Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/l3K5ttheWXnz394G86knwRnGcA8.roa
File:                     l3K5ttheWXnz394G86knwRnGcA8.roa (raw, json)
Hash identifier:          Pjy8vInjkuhi5XOfxVSumcVQznVsw6wsAM89ftjvZqk=
Subject key identifier:   97:72:B9:B6:D8:5E:59:79:F3:DF:DE:06:F3:A9:27:C1:19:C6:70:0F
Certificate issuer:       /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial:       0191D4B3413F26BAA956911127F27AC25023
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/l3K5ttheWXnz394G86knwRnGcA8.roa
Signing time:             Mon 09 Sep 2024 02:53:22 +0000
ROA not before:           Mon 09 Sep 2024 02:53:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63800
IP address blocks:        2a12:f8c2:7f7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d4:b3:41:3f:26:ba:a9:56:91:11:27:f2:7a:c2:50:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
        Validity
            Not Before: Sep  9 02:53:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9772b9b6d85e5979f3dfde06f3a927c119c6700f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:57:bd:25:e5:de:46:fe:98:7c:e9:71:6b:
                    7b:d4:fd:06:08:cf:f9:ea:0b:cd:72:ec:4c:ee:26:
                    f4:98:56:e0:6b:4c:f7:a7:4c:19:14:e7:8b:46:c3:
                    0a:da:40:f2:fa:74:c7:2b:32:e7:e4:c3:29:d7:e5:
                    30:82:bb:17:c9:53:2a:7d:0c:cb:95:3e:68:b5:51:
                    47:a3:92:fe:e6:48:0e:b5:e8:3d:3f:b5:b2:16:0b:
                    eb:7d:4b:f2:a0:b4:03:cd:0d:9c:d7:68:ac:85:6f:
                    23:73:d9:91:37:25:77:3a:14:87:49:32:6e:7c:f0:
                    04:d1:ec:7d:39:fd:a7:69:a3:7f:35:0b:d3:6a:3f:
                    2f:24:f4:54:16:7b:71:79:a5:a4:be:97:38:f9:2a:
                    98:8e:ae:e8:b6:bd:89:d2:46:a3:48:11:ac:7d:7f:
                    de:99:3a:af:ef:ff:23:46:ad:01:1b:a0:72:ce:93:
                    5f:1b:41:50:f7:52:21:c9:49:52:9f:e0:fd:f6:39:
                    8b:2d:33:73:89:c3:38:01:49:c6:9e:30:33:d2:24:
                    c1:90:91:8b:58:87:fb:b1:41:48:33:a7:10:f8:c1:
                    c1:99:75:be:4d:01:4f:a5:aa:e3:43:4a:3e:c2:74:
                    a3:06:08:79:c9:49:b0:10:7d:6c:d1:6a:a5:64:c9:
                    54:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:72:B9:B6:D8:5E:59:79:F3:DF:DE:06:F3:A9:27:C1:19:C6:70:0F
            X509v3 Authority Key Identifier:
                keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/l3K5ttheWXnz394G86knwRnGcA8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:f8c2:7f7::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:7e:4f:20:d7:76:95:48:b7:93:77:16:61:37:a8:a4:4b:
         5d:9b:e7:af:f1:96:fa:69:20:db:3f:aa:2d:fc:bb:fe:c8:1e:
         f9:49:d8:24:43:39:cc:e3:6b:03:39:a4:50:1d:a9:7a:a9:56:
         02:07:99:6f:f1:7c:1d:bb:72:04:37:7a:a3:c3:26:b2:91:fd:
         c4:09:9a:66:8a:db:ec:8d:d4:0a:8f:9f:b3:24:94:e8:cc:b7:
         22:55:2b:f7:7f:4a:cc:fc:0e:23:d4:5f:24:79:65:1b:61:70:
         3b:1a:d1:7c:cf:b2:65:d9:86:7c:1f:24:7a:5d:e5:fa:54:1f:
         65:1e:5f:2f:8f:a9:19:bb:b6:92:56:57:d8:6a:ca:33:43:d3:
         b9:ca:c3:cf:ea:d8:2f:a7:db:ab:50:1c:e0:c6:f7:f5:a6:f1:
         13:92:ae:ff:a7:85:cd:ef:e0:a2:88:20:90:60:61:f4:a9:bc:
         1a:d5:c9:08:cd:63:cb:bd:28:72:60:6e:57:47:12:0f:35:d5:
         16:1d:11:87:b3:65:72:85:bb:6f:b1:cc:82:65:58:f4:31:fa:
         dc:35:ee:5c:c4:34:a2:5d:de:77:f6:00:1c:5c:60:e4:f6:67:
         e3:84:e5:60:0d:b8:d7:31:27:97:ef:b0:a3:d2:d8:6c:d4:6b:
         d4:80:a0:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZHUs0E/JrqpVpERJ/J6wlAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk
Yjg5M2EwHhcNMjQwOTA5MDI1MzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzcyYjliNmQ4NWU1OTc5ZjNkZmRlMDZmM2E5MjdjMTE5YzY3MDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4NXvSXl3kb+mHzpcWt71P0GCM/5
6gvNcuxM7ib0mFbga0z3p0wZFOeLRsMK2kDy+nTHKzLn5MMp1+UwgrsXyVMqfQzL
lT5otVFHo5L+5kgOteg9P7WyFgvrfUvyoLQDzQ2c12ishW8jc9mRNyV3OhSHSTJu
fPAE0ex9Of2naaN/NQvTaj8vJPRUFntxeaWkvpc4+SqYjq7otr2J0kajSBGsfX/e
mTqv7/8jRq0BG6ByzpNfG0FQ91IhyUlSn+D99jmLLTNzicM4AUnGnjAz0iTBkJGL
WIf7sUFIM6cQ+MHBmXW+TQFPparjQ0o+wnSjBgh5yUmwEH1s0WqlZMlUBwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJdyubbYXll589/eBvOpJ8EZxnAPMB8GA1UdIwQY
MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt
ODcyNTBmNWEwN2NjLzEvbDNLNXR0aGVXWG56Mzk0Rzg2a253Um5HY0E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj
LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhL4wgf3
MA0GCSqGSIb3DQEBCwUAA4IBAQBNFH5PINd2lUi3k3cWYTeopEtdm+ev8Zb6aSDb
P6ot/Lv+yB75SdgkQznM42sDOaRQHal6qVYCB5lv8Xwdu3IEN3qjwyaykf3ECZpm
itvsjdQKj5+zJJTozLciVSv3f0rM/A4j1F8keWUbYXA7GtF8z7Jl2YZ8HyR6XeX6
VB9lHl8vj6kZu7aSVlfYasozQ9O5ysPP6tgvp9urUBzgxvf1pvETkq7/p4XN7+Ci
iCCQYGH0qbwa1ckIzWPLvShyYG5XRxIPNdUWHRGHs2VyhbtvscyCZVj0MfrcNe5c
xDSiXd539gAcXGDk9mfjhOVgDbjXMSeX77Cj0ths1GvUgKCB
-----END CERTIFICATE-----