Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/iRkx87l2gcfISttQieJ0VS_dG7g.roa
File:                     iRkx87l2gcfISttQieJ0VS_dG7g.roa (raw, json)
Hash identifier:          oEDdc7C4bgJ7SU20+zUYeCwI9gpaaRcEKJIEg+k/cbM=
Subject key identifier:   89:19:31:F3:B9:76:81:C7:C8:4A:DB:50:89:E2:74:55:2F:DD:1B:B8
Certificate issuer:       /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial:       01922F4D9DA3AD8D92588B620B984A06FD88
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/iRkx87l2gcfISttQieJ0VS_dG7g.roa
Signing time:             Thu 26 Sep 2024 17:07:48 +0000
ROA not before:           Thu 26 Sep 2024 17:07:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9205
IP address blocks:        2a04:5e40:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:4d:9d:a3:ad:8d:92:58:8b:62:0b:98:4a:06:fd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
        Validity
            Not Before: Sep 26 17:07:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=891931f3b97681c7c84adb5089e274552fdd1bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:81:a1:5e:a7:95:a7:d1:87:09:7d:15:5e:
                    18:b1:c1:98:9f:e4:3f:eb:6a:d6:1f:cb:9f:65:54:
                    fd:99:91:11:86:9c:ab:f0:af:57:20:8c:8e:5c:db:
                    52:24:5b:01:79:a5:aa:47:87:69:80:cf:96:71:25:
                    33:00:b0:cc:b9:e6:cf:8a:c4:f1:ed:7b:e2:f2:4c:
                    1b:a9:27:a1:86:85:6f:da:72:f9:69:da:95:5e:fe:
                    5e:32:6e:2e:83:1d:de:87:8b:48:6b:af:ba:b4:ff:
                    cb:df:14:3a:ae:5a:e9:e5:23:f9:56:6b:ac:78:cb:
                    b8:ab:f2:08:97:ad:67:fe:95:47:df:1f:93:9a:8a:
                    a6:27:bd:79:a5:28:3b:47:cb:c1:67:64:0d:50:4e:
                    23:08:c5:7d:2f:93:18:bc:36:ad:88:b1:41:5d:ea:
                    f4:12:52:d6:4d:1c:ae:ab:2d:25:74:6e:4e:04:b5:
                    f1:3c:a5:95:0a:a4:1a:2d:cd:c3:6b:bc:10:b1:7e:
                    51:83:2a:1d:af:98:53:9d:7e:17:af:3b:d5:cf:cf:
                    4d:7c:ed:f9:f7:9f:7c:f1:a3:b5:0a:c4:23:0b:55:
                    9a:82:9d:2f:4a:40:e6:78:71:16:e6:81:f6:95:9f:
                    73:98:9d:58:fe:60:b0:0d:d8:ed:98:13:79:01:84:
                    05:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:31:F3:B9:76:81:C7:C8:4A:DB:50:89:E2:74:55:2F:DD:1B:B8
            X509v3 Authority Key Identifier:
                keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/iRkx87l2gcfISttQieJ0VS_dG7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:5e40:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:55:cf:4e:d6:20:e3:7d:48:a8:07:3a:a9:8f:84:60:4e:69:
         05:30:51:9e:fc:fd:c0:14:0f:1c:4b:75:55:43:18:26:e0:bd:
         02:94:40:81:92:2d:39:f1:77:05:30:b1:fb:f6:57:cd:2e:3b:
         9e:69:e2:83:f0:51:f9:cb:7d:60:3d:6c:aa:dd:40:f5:be:f4:
         ee:56:bf:7e:09:48:4d:aa:28:22:08:d2:77:3a:98:b0:37:e2:
         62:7a:bb:d1:10:c9:f6:fa:bc:26:98:10:72:79:fc:09:91:78:
         8e:07:8b:69:38:77:66:06:ab:96:13:43:64:02:ad:5e:12:4d:
         6f:46:ab:1b:af:3d:76:92:d3:06:2e:f0:e2:96:d2:89:38:5a:
         b3:ef:2d:79:4e:7d:5d:87:ce:d3:d9:93:3f:3a:9d:f0:af:e7:
         9f:08:66:94:3c:34:4e:02:40:47:23:e5:16:42:0a:2b:f6:8d:
         f7:94:fa:af:d2:72:2d:66:fc:28:d8:ed:a4:c3:1e:3c:3e:06:
         7e:58:42:97:4f:78:51:df:fb:3f:70:28:48:4c:ef:e7:76:f6:
         36:53:26:8a:1d:55:02:e8:d1:32:89:6b:75:15:41:c7:4f:1c:
         25:d8:78:83:b6:c4:40:20:f7:3d:15:f1:98:e1:83:0b:6c:45:
         76:fa:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----