Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/sA4OyD7S4rElTK7wEZRQl52YCIY.roa
File:                     sA4OyD7S4rElTK7wEZRQl52YCIY.roa (raw, json)
Hash identifier:          C8U/Onx8ilxOoTJVkuISHrtfDDMmBg3ygteUtesUKJk=
Subject key identifier:   B0:0E:0E:C8:3E:D2:E2:B1:25:4C:AE:F0:11:94:50:97:9D:98:08:86
Certificate issuer:       /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial:       018CF5B30B9DB3718F86AF9F4571DA88F7AD
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/sA4OyD7S4rElTK7wEZRQl52YCIY.roa
Signing time:             Wed 10 Jan 2024 23:26:41 +0000
ROA not before:           Wed 10 Jan 2024 23:26:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208626
IP address blocks:        2a11:3c45::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:f5:b3:0b:9d:b3:71:8f:86:af:9f:45:71:da:88:f7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
        Validity
            Not Before: Jan 10 23:26:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b00e0ec83ed2e2b1254caef0119450979d980886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:b0:75:3a:bc:4c:33:23:e7:47:7d:b1:f6:
                    6c:a4:30:cb:3b:11:bd:c6:d4:ec:6b:36:1a:97:20:
                    57:5d:cf:d8:8c:b4:a5:01:92:55:6d:3e:b0:b3:b3:
                    5a:53:67:3d:82:0b:c7:c4:84:4d:0e:b3:51:ea:88:
                    2e:bc:19:10:1b:f3:b4:4c:e6:02:80:94:98:70:f3:
                    84:57:4f:2a:a1:ed:88:17:5b:f0:bd:d5:a4:90:41:
                    ca:41:69:8c:3c:65:2a:c8:ad:c5:28:27:cd:e9:e8:
                    3b:7f:13:e6:11:cc:98:5c:ad:04:53:84:ed:d7:10:
                    16:2d:08:d6:77:80:f4:9e:e6:a3:38:ef:b9:e6:17:
                    4d:35:2d:e1:1f:58:12:56:62:44:e8:54:2c:c8:27:
                    d6:b0:b4:73:04:d2:7e:44:32:f6:da:68:05:82:a9:
                    e5:d4:a5:85:3c:27:00:b7:33:dc:81:a6:21:fe:7f:
                    53:10:fc:b4:20:93:25:4f:4b:c1:2e:7c:a3:2c:8f:
                    e3:5c:34:2d:1b:ef:e3:fa:b1:90:2a:a0:f8:ea:25:
                    60:b4:95:c1:ac:9c:33:7e:8c:c7:43:a7:35:e9:55:
                    04:ef:7c:b4:a4:8b:b8:25:75:be:77:df:50:69:a8:
                    a1:bf:53:37:fd:57:09:67:00:69:25:cd:da:07:82:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0E:0E:C8:3E:D2:E2:B1:25:4C:AE:F0:11:94:50:97:9D:98:08:86
            X509v3 Authority Key Identifier:
                keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/sA4OyD7S4rElTK7wEZRQl52YCIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:3c45::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:3c:16:6a:36:25:0f:87:eb:e4:dc:73:15:b5:ce:37:4f:e5:
         9a:63:bf:36:b5:d5:79:4a:6c:a2:ed:51:a8:cd:3f:6c:e9:31:
         93:c7:6e:b3:c4:9a:68:40:25:fd:7c:f4:05:1f:48:ba:40:f4:
         2d:71:20:ef:50:21:05:35:16:24:7b:b1:fd:07:1e:87:92:84:
         e3:71:95:6a:88:72:8b:92:0c:2d:8e:51:1c:c1:a7:31:e7:84:
         95:81:d2:b5:73:17:f5:79:f9:5b:49:d8:d5:a8:09:c0:eb:30:
         cf:60:dc:b3:4e:1c:cd:53:ef:e5:87:e7:f2:ca:06:c0:22:89:
         22:fb:ae:37:82:55:17:0b:ee:4a:e8:5d:45:bf:d5:4b:01:82:
         0e:ca:a7:3e:fa:4a:17:a6:47:81:c1:ef:93:82:5b:85:5f:82:
         a8:1a:ed:1f:7c:df:09:9f:52:ae:50:7f:af:df:3c:69:80:1d:
         6b:2e:c9:14:8d:bf:1a:18:b2:3b:0f:6f:55:5b:bd:3d:2e:1d:
         86:72:a8:48:ec:b9:33:16:bd:36:cc:44:f9:2d:71:ca:46:03:
         7d:77:58:9f:fb:cd:7b:b1:f7:89:89:d2:d5:ba:35:ad:04:0f:
         98:61:e2:ff:40:60:1b:4e:a0:4c:b5:9d:c1:24:52:c9:a3:58:
         c4:0c:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----