Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/DbPM_F7KPu7wB3CtYePsIl2TfSg.roa
File:                     DbPM_F7KPu7wB3CtYePsIl2TfSg.roa (raw, json)
Hash identifier:          M1mL7JlnnG0NzMFX5WFfYzIn1uv1snIgnBG7rrb+jvk=
Subject key identifier:   0D:B3:CC:FC:5E:CA:3E:EE:F0:07:70:AD:61:E3:EC:22:5D:93:7D:28
Certificate issuer:       /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial:       01913696E663B6B9915C3FB5CEF4FC463F27
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/DbPM_F7KPu7wB3CtYePsIl2TfSg.roa
Signing time:             Fri 09 Aug 2024 10:02:24 +0000
ROA not before:           Fri 09 Aug 2024 10:02:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214420
IP address blocks:        2a11:6501::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:27:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:36:96:e6:63:b6:b9:91:5c:3f:b5:ce:f4:fc:46:3f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
        Validity
            Not Before: Aug  9 10:02:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0db3ccfc5eca3eeef00770ad61e3ec225d937d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8a:53:e7:4e:91:00:4b:27:eb:88:5c:2e:b1:
                    cc:4e:8c:a5:f9:8c:3e:98:05:30:57:56:27:2c:e4:
                    7f:ae:f7:b3:d4:d4:fb:2b:a3:a7:d8:6a:3a:18:24:
                    a3:e3:f0:c6:79:83:f7:ff:5c:4f:c5:73:7c:2e:2f:
                    4b:73:e3:b3:eb:5a:55:46:c9:f2:9d:97:59:a8:c5:
                    3d:d8:16:fb:68:6f:91:06:19:e4:c9:30:68:06:6d:
                    08:52:b8:1b:dd:5f:0a:41:76:53:98:9a:01:d2:39:
                    6b:aa:2f:9c:9c:c8:4b:46:94:2f:13:90:89:5a:c7:
                    77:ec:23:b7:65:6b:20:66:da:1c:1f:cd:1a:6d:af:
                    43:3f:0e:d2:fe:e4:fe:c3:8a:62:bb:68:05:ec:fa:
                    d6:5c:2d:07:6a:21:81:1f:c5:36:31:a4:79:df:7d:
                    c0:fc:3e:b9:48:05:ce:77:33:16:ec:c9:20:ae:c8:
                    75:6f:e9:f2:84:f7:ef:78:3a:1e:91:a7:9c:ea:8f:
                    f7:68:25:1d:27:29:8b:0f:bc:8d:7f:69:99:56:4e:
                    61:98:44:be:72:a6:ea:ce:4f:54:a2:42:12:9b:03:
                    d2:28:aa:f6:54:85:2b:ad:9e:a8:c0:bf:d5:1f:0e:
                    e1:1d:3f:fc:4a:86:7f:02:4e:05:53:dc:8b:2c:dd:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:CC:FC:5E:CA:3E:EE:F0:07:70:AD:61:E3:EC:22:5D:93:7D:28
            X509v3 Authority Key Identifier:
                keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/DbPM_F7KPu7wB3CtYePsIl2TfSg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:6501::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:3a:53:76:3e:60:a2:f7:90:13:e0:45:06:85:1c:cf:78:2e:
         92:59:59:8c:1a:2a:aa:53:f8:17:56:cc:3f:74:9f:53:b7:90:
         31:e8:01:a0:cd:16:a0:f2:d6:6b:c5:ca:9d:49:68:70:98:59:
         a4:96:b1:76:d2:7d:3e:7c:05:2f:4c:dc:cf:ee:1e:c8:26:24:
         e1:13:92:90:bf:ca:34:c9:e0:33:82:66:8b:1e:8f:ed:0c:d7:
         46:c7:c1:ba:1c:5a:46:55:54:27:7a:3f:c6:ba:1a:d9:4c:bd:
         39:ea:f8:11:a0:7b:d0:d5:89:51:96:a9:ac:fd:66:64:a2:c2:
         37:0b:36:54:32:6f:48:38:48:a8:cb:9d:75:be:f6:89:f2:d4:
         b6:52:57:f5:00:8e:57:ef:e2:0f:5f:a3:02:7f:48:8d:f6:1c:
         7c:18:87:70:1a:f4:55:24:8a:e1:ea:c2:6e:f3:99:58:a2:4f:
         23:81:1b:d5:84:e6:89:f6:8e:f8:7c:97:45:7d:ed:d8:5d:6e:
         39:7b:25:d2:c7:eb:c2:92:04:05:6f:dd:f6:1a:a7:a0:11:3e:
         a3:e2:ab:5e:1e:e5:da:94:72:59:43:08:f8:27:ba:87:ad:39:
         2d:c4:ef:7c:9b:16:9e:cd:c9:8d:2b:c0:c8:d0:28:7b:b8:d3:
         88:b1:02:95
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZE2luZjtrmRXD+1zvT8Rj8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZjYxOWVmMjAwODQwZGZhOGZkNDM1NjdjN2E5NzhjMTUz
MTJkN2YwHhcNMjQwODA5MTAwMjI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGIzY2NmYzVlY2EzZWVlZjAwNzcwYWQ2MWUzZWMyMjVkOTM3ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIpT506RAEsn64hcLrHMToyl+Yw+
mAUwV1YnLOR/rvez1NT7K6On2Go6GCSj4/DGeYP3/1xPxXN8Li9Lc+Oz61pVRsny
nZdZqMU92Bb7aG+RBhnkyTBoBm0IUrgb3V8KQXZTmJoB0jlrqi+cnMhLRpQvE5CJ
Wsd37CO3ZWsgZtocH80aba9DPw7S/uT+w4piu2gF7PrWXC0HaiGBH8U2MaR5333A
/D65SAXOdzMW7Mkgrsh1b+nyhPfveDoekaec6o/3aCUdJymLD7yNf2mZVk5hmES+
cqbqzk9UokISmwPSKKr2VIUrrZ6owL/VHw7hHT/8SoZ/Ak4FU9yLLN2O8wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFA2zzPxeyj7u8AdwrWHj7CJdk30oMB8GA1UdIwQY
MBaAFLD2Ge8gCEDfqP1DVnx6l4wVMS1/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYt
MDY5NjYxNjc1MTA2LzEvRGJQTV9GN0tQdTd3QjNDdFllUHNJbDJUZlNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wZTE4ZDItZDgwYi00YWEwLWFhZWYtMDY5NjYxNjc1MTA2
LzEvc1BZWjd5QUlRTi1vX1VOV2ZIcVhqQlV4TFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhFlATAN
BgkqhkiG9w0BAQsFAAOCAQEATTpTdj5goveQE+BFBoUcz3gukllZjBoqqlP4F1bM
P3SfU7eQMegBoM0WoPLWa8XKnUlocJhZpJaxdtJ9PnwFL0zcz+4eyCYk4ROSkL/K
NMngM4Jmix6P7QzXRsfBuhxaRlVUJ3o/xroa2Uy9Oer4EaB70NWJUZaprP1mZKLC
Nws2VDJvSDhIqMuddb72ifLUtlJX9QCOV+/iD1+jAn9IjfYcfBiHcBr0VSSK4erC
bvOZWKJPI4Eb1YTmifaO+HyXRX3t2F1uOXsl0sfrwpIEBW/d9hqnoBE+o+KrXh7l
2pRyWUMI+Ce6h605LcTvfJsWns3JjSvAyNAoe7jTiLEClQ==
-----END CERTIFICATE-----