Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/s-usT-8VevaioVzOk8uvBM0G9y4.roa
File:                     s-usT-8VevaioVzOk8uvBM0G9y4.roa (raw, json)
Hash identifier:          DX8oRqiRDxB3TwDSlxkrVMg8GFG0124MH1prpHTNz8A=
Subject key identifier:   B3:EB:AC:4F:EF:15:7A:F6:A2:A1:5C:CE:93:CB:AF:04:CD:06:F7:2E
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       0190C55D75799BF626B211B97CEE422421DC
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/s-usT-8VevaioVzOk8uvBM0G9y4.roa
Signing time:             Thu 18 Jul 2024 10:22:34 +0000
ROA not before:           Thu 18 Jul 2024 10:22:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215649
IP address blocks:        2a07:2483::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c5:5d:75:79:9b:f6:26:b2:11:b9:7c:ee:42:24:21:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Jul 18 10:22:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b3ebac4fef157af6a2a15cce93cbaf04cd06f72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:c3:97:8d:69:da:43:2e:55:a3:4e:0e:aa:
                    b8:a4:35:8e:ae:fb:8f:69:22:41:20:c7:2b:22:78:
                    73:c0:73:2f:89:02:e4:50:95:07:d9:91:b8:f9:16:
                    8d:b9:da:f0:0e:f5:a6:9d:b2:69:bb:71:a7:db:35:
                    15:80:56:1c:86:4a:79:75:87:74:47:8b:d4:ab:0d:
                    77:7d:2c:ee:09:26:78:6f:1a:8a:52:ba:14:9f:23:
                    e4:e4:e3:17:0a:d4:d9:6c:02:8c:25:4b:bd:cc:7a:
                    2a:de:42:73:1b:eb:2b:d4:78:ea:c0:a3:97:30:8d:
                    3a:56:47:de:a7:da:f8:62:8c:07:0b:f4:36:24:fc:
                    91:b3:45:55:d0:f8:c7:24:ce:b7:d3:c3:a4:e9:e9:
                    95:c1:64:f4:63:b0:f5:4d:eb:ab:55:14:eb:7c:03:
                    1b:ff:11:0f:b6:49:21:51:9d:a6:e6:5b:02:85:18:
                    e9:e4:3f:80:5b:09:9d:dc:c7:79:c8:c4:1a:00:0e:
                    37:13:89:d7:8a:57:3f:27:18:d1:b6:b5:b7:25:8a:
                    3b:34:a3:61:61:ce:5f:6d:f4:4c:5b:88:dc:c0:23:
                    91:7b:27:ef:d7:90:a2:21:39:84:8d:60:b4:53:36:
                    0a:fc:06:bd:53:75:1b:b4:fd:c6:cd:bd:9c:e0:c2:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EB:AC:4F:EF:15:7A:F6:A2:A1:5C:CE:93:CB:AF:04:CD:06:F7:2E
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/s-usT-8VevaioVzOk8uvBM0G9y4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:2483::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:87:ca:27:77:b6:c5:39:02:aa:9c:24:86:21:1d:71:b5:b6:
         61:9b:42:d3:60:cd:45:e3:e9:53:c2:67:d0:66:7a:68:90:f2:
         6d:13:5c:2e:59:3d:cc:58:01:bf:d0:73:2f:3b:f5:55:44:61:
         70:f0:39:00:dc:8a:ad:9c:bf:0f:ce:c1:4b:81:87:18:dc:96:
         6b:f9:54:25:67:9f:7d:4d:1a:98:c8:34:02:81:e2:06:3f:07:
         30:2d:1c:f1:7e:a2:59:ad:e1:41:4f:0f:96:f7:b7:61:f1:1a:
         44:b4:90:56:7b:cd:ef:30:82:3f:32:19:37:28:3e:f2:b6:7f:
         e5:db:45:c4:1f:58:9d:b9:b6:96:2b:c4:02:56:b2:c9:f4:7f:
         65:3f:c1:5a:19:7e:95:ee:b3:66:40:61:3c:0f:24:6f:74:79:
         e8:b8:53:67:ec:55:82:13:46:91:b8:65:1e:76:42:ad:8b:db:
         da:11:72:c3:38:e5:03:bf:e2:73:96:b8:b4:eb:59:c7:3a:2e:
         d4:8a:b5:b1:85:93:17:ec:06:22:3c:17:4c:4e:fb:21:50:22:
         f3:79:f3:ec:a2:74:aa:6d:c9:be:81:9a:f4:67:d4:ee:9f:11:
         60:95:8d:06:a3:83:72:1b:55:cf:bc:21:a8:46:45:8d:d5:b7:
         26:9c:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----