Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/e-NcEgos7ihLwr-0SCDLzOcTQm4.roa
File:                     e-NcEgos7ihLwr-0SCDLzOcTQm4.roa (raw, json)
Hash identifier:          uJrSHrkHs8Oef6wL5fk1CJVBOml0IHbcBibaRHJkNa8=
Subject key identifier:   7B:E3:5C:12:0A:2C:EE:28:4B:C2:BF:B4:48:20:CB:CC:E7:13:42:6E
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       01914D63EB4ADA57F5A4EC2ECDBAC69ED12B
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/e-NcEgos7ihLwr-0SCDLzOcTQm4.roa
Signing time:             Tue 13 Aug 2024 20:17:59 +0000
ROA not before:           Tue 13 Aug 2024 20:17:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215787
IP address blocks:        2a0d:2146:bde0::/44 maxlen: 48
                          2a0d:2146:bdf0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:4d:63:eb:4a:da:57:f5:a4:ec:2e:cd:ba:c6:9e:d1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Aug 13 20:17:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7be35c120a2cee284bc2bfb44820cbcce713426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:69:47:b4:d6:b9:f1:4e:e4:10:c4:50:f6:
                    05:bb:30:ab:8f:b0:d1:03:8b:8a:a5:9f:78:c4:63:
                    91:19:4a:e3:84:4b:56:37:f2:f9:16:b4:ab:b3:92:
                    ed:ef:96:84:60:d4:0d:99:ef:b9:e4:e1:df:86:dd:
                    ea:31:f7:cf:6f:2b:8d:bf:60:0d:29:1d:39:a4:51:
                    0e:b9:cb:7d:23:f2:76:6c:5e:6d:8e:51:6c:a1:74:
                    3a:9f:33:bc:5f:87:88:2d:58:5e:85:ef:e6:3d:53:
                    81:3b:4c:f6:73:51:e5:40:ae:dd:43:de:f4:47:1c:
                    05:d7:05:4d:cd:0b:4d:86:0f:0c:6c:cf:f5:55:9a:
                    f5:84:cd:bc:64:1c:9f:87:61:a1:4c:d1:ee:c8:5d:
                    b4:b4:6b:d0:d6:c3:40:58:10:cf:4f:06:76:90:7c:
                    ee:0f:dc:68:53:ff:8c:ba:d9:64:b0:83:ae:83:31:
                    75:59:f9:7b:70:22:8f:91:fa:3d:d1:7c:77:bc:0e:
                    1e:3a:d9:5c:f4:92:f7:39:a1:2c:38:17:9a:70:45:
                    e7:5c:74:1e:31:a7:31:37:80:8d:49:94:93:9e:2e:
                    6d:cd:bf:ad:04:4d:e2:eb:6b:e1:98:23:17:45:e7:
                    cb:39:7f:1e:9b:7f:44:c7:58:14:ca:93:90:d4:6f:
                    27:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E3:5C:12:0A:2C:EE:28:4B:C2:BF:B4:48:20:CB:CC:E7:13:42:6E
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/e-NcEgos7ihLwr-0SCDLzOcTQm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2146:bde0::/43

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:70:a8:7c:92:3a:0c:0f:b2:d5:6c:37:d4:83:d5:36:cb:
         ea:9b:80:37:17:a3:fb:86:55:3c:ea:5a:06:01:49:55:27:0e:
         3f:e1:eb:b7:8b:fc:79:08:d3:f0:30:b4:17:bf:78:a4:a1:2f:
         fe:03:58:60:9b:84:15:b8:39:0e:5c:28:22:85:2a:4f:39:e9:
         1b:f7:2d:e4:0a:a7:7d:62:d8:22:e5:47:d1:36:8e:29:8b:d1:
         9b:bc:3a:a9:cd:84:12:e0:96:bd:c5:17:4c:3c:ad:8b:08:76:
         0e:00:74:b9:d8:3a:ab:bb:0c:89:24:3d:1e:cb:d9:25:3e:7e:
         15:af:42:eb:1e:cb:34:fa:71:71:19:11:52:97:50:9c:2d:24:
         1c:18:86:8b:0c:e0:cc:62:f0:1f:b8:f3:8c:e1:b8:7a:c4:60:
         7b:14:c5:04:44:69:24:79:e0:16:fc:66:67:79:94:fd:91:82:
         39:1e:c9:95:37:36:97:22:b5:ab:36:da:f3:00:e4:10:12:71:
         a3:60:6a:24:a5:67:13:d1:34:45:01:08:8a:57:2e:1d:97:b6:
         fc:27:ed:fa:28:97:fa:01:92:d6:95:38:f0:d4:d6:8a:36:65:
         c2:ed:e7:e4:9c:c6:41:e5:51:44:db:e7:92:d6:05:ef:c1:29:
         17:6c:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----