Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/o28Nyh3_uGifjGuhl0GKBg3a0aA.roa
File:                     o28Nyh3_uGifjGuhl0GKBg3a0aA.roa (raw, json)
Hash identifier:          La0EOzUDeawvPdz2ZoXz0tkkJUPZTZqTtA4G/EGD4gg=
Subject key identifier:   A3:6F:0D:CA:1D:FF:B8:68:9F:8C:6B:A1:97:41:8A:06:0D:DA:D1:A0
Certificate issuer:       /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial:       019083B336DAE3CABD6FA81A33589EE6E5A8
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/o28Nyh3_uGifjGuhl0GKBg3a0aA.roa
Signing time:             Fri 05 Jul 2024 16:21:18 +0000
ROA not before:           Fri 05 Jul 2024 16:21:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214615
IP address blocks:        2a05:a00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:83:b3:36:da:e3:ca:bd:6f:a8:1a:33:58:9e:e6:e5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
        Validity
            Not Before: Jul  5 16:21:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a36f0dca1dffb8689f8c6ba197418a060ddad1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:02:d2:d8:11:57:7f:57:2f:b9:f4:3b:90:
                    9e:6c:75:5e:cd:7b:ef:19:41:46:cb:12:3c:73:16:
                    dc:58:0a:11:10:9f:81:8b:98:64:c1:ea:11:61:3e:
                    bc:b1:e1:11:09:82:c4:26:dd:7f:0e:df:7a:bc:9a:
                    fd:b5:79:5b:38:53:a3:e9:61:e9:4b:4f:a1:f6:34:
                    bf:a4:72:9d:7c:f6:e3:92:00:07:72:b8:fa:d4:10:
                    91:dd:59:47:e1:49:c4:88:d8:8e:87:fb:0e:f8:41:
                    49:30:f4:0e:2a:9d:e8:68:66:0f:d9:92:09:8f:c1:
                    e1:2e:c7:04:d0:a7:62:af:21:64:1a:3a:c8:82:ac:
                    ac:e5:03:d2:57:87:e4:03:81:f8:bc:c2:31:a2:d2:
                    2b:8a:e5:b6:ea:08:da:de:34:6a:50:f6:d1:d4:aa:
                    c9:00:7c:32:ea:bb:7b:e9:2e:6c:e0:99:2b:28:9b:
                    68:46:70:1f:a2:f6:ea:31:f2:95:66:ad:b5:97:e2:
                    29:10:b9:bd:48:f1:72:95:02:e9:f4:84:04:c0:eb:
                    82:0f:8e:b3:4d:45:8c:5a:ba:53:80:31:cf:a8:6b:
                    d1:69:c0:76:2d:a4:57:45:8a:c4:29:60:ad:41:b0:
                    20:37:d3:60:e4:e0:16:9c:e5:a7:b9:0b:05:b4:c8:
                    8b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6F:0D:CA:1D:FF:B8:68:9F:8C:6B:A1:97:41:8A:06:0D:DA:D1:A0
            X509v3 Authority Key Identifier:
                keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/o28Nyh3_uGifjGuhl0GKBg3a0aA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:5a:d0:4c:44:bc:0b:73:49:c7:a6:0c:c6:5e:04:0b:b0:97:
         6b:28:2d:b8:4e:b0:10:fa:34:03:84:91:82:c2:86:d8:ca:be:
         f0:21:93:ec:8b:4f:2d:90:0c:b9:7e:9b:35:54:02:d6:9c:51:
         51:2e:cd:e6:95:4f:bc:b5:bb:68:52:3a:c4:f9:b3:90:29:c1:
         7f:ce:5d:3a:1d:77:25:c6:4d:48:32:b9:f2:1e:2e:78:d3:04:
         85:05:28:1c:99:36:5b:a0:be:e7:7b:b5:3a:e8:45:ab:d2:7d:
         3a:1a:98:8a:ab:84:92:a9:6a:6e:82:7b:a1:1b:67:1c:49:81:
         92:d4:5f:65:85:7c:4d:a4:2b:7a:f5:09:e0:94:56:8b:55:1f:
         4a:70:e4:34:23:6a:c1:d1:80:75:c2:38:0d:dd:58:81:77:9f:
         37:28:e7:ca:eb:e5:1d:3c:10:8f:18:5b:4f:4b:67:17:a0:96:
         b2:43:45:ca:a4:b8:16:bc:e9:e4:6e:54:dc:10:cf:c3:fb:67:
         f7:3b:6e:02:9c:b8:d5:f9:a9:3b:bd:53:08:6b:72:bb:f4:6e:
         04:48:63:bf:77:b4:8b:91:ad:cb:73:61:25:c9:33:a2:da:fc:
         42:ed:10:04:8c:78:04:bd:56:b5:cd:b5:24:fb:26:1d:c6:3d:
         b5:2f:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----