Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/VP1WhwbBlOVusKe895eSrmMT59M.roa
File:                     VP1WhwbBlOVusKe895eSrmMT59M.roa (raw, json)
Hash identifier:          xtiYG6MINgcFzPCNh0uwAp/NIJexbXt5a97xvhNpYnM=
Subject key identifier:   54:FD:56:87:06:C1:94:E5:6E:B0:A7:BC:F7:97:92:AE:63:13:E7:D3
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       018CC86EF0AC633E3DAC909418B37F9776CA
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/VP1WhwbBlOVusKe895eSrmMT59M.roa
Signing time:             Tue 02 Jan 2024 04:29:22 +0000
ROA not before:           Tue 02 Jan 2024 04:29:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204677
IP address blocks:        2a13:2200::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6e:f0:ac:63:3e:3d:ac:90:94:18:b3:7f:97:76:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Jan  2 04:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=54fd568706c194e56eb0a7bcf79792ae6313e7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:ff:bb:12:5c:19:e5:da:e1:31:ec:c4:0f:
                    ff:0f:69:32:54:12:33:de:d0:67:1e:4c:f3:de:bb:
                    b6:1e:5f:16:25:b0:5b:7c:ed:1c:50:59:a2:bd:66:
                    b7:93:c2:39:4d:f8:72:8e:92:ee:37:b0:aa:b9:0b:
                    5a:09:b6:a3:74:e4:0b:f9:43:b7:60:64:bf:96:cf:
                    ed:18:77:30:30:68:ac:88:a1:62:3a:a3:19:8b:6c:
                    17:40:a6:95:d1:23:6e:cb:50:71:13:fc:23:25:07:
                    50:b9:a5:da:c9:74:e9:6a:84:b3:db:e8:9f:0b:71:
                    49:39:f7:a5:39:db:d1:e0:a4:9b:db:3a:7d:cd:47:
                    04:9f:5d:fc:dd:7b:fc:49:94:1d:91:82:b3:1d:b4:
                    fa:57:f4:4f:60:1e:61:85:42:28:ff:d1:f3:2c:07:
                    bd:3e:d5:3d:29:31:36:e6:11:9e:e1:06:e6:bf:bb:
                    f1:66:54:f3:97:6e:15:4e:ec:c8:11:5b:5e:14:ab:
                    0b:6f:56:9a:77:2f:3c:82:5c:79:90:4c:8e:b7:d2:
                    3a:36:4d:90:ba:2e:fb:92:45:ee:c3:af:4c:7f:25:
                    d1:d9:3b:35:c9:03:8d:c8:a3:a1:28:50:19:c9:f2:
                    54:c6:3c:46:45:d4:04:f8:d3:59:8b:9a:bc:93:13:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FD:56:87:06:C1:94:E5:6E:B0:A7:BC:F7:97:92:AE:63:13:E7:D3
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/VP1WhwbBlOVusKe895eSrmMT59M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:2200::/29

    Signature Algorithm: sha256WithRSAEncryption
         8c:80:c8:a1:4d:01:f8:cd:cf:e2:89:2e:81:d8:66:bb:34:de:
         35:6a:cb:40:53:53:1f:69:8a:29:f6:e7:0b:2f:72:42:6d:98:
         d7:41:3e:2c:81:33:f9:a9:1f:05:fb:1e:04:df:4d:c3:d9:19:
         30:e6:b4:c0:49:9c:63:42:8a:79:a9:69:77:00:6e:dd:eb:f8:
         f0:15:78:14:9f:7f:f0:8c:a3:b0:44:ea:7e:b0:ee:8f:08:81:
         ec:fb:41:d1:10:41:bb:20:c1:e0:de:85:50:56:70:34:e0:33:
         a1:80:83:57:9d:dd:ae:a1:b9:6c:e4:fb:d8:ff:be:a3:88:4a:
         cf:60:0d:fd:69:99:aa:a0:b5:52:cc:f1:be:72:46:b6:c2:88:
         4c:13:91:a2:84:18:5b:28:8c:9a:40:32:c5:e5:a5:7a:13:e8:
         33:89:03:64:8c:4d:8b:92:46:22:73:cd:83:87:23:9d:5c:0e:
         ee:cd:ca:f1:fc:81:3d:83:b8:c8:77:fe:81:ec:c3:9d:33:e1:
         9f:c7:82:f4:da:9c:6b:ec:61:03:00:61:9f:7b:36:f2:ad:42:
         ba:6d:2f:30:8e:c1:cc:88:d2:b7:f4:8c:64:2f:75:5c:af:69:
         ac:46:c6:1e:3f:da:f9:3b:83:b5:ca:da:96:fa:63:48:8a:13:
         5c:80:b1:3b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzIbvCsYz49rJCUGLN/l3bKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5
N2M2MDYwHhcNMjQwMTAyMDQyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGZkNTY4NzA2YzE5NGU1NmViMGE3YmNmNzk3OTJhZTYzMTNlN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ3/uxJcGeXa4THsxA//D2kyVBIz
3tBnHkzz3ru2Hl8WJbBbfO0cUFmivWa3k8I5TfhyjpLuN7CquQtaCbajdOQL+UO3
YGS/ls/tGHcwMGisiKFiOqMZi2wXQKaV0SNuy1BxE/wjJQdQuaXayXTpaoSz2+if
C3FJOfelOdvR4KSb2zp9zUcEn1383Xv8SZQdkYKzHbT6V/RPYB5hhUIo/9HzLAe9
PtU9KTE25hGe4Qbmv7vxZlTzl24VTuzIEVteFKsLb1aady88glx5kEyOt9I6Nk2Q
ui77kkXuw69MfyXR2Ts1yQONyKOhKFAZyfJUxjxGRdQE+NNZi5q8kxN1sQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFT9VocGwZTlbrCnvPeXkq5jE+fTMB8GA1UdIwQY
MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt
YjgyOWNjNDAxMDMxLzEvVlAxV2h3YkJsT1Z1c0tlODk1ZVNybU1UNTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx
LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhMiADAN
BgkqhkiG9w0BAQsFAAOCAQEAjIDIoU0B+M3P4okugdhmuzTeNWrLQFNTH2mKKfbn
Cy9yQm2Y10E+LIEz+akfBfseBN9Nw9kZMOa0wEmcY0KKealpdwBu3ev48BV4FJ9/
8IyjsETqfrDujwiB7PtB0RBBuyDB4N6FUFZwNOAzoYCDV53drqG5bOT72P++o4hK
z2AN/WmZqqC1UszxvnJGtsKITBORooQYWyiMmkAyxeWlehPoM4kDZIxNi5JGInPN
g4cjnVwO7s3K8fyBPYO4yHf+gezDnTPhn8eC9Nqca+xhAwBhn3s28q1Cum0vMI7B
zIjSt/SMZC91XK9prEbGHj/a+TuDtcralvpjSIoTXICxOw==
-----END CERTIFICATE-----