Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4bL5AhpnpUOTbpP20PnxSQ1FPxw.roa
File:                     4bL5AhpnpUOTbpP20PnxSQ1FPxw.roa (raw, json)
Hash identifier:          DHEy1kSYLWt7sIOA5VgOo732H4L/ljelS+FDGEcznug=
Subject key identifier:   E1:B2:F9:02:1A:67:A5:43:93:6E:93:F6:D0:F9:F1:49:0D:45:3F:1C
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       018CC4936F9FFB713051F07DC5631A4F1166
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4bL5AhpnpUOTbpP20PnxSQ1FPxw.roa
Signing time:             Mon 01 Jan 2024 10:30:45 +0000
ROA not before:           Mon 01 Jan 2024 10:30:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50801
IP address blocks:        2a0d:2146:be00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:6f:9f:fb:71:30:51:f0:7d:c5:63:1a:4f:11:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jan  1 10:30:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e1b2f9021a67a543936e93f6d0f9f1490d453f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:f0:39:21:6a:97:fd:b8:ca:3d:0f:23:6c:
                    8e:38:68:bc:71:10:90:f7:19:ab:7c:ec:18:69:65:
                    e3:fb:08:55:a6:e6:80:f0:44:49:b7:05:1e:e1:f6:
                    54:d5:10:01:c4:3a:e1:89:2f:61:62:00:d5:1a:c3:
                    44:94:1a:b2:5c:df:e7:da:f8:4e:a5:27:13:1c:fe:
                    46:99:73:e0:ef:1e:9b:23:15:79:a5:eb:91:70:12:
                    1a:63:c9:2d:5d:33:55:51:d9:dd:ef:e7:7c:99:fb:
                    ee:94:d6:9e:87:e3:85:da:bc:ea:95:b2:01:58:fa:
                    4f:d3:6b:8b:3f:ae:75:f4:c8:6f:17:8c:b1:0b:5a:
                    d3:3b:9c:c9:19:85:15:a1:ef:70:8c:6c:74:43:c2:
                    b9:0d:a9:71:38:38:22:ec:51:3d:8c:eb:bb:12:80:
                    fc:e8:40:35:1e:4b:74:6a:8c:ea:b5:8f:81:f3:08:
                    08:7f:9a:04:65:bd:36:d9:b8:f5:b4:1a:67:41:06:
                    57:e3:f7:fc:8e:85:5f:71:0f:c9:d5:11:c9:e1:8f:
                    91:ad:1b:f4:77:12:f3:25:ef:74:4b:c9:0f:fa:62:
                    f1:44:6a:64:73:d9:35:93:fa:79:d8:ab:f8:4c:6f:
                    6e:7b:85:1d:58:bc:c4:b9:60:e8:4d:1e:02:fb:c2:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B2:F9:02:1A:67:A5:43:93:6E:93:F6:D0:F9:F1:49:0D:45:3F:1C
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4bL5AhpnpUOTbpP20PnxSQ1FPxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2146:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:fe:7a:28:85:57:35:26:32:78:6b:1b:fc:eb:8d:16:50:af:
         65:4c:d6:71:91:3e:f5:87:4b:37:ba:39:06:9d:9f:8a:86:bf:
         95:bf:b2:97:05:5c:9e:a9:05:99:23:d3:1d:e5:81:53:6d:8b:
         73:48:dd:1b:f9:ff:82:17:52:f5:34:75:49:66:e6:22:3f:9f:
         74:96:04:02:07:b1:4a:38:81:b2:40:63:30:f7:80:f5:80:06:
         23:c0:7d:d7:30:8a:9b:cb:54:a3:5e:79:38:b4:04:1d:13:b4:
         40:a1:f3:8c:c1:b5:9b:53:98:1e:4e:b9:98:f1:f8:97:b9:9f:
         3c:ca:3e:9f:bb:08:59:00:b2:7f:90:36:55:77:b4:ff:0a:e8:
         c5:66:32:cb:df:a4:70:ca:c2:1b:4c:e5:49:b5:2a:51:5d:73:
         4a:b6:e4:8f:2b:28:dc:ab:3e:09:b1:4a:c5:ba:e2:12:bd:6c:
         11:6a:04:3f:0e:e3:34:d6:b3:c1:81:08:5b:50:75:43:2a:c6:
         85:8d:7a:2c:45:2e:49:5d:26:ab:f8:6d:d7:65:50:38:46:13:
         34:b4:8a:ab:3c:c6:33:68:06:dc:95:02:a0:a6:73:9b:84:70:
         85:3d:7f:26:2c:14:ef:1c:b2:78:1f:48:16:87:ce:ff:bf:4a:
         f7:43:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----