:D5:74:F4
Certificate issuer:       /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial:       018CC64B3B44A70F3AA2F6CA37281A84C538
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/6OXgE8owcQm91KmGn0bna3nVdPQ.roa
Signing time:             Mon 01 Jan 2024 18:31:08 +0000
ROA not before:           Mon 01 Jan 2024 18:31:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216352
IP address blocks:        2001:67c:c4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:3b:44:a7:0f:3a:a2:f6:ca:37:28:1a:84:c5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
        Validity
            Not Before: Jan  1 18:31:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e8e5e013ca307109bdd4a9869f46e76b79d574f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:32:8f:74:65:10:d3:a1:f7:a5:46:a9:7a:
                    15:75:d3:04:e1:f9:dd:71:b4:ed:3a:a3:81:eb:64:
                    5f:32:37:fb:d6:fd:83:8a:4e:77:58:ab:5d:8b:81:
                    33:84:3e:3e:4a:86:b1:df:3c:6e:ec:04:c0:ee:84:
                    15:ec:3d:27:81:41:da:78:e6:a4:b5:80:bc:bd:67:
                    ad:d0:ca:c2:4c:75:4d:f3:d1:ed:a4:45:c9:b6:1a:
                    ea:ce:fb:49:c9:ad:2b:d5:cd:6f:01:84:d2:ca:84:
                    72:72:06:c4:4c:be:18:a6:2e:d3:8e:87:89:2a:36:
                    18:e6:d5:2e:28:52:0e:10:f0:47:bd:1f:b5:39:c8:
                    30:ed:76:42:f0:c1:00:fd:c6:e5:3f:85:a9:3b:bc:
                    e4:b5:f5:29:2f:e2:5f:3f:a3:0f:38:b7:13:22:86:
                    88:e6:94:4a:95:2e:30:ae:93:41:fd:fd:10:f3:ce:
                    ae:e9:78:45:99:e5:3f:0d:f7:d7:d2:f1:9c:a3:f3:
                    4c:0a:df:ae:21:cb:9e:63:25:d5:d0:9d:3d:99:69:
                    43:f9:f5:17:04:60:ca:fd:14:83:63:18:d1:00:e8:
                    40:42:43:ef:82:83:9d:30:59:47:aa:1d:2f:60:07:
                    68:b9:3f:5c:07:9f:c1:9b:8b:77:53:9d:65:af:29:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E5:E0:13:CA:30:71:09:BD:D4:A9:86:9F:46:E7:6B:79:D5:74:F4
            X509v3 Authority Key Identifier:
                keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/6OXgE8owcQm91KmGn0bna3nVdPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:cf:b9:8d:a8:49:80:78:8e:1c:a0:11:eb:ae:6c:56:b0:c5:
         4b:63:63:0d:c4:e9:b9:16:20:7b:73:07:de:75:04:6d:6a:76:
         dc:65:c9:a6:af:7c:fa:3c:f3:6d:2b:2b:e2:d2:38:65:2f:fb:
         ae:69:23:e5:69:45:fc:0a:6c:60:de:89:99:6d:df:7c:48:46:
         56:24:52:eb:5d:39:f2:a6:47:84:fe:9b:de:2c:9f:5c:f8:1e:
         81:fe:17:43:5e:ac:a2:a1:47:ef:30:57:64:17:1b:94:8a:7a:
         3a:49:a8:9c:c6:e4:b7:a9:27:b5:fa:25:b3:79:59:b8:0e:91:
         97:b6:01:ba:68:d9:2d:4f:60:66:85:25:8a:06:84:4a:8b:ae:
         a6:ff:93:ee:1d:fb:31:cf:09:50:e6:5b:11:28:41:90:fc:32:
         b9:e8:4d:00:48:c9:c7:9d:45:c8:fd:bd:08:e3:1b:ef:6f:17:
         6c:91:7d:10:74:64:76:3f:bc:e2:ca:62:fc:c6:1e:16:bb:5e:
         e8:be:1a:61:d9:27:2b:da:9f:38:b8:52:25:56:86:f2:df:61:
         78:f1:a5:6e:5d:64:88:5c:7e:51:f8:cc:65:44:67:1a:f9:ed:
         ba:1a:b9:05:72:2f:72:b4:e7:0f:16:af:36:d3:fe:07:d2:03:
         e4:29:5c:7c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGSztEpw86ovbKNygahMU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDRhY2U2OTQ2ZmI3MDFiYjJjNDVlMzBhY2FmZWE2NmRh
YzJmN2EwHhcNMjQwMTAxMTgzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGU1ZTAxM2NhMzA3MTA5YmRkNGE5ODY5ZjQ2ZTc2Yjc5ZDU3NGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiwyj3RlENOh96VGqXoVddME4fnd
cbTtOqOB62RfMjf71v2Dik53WKtdi4EzhD4+Soax3zxu7ATA7oQV7D0ngUHaeOak
tYC8vWet0MrCTHVN89HtpEXJthrqzvtJya0r1c1vAYTSyoRycgbETL4Ypi7TjoeJ
KjYY5tUuKFIOEPBHvR+1Ocgw7XZC8MEA/cblP4WpO7zktfUpL+JfP6MPOLcTIoaI
5pRKlS4wrpNB/f0Q886u6XhFmeU/DffX0vGco/NMCt+uIcueYyXV0J09mWlD+fUX
BGDK/RSDYxjRAOhAQkPvgoOdMFlHqh0vYAdouT9cB5/Bm4t3U51lrymYUQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOjl4BPKMHEJvdSphp9G52t51XT0MB8GA1UdIwQY
MBaAFAgErOaUb7cBuyxF4wrK/qZtrC96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmIt
OTVkMTYzNjRkYmI5LzEvNk9YZ0U4b3djUW05MUttR24wYm5hM25WZFBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmItOTVkMTYzNjRkYmI5
LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfADE
MA0GCSqGSIb3DQEBCwUAA4IBAQB3z7mNqEmAeI4coBHrrmxWsMVLY2MNxOm5FiB7
cwfedQRtanbcZcmmr3z6PPNtKyvi0jhlL/uuaSPlaUX8Cmxg3omZbd98SEZWJFLr
XTnypkeE/pveLJ9c+B6B/hdDXqyioUfvMFdkFxuUino6SaicxuS3qSe1+iWzeVm4
DpGXtgG6aNktT2BmhSWKBoRKi66m/5PuHfsxzwlQ5lsRKEGQ/DK56E0ASMnHnUXI
/b0I4xvvbxdskX0QdGR2P7ziymL8xh4Wu17ovhph2Scr2p84uFIlVoby32F48aVu
XWSIXH5R+MxlRGca+e26GrkFci9ytOcPFq820/4H0gPkKVx8
-----END CERTIFICATE-----