Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/fKf8cjhmMfXy-R8mjWEpsQOv3Hw.roa
File:                     fKf8cjhmMfXy-R8mjWEpsQOv3Hw.roa (raw, json)
Hash identifier:          /ueHbIIFjVYrFlKi4gvzBT1UgHxcGG/iYqOiZ0cxFJQ=
Subject key identifier:   7C:A7:FC:72:38:66:31:F5:F2:F9:1F:26:8D:61:29:B1:03:AF:DC:7C
Certificate issuer:       /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial:       0192B99315683367316A8FCE60209787D4CB
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/fKf8cjhmMfXy-R8mjWEpsQOv3Hw.roa
Signing time:             Wed 23 Oct 2024 13:31:17 +0000
ROA not before:           Wed 23 Oct 2024 13:31:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57271
IP address blocks:        2a09:9445::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b9:93:15:68:33:67:31:6a:8f:ce:60:20:97:87:d4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
        Validity
            Not Before: Oct 23 13:31:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7ca7fc72386631f5f2f91f268d6129b103afdc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:0a:fe:73:32:e5:8b:7f:98:f2:ad:30:d7:
                    cc:2a:a5:71:58:a6:64:af:b6:40:bf:2c:ba:c9:50:
                    ba:03:0c:6b:6a:3e:9d:92:30:aa:1a:f7:dc:79:f3:
                    38:85:f9:b7:25:9e:64:4c:6f:07:0a:c2:9b:57:be:
                    a2:a8:73:f6:dd:9d:87:5e:d6:da:42:12:53:9e:13:
                    5b:70:cf:08:7b:b9:7a:60:d5:f8:ae:86:68:1f:ce:
                    50:23:a6:fd:3d:01:bc:dc:91:71:c6:44:a2:89:6b:
                    65:14:69:39:02:c0:9c:d1:37:a8:78:e0:b6:0e:df:
                    f0:f8:53:8e:5c:bf:f6:61:06:25:2d:ae:c4:48:e9:
                    da:77:b9:53:14:b5:6f:26:45:b3:53:8d:05:bb:e0:
                    c2:ae:ef:36:21:4c:76:53:e2:5d:ae:76:62:6f:58:
                    d2:0b:4a:09:18:7a:4c:2c:93:22:08:2e:5f:fb:45:
                    aa:7a:25:29:fd:75:0d:63:ff:c1:21:55:61:49:44:
                    d2:21:66:4e:06:3a:19:20:77:39:23:94:c2:85:9e:
                    76:d8:10:45:0d:49:80:16:41:1c:7a:88:88:a8:1e:
                    7e:12:ba:a0:1b:ed:85:53:34:08:6f:7c:37:9f:61:
                    00:bf:a0:67:d0:e3:45:d9:77:45:0c:95:3c:61:03:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A7:FC:72:38:66:31:F5:F2:F9:1F:26:8D:61:29:B1:03:AF:DC:7C
            X509v3 Authority Key Identifier:
                keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/fKf8cjhmMfXy-R8mjWEpsQOv3Hw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:9445::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:d5:90:a0:92:f7:34:3e:e5:9e:da:94:a4:d4:9a:1b:bd:72:
         a9:05:e1:f2:4f:e7:af:ec:68:32:ad:90:54:af:7c:3b:23:0e:
         04:61:5e:10:ef:28:9d:76:4f:7b:98:06:1b:f0:f4:0f:3b:6b:
         b1:88:d9:c5:7d:60:95:d3:48:2d:bd:66:3d:61:48:7b:2c:bb:
         6a:c1:fa:0e:b5:55:f8:4d:9e:19:c1:dd:3a:3b:89:21:4a:ed:
         2f:3f:40:f3:ca:aa:ee:16:56:7e:4a:4b:01:be:54:66:9f:ea:
         a6:6b:a6:fd:47:0e:ac:48:3f:21:11:1a:8d:b4:af:9c:9c:3b:
         d1:53:36:da:08:5e:a8:f9:bd:a8:a4:fc:5b:f9:a6:48:c3:ad:
         af:5d:25:89:a0:4b:ec:82:b7:04:26:16:84:e1:37:9b:69:89:
         e1:0f:4b:c0:55:47:64:ce:19:e2:5d:76:54:18:b1:75:e7:49:
         b0:f9:de:a4:4b:59:cd:1d:1d:26:8f:64:31:93:cb:9f:b0:78:
         b2:21:eb:ca:2c:58:5e:d0:c9:3b:01:2c:01:64:c7:ac:65:12:
         52:7d:04:f9:1e:6c:70:b2:46:89:ec:10:83:3d:4c:74:02:03:
         e7:4c:70:08:bd:29:30:f6:6f:e3:6b:80:ab:9d:0c:f3:1f:51:
         86:22:66:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----