Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/yihpC6DgefzNmRtA7PjEdBoKHOc.roa
File:                     yihpC6DgefzNmRtA7PjEdBoKHOc.roa (raw, json)
Hash identifier:          gPzfimCijy3WJUpqrdkWUML6GDiB5c1iKZrvLaryEWQ=
Subject key identifier:   CA:28:69:0B:A0:E0:79:FC:CD:99:1B:40:EC:F8:C4:74:1A:0A:1C:E7
Certificate issuer:       /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial:       018CC86F58299E561FE5864D8DF641A66BAE
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/yihpC6DgefzNmRtA7PjEdBoKHOc.roa
Signing time:             Tue 02 Jan 2024 04:29:49 +0000
ROA not before:           Tue 02 Jan 2024 04:29:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     174
IP address blocks:        2a07:db86::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:58:29:9e:56:1f:e5:86:4d:8d:f6:41:a6:6b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
        Validity
            Not Before: Jan  2 04:29:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ca28690ba0e079fccd991b40ecf8c4741a0a1ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:a9:80:64:b5:92:f4:46:37:a1:16:cc:cf:
                    c6:0f:2a:30:b5:e5:fd:6c:19:31:c6:f5:94:79:b0:
                    f8:fe:6f:9d:c5:98:41:04:21:a2:a7:f0:28:15:34:
                    df:18:f4:3c:a7:3a:aa:3c:53:04:62:27:6d:e1:0f:
                    ce:1b:3d:80:61:97:1f:dd:4f:c4:82:37:7f:fa:00:
                    1f:c9:68:2e:f6:28:cc:c8:e8:9d:bb:e2:a8:f8:94:
                    0c:b6:a8:fc:40:3c:90:87:73:9c:42:c8:42:65:e6:
                    68:1e:d9:b6:0c:ca:ed:ad:ad:6a:0b:a5:a7:d5:61:
                    cf:64:06:4e:fc:b5:fe:1a:4c:8d:01:3e:96:d3:e4:
                    0b:1b:25:f2:6b:6d:0e:ce:8e:0e:ae:09:64:5e:cf:
                    c8:29:7b:4e:16:83:db:c0:bf:6c:16:48:3e:4f:d9:
                    a0:a8:88:f3:88:91:54:75:5e:82:be:eb:60:d9:8e:
                    ee:b6:93:58:3b:af:33:18:78:7a:e1:cf:a7:50:77:
                    c2:18:d5:3e:03:c2:ca:92:4d:58:be:d2:ff:56:5e:
                    f5:ed:88:41:a7:88:87:83:14:88:76:d3:0a:5f:e4:
                    b9:69:42:5f:83:04:ef:a6:81:8c:2b:dd:4e:f8:13:
                    54:91:47:f0:f6:b7:5b:1f:b2:aa:c9:33:1b:59:f8:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:28:69:0B:A0:E0:79:FC:CD:99:1B:40:EC:F8:C4:74:1A:0A:1C:E7
            X509v3 Authority Key Identifier:
                keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/yihpC6DgefzNmRtA7PjEdBoKHOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:db86::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:32:e2:41:03:10:1e:95:5d:cd:b0:77:26:9e:37:89:45:01:
         e3:d7:c8:64:23:9c:d4:37:15:0b:3d:02:62:6e:be:5f:43:35:
         2a:cc:16:f2:3f:ab:d3:ed:e1:66:4e:af:74:6b:f5:a9:d0:c6:
         0d:39:ba:50:2b:77:20:0b:2e:4a:56:47:a2:7d:cf:7b:39:0c:
         84:1d:cd:cd:62:8a:da:1d:2b:3b:86:c7:bc:43:81:56:86:c0:
         fc:46:ee:24:75:a2:eb:32:2a:17:8e:1a:d9:33:dd:91:ee:ba:
         ee:34:f4:3b:ba:02:2a:90:7c:20:75:a8:fc:0c:ae:ff:57:aa:
         25:06:ea:bc:9d:22:11:f3:33:77:d3:44:1f:58:07:d2:46:57:
         f1:0b:30:dd:6e:c4:0d:08:3f:74:5d:73:1e:da:c4:c5:db:af:
         a2:03:2f:cf:c7:c3:78:5a:c9:75:8c:9f:88:67:75:10:04:3b:
         43:61:d3:4e:04:28:05:a5:67:d8:bf:52:93:ce:ba:a5:b8:8f:
         f5:11:b1:21:da:5d:58:66:f5:c8:d8:20:be:43:37:38:b7:38:
         01:c3:2a:26:5e:68:75:be:f4:b0:21:09:a8:ce:50:3c:94:1b:
         dd:0a:3f:06:22:55:b5:67:e3:c2:73:95:bc:96:f6:31:9b:66:
         45:ad:2b:b3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzIb1gpnlYf5YZNjfZBpmuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMjhkNmYxM2UzNTlkZDBiYjQ1MzRhMjQ2NTU5NzRjNTdk
MmIwZmUwHhcNMjQwMTAyMDQyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTI4NjkwYmEwZTA3OWZjY2Q5OTFiNDBlY2Y4YzQ3NDFhMGExY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujqpgGS1kvRGN6EWzM/GDyowteX9
bBkxxvWUebD4/m+dxZhBBCGip/AoFTTfGPQ8pzqqPFMEYidt4Q/OGz2AYZcf3U/E
gjd/+gAfyWgu9ijMyOidu+Ko+JQMtqj8QDyQh3OcQshCZeZoHtm2DMrtra1qC6Wn
1WHPZAZO/LX+GkyNAT6W0+QLGyXya20Ozo4OrglkXs/IKXtOFoPbwL9sFkg+T9mg
qIjziJFUdV6Cvutg2Y7utpNYO68zGHh64c+nUHfCGNU+A8LKkk1YvtL/Vl717YhB
p4iHgxSIdtMKX+S5aUJfgwTvpoGMK91O+BNUkUfw9rdbH7KqyTMbWfjMvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMooaQug4Hn8zZkbQOz4xHQaChznMB8GA1UdIwQY
MBaAFD4o1vE+NZ3Qu0U0okZVl0xX0rD+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEt
NTQ4ODE2OTExOWU4LzEveWlocEM2RGdlZnpObVJ0QTdQakVkQm9LSE9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82NDUwMzgtMjU1Yi00NGRmLWFlOGEtNTQ4ODE2OTExOWU4
LzEvUGlqVzhUNDFuZEM3UlRTaVJsV1hURmZTc1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgfbhjAN
BgkqhkiG9w0BAQsFAAOCAQEAUTLiQQMQHpVdzbB3Jp43iUUB49fIZCOc1DcVCz0C
Ym6+X0M1KswW8j+r0+3hZk6vdGv1qdDGDTm6UCt3IAsuSlZHon3PezkMhB3NzWKK
2h0rO4bHvEOBVobA/EbuJHWi6zIqF44a2TPdke667jT0O7oCKpB8IHWo/Ayu/1eq
JQbqvJ0iEfMzd9NEH1gH0kZX8Qsw3W7EDQg/dF1zHtrExduvogMvz8fDeFrJdYyf
iGd1EAQ7Q2HTTgQoBaVn2L9Sk866pbiP9RGxIdpdWGb1yNggvkM3OLc4AcMqJl5o
db70sCEJqM5QPJQb3Qo/BiJVtWfjwnOVvJb2MZtmRa0rsw==
-----END CERTIFICATE-----