Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W26-KGvbK083nDV-pdSjGoarrvs.roa
File:                     W26-KGvbK083nDV-pdSjGoarrvs.roa (raw, json)
Hash identifier:          E6bSe5NPKjGlQ0Tkt07YKn/Pe1K8yOj8nwFplyNP2mo=
Subject key identifier:   5B:6E:BE:28:6B:DB:2B:4F:37:9C:35:7E:A5:D4:A3:1A:86:AB:AE:FB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019425221D91AB66C6367D2E9D4889377F8E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W26-KGvbK083nDV-pdSjGoarrvs.roa
Signing time:             Thu 02 Jan 2025 03:49:40 +0000
ROA not before:           Thu 02 Jan 2025 03:49:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204901
IP address blocks:        2a0e:b107:f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Feb 2025 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:1d:91:ab:66:c6:36:7d:2e:9d:48:89:37:7f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 03:49:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5b6ebe286bdb2b4f379c357ea5d4a31a86abaefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:dc:7d:aa:b5:0e:f9:7a:f3:2f:a8:c1:88:
                    81:d4:2e:b9:44:56:60:1a:c9:e3:90:24:11:e0:70:
                    5f:3e:8b:64:a7:eb:d1:ca:44:0e:05:35:e0:9e:de:
                    52:2b:43:49:89:65:1d:89:a8:ca:ea:f2:24:d8:d3:
                    78:8b:c6:a6:87:12:1a:f4:3f:72:02:44:2a:3c:53:
                    91:40:d4:37:86:2b:aa:8f:32:34:7c:b8:ba:5f:02:
                    52:69:11:f4:f6:24:59:f1:b4:4d:e1:45:c9:42:90:
                    a7:a6:15:34:11:06:cb:43:db:f3:fe:05:cc:a7:9f:
                    db:fe:1e:0f:59:18:14:a5:07:c4:75:b4:62:7b:8d:
                    2d:d3:b2:5d:d9:ec:23:3c:9a:63:f9:eb:8e:ed:52:
                    ab:02:34:36:a5:24:a9:f9:4c:00:8e:53:0a:45:cd:
                    80:47:eb:32:44:2a:a0:4a:4d:33:f1:78:0c:95:89:
                    0c:3b:9f:28:6f:b6:4b:c7:fc:51:ee:01:4f:8d:ac:
                    5e:b2:5d:5e:fb:bf:b7:89:14:9d:eb:7f:93:f2:2e:
                    45:58:31:6c:ed:0e:45:a1:d7:1f:a1:f5:da:f5:41:
                    cb:7d:44:4b:91:8c:21:a6:cb:da:43:1c:a2:b2:8e:
                    3a:be:6b:fd:1a:ae:31:69:b4:f0:b6:75:10:b2:89:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6E:BE:28:6B:DB:2B:4F:37:9C:35:7E:A5:D4:A3:1A:86:AB:AE:FB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W26-KGvbK083nDV-pdSjGoarrvs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:ed:79:b0:f2:da:5d:d4:f0:4a:67:b9:6e:b4:36:21:84:9a:
         e9:0a:f3:f2:09:91:4f:6d:3d:f7:da:2f:0f:2b:db:3c:62:16:
         2d:8a:31:ea:de:be:f9:0f:b6:35:e5:8d:f6:18:45:5b:de:df:
         66:f8:86:1d:e7:62:16:7f:ca:af:28:1b:d5:bf:cf:9a:f2:69:
         ad:d3:a0:e1:d4:f2:9e:ce:ba:00:85:77:77:69:15:85:e2:c3:
         f7:de:df:b2:04:ec:f9:49:cb:dc:96:c7:9a:07:54:b7:6b:39:
         53:36:36:83:0c:80:93:a8:c5:b4:7b:ad:c7:30:1e:80:34:91:
         9b:08:46:8f:b9:93:9f:e9:e4:56:df:fa:70:73:fb:a4:33:c1:
         0e:2f:8e:9c:5f:ca:e2:15:c2:52:a1:07:fa:ef:29:28:c1:40:
         f5:9b:a2:91:de:86:05:96:c5:43:c3:4b:4f:fd:30:b3:4c:30:
         79:bc:f8:1d:43:31:36:eb:1b:40:72:0e:3c:77:94:9c:79:81:
         0b:ed:bc:a7:ab:81:f5:45:c7:cd:3f:c7:b7:77:6b:97:e2:6c:
         c4:5f:e8:8e:8e:0a:34:df:80:4b:6a:fa:d5:ce:61:92:e1:e5:
         a5:11:66:52:aa:cd:90:a7:68:c6:ed:c5:23:8f:96:ae:e0:c3:
         b6:74:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:42 2025 by rpki-client