Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/gFWm_XkQrIjtuG13PnTDXgHfdPw.roa
File:                     gFWm_XkQrIjtuG13PnTDXgHfdPw.roa (raw, json)
Hash identifier:          4wHplxzLIfem/nJiGIlG30CrE0NLporouS9jjgl7Lco=
Subject key identifier:   80:55:A6:FD:79:10:AC:88:ED:B8:6D:77:3E:74:C3:5E:01:DF:74:FC
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       018CC4936BE176342FF4479D517AD64166D5
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/gFWm_XkQrIjtuG13PnTDXgHfdPw.roa
Signing time:             Mon 01 Jan 2024 10:30:44 +0000
ROA not before:           Mon 01 Jan 2024 10:30:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        2a0d:2146:848a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:6b:e1:76:34:2f:f4:47:9d:51:7a:d6:41:66:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jan  1 10:30:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8055a6fd7910ac88edb86d773e74c35e01df74fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:9e:a0:de:c8:17:7a:df:e2:a5:60:2d:d8:
                    ed:be:71:af:a6:9d:96:c4:f2:1b:86:aa:29:1d:29:
                    de:b4:93:bf:17:6f:b6:c7:12:c6:68:8d:e2:8c:4b:
                    6b:14:cc:17:0a:c4:cd:84:26:f4:77:c2:84:98:99:
                    93:c1:47:ca:c4:61:1c:3e:a6:61:3c:6b:f8:9e:26:
                    21:65:a2:78:6c:c4:ad:20:62:ef:83:9d:9c:ad:dd:
                    19:3c:97:e1:0f:83:df:46:57:25:35:e2:07:0c:2d:
                    29:fa:8c:33:19:98:21:e6:cc:de:a3:ad:cf:50:1c:
                    ad:eb:52:4d:96:bf:f1:0b:fc:8c:b7:7c:c0:49:eb:
                    8e:90:bf:6c:58:5e:f7:c9:ea:9c:01:a9:2c:51:ce:
                    6c:82:81:1f:4b:6e:fb:07:24:ef:a7:cb:5f:59:1a:
                    08:ba:48:c0:0c:60:54:a3:e8:3a:c7:e9:ec:f7:28:
                    d2:da:62:52:fa:99:fe:ff:77:27:c6:d2:d4:22:34:
                    0d:81:61:20:f2:96:4e:59:08:b0:47:cc:bb:60:28:
                    06:5f:3a:cb:96:d2:f8:3d:79:c5:c9:19:48:17:91:
                    bb:2b:75:07:b8:9a:f9:ad:37:ea:25:b7:31:11:cb:
                    00:21:1e:76:7c:b7:11:c2:27:63:dd:fb:31:2b:20:
                    40:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:55:A6:FD:79:10:AC:88:ED:B8:6D:77:3E:74:C3:5E:01:DF:74:FC
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/gFWm_XkQrIjtuG13PnTDXgHfdPw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2146:848a::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:0f:1c:8c:d7:60:04:e9:b1:cd:1b:61:b8:bd:54:bf:d4:b6:
         6e:81:4e:5b:b4:0b:a4:5e:a3:e4:b2:5c:7b:1f:23:f0:82:6f:
         b8:dc:c4:2c:d1:b7:21:1e:15:e8:2a:0d:45:c0:eb:56:74:ca:
         74:8c:41:4b:f0:85:63:2c:bb:b6:3b:fe:67:cf:bd:fd:5d:5d:
         0a:fb:3d:5e:49:cd:d5:5e:62:0c:f9:d1:5b:b9:69:78:ba:b3:
         0b:41:c9:d2:2a:e3:e2:b1:66:04:41:43:5a:16:a7:35:3b:0a:
         b8:50:84:8c:ed:ea:c4:08:d8:1e:61:47:7d:6c:2f:f2:9f:e5:
         81:a7:bc:f1:c3:da:4b:3d:98:7e:9f:db:a9:c7:ff:e4:e5:db:
         fd:37:b2:4e:70:40:d4:73:fe:c7:42:f5:43:3d:80:a5:6e:82:
         63:38:eb:f9:74:b3:2a:3a:6e:6f:a0:c2:3d:71:96:c5:a0:70:
         c3:cc:46:0e:b0:cc:7d:82:f4:7f:34:9c:6b:63:ce:dc:62:b1:
         08:bc:e9:45:ac:8f:73:c1:2b:85:cd:e4:a6:47:0b:4c:e7:40:
         a3:4c:96:b7:53:31:35:ff:78:62:9a:22:bd:86:1f:83:11:85:
         30:f0:ea:02:9d:25:e8:ad:a9:71:36:81:e1:89:f6:58:4c:d3:
         3f:81:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----