Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/ErrscbMNLxaOjm8XZuKeZBXTNqs.roa
File:                     ErrscbMNLxaOjm8XZuKeZBXTNqs.roa (raw, json)
Hash identifier:          iVjrPp9i71oTmpDXCdDrKpCUmPTfWafQ89Xu7zYk8GI=
Subject key identifier:   12:BA:EC:71:B3:0D:2F:16:8E:8E:6F:17:66:E2:9E:64:15:D3:36:AB
Certificate issuer:       /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial:       018CC500F528D00B503FF0DB822548AB1D6B
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/ErrscbMNLxaOjm8XZuKeZBXTNqs.roa
Signing time:             Mon 01 Jan 2024 12:30:23 +0000
ROA not before:           Mon 01 Jan 2024 12:30:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13045
IP address blocks:        2001:678:9d4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:f5:28:d0:0b:50:3f:f0:db:82:25:48:ab:1d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
        Validity
            Not Before: Jan  1 12:30:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=12baec71b30d2f168e8e6f1766e29e6415d336ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1b:c1:1c:eb:64:46:7f:75:5d:91:1a:da:35:
                    ad:47:ca:43:4d:89:cc:18:0c:34:67:f3:a0:d6:74:
                    0b:89:5b:80:cf:70:69:f1:da:93:ac:52:ea:68:5c:
                    a6:e0:a0:5c:86:b4:aa:f4:9a:f1:d0:d5:4c:8e:b2:
                    47:2e:c7:0f:1c:fe:bd:a0:76:f0:65:38:d3:b6:95:
                    a4:49:ec:15:b8:9e:99:35:25:e0:62:c7:03:c4:5c:
                    50:e3:ce:fc:af:71:e7:4c:e1:91:68:5a:90:19:d5:
                    e0:af:04:71:7d:00:74:fb:5d:04:9c:fe:24:fc:18:
                    9b:f5:f2:3c:23:63:7f:22:43:1c:5b:41:eb:28:12:
                    74:5d:4a:f7:ca:1b:79:29:2f:8f:a8:1b:42:30:02:
                    a6:38:e4:e0:2c:54:b5:2a:97:c3:a1:09:cb:b7:e0:
                    99:b4:a7:dc:0a:f5:45:f5:06:00:d9:6e:88:f8:9d:
                    91:40:54:9f:10:cf:e1:34:ad:4a:94:a2:83:1b:cc:
                    36:a3:ed:e6:3c:0d:5a:62:a7:03:8c:c0:d8:c1:5a:
                    20:f1:fb:eb:11:59:fb:8c:88:25:47:b3:c5:0f:29:
                    92:21:67:fd:e5:53:ea:ed:33:d2:4b:2f:79:eb:fd:
                    c8:b3:3b:5e:44:66:a4:8a:b2:1f:6e:da:1a:81:6a:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BA:EC:71:B3:0D:2F:16:8E:8E:6F:17:66:E2:9E:64:15:D3:36:AB
            X509v3 Authority Key Identifier:
                keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/ErrscbMNLxaOjm8XZuKeZBXTNqs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:9d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:12:6c:bf:d2:20:7a:27:09:49:7c:74:6f:a0:9f:ca:cf:58:
         01:6b:e9:6e:85:45:f2:61:ea:76:30:b9:90:e9:36:73:c7:5a:
         c4:64:12:78:0f:13:96:3b:e4:c8:f4:6d:90:d9:fd:72:87:74:
         4f:0e:94:b0:ce:98:39:97:d3:c0:d3:00:74:ac:a0:00:70:2e:
         5c:07:a1:28:7a:19:56:cb:eb:56:da:5b:1c:09:a3:56:74:f5:
         18:b6:23:8f:c5:89:ad:43:82:a8:04:b2:2b:e5:3e:92:1e:72:
         e7:5d:df:00:3e:c8:a7:1c:1c:be:8d:4c:ca:7f:66:d3:b1:d8:
         9f:aa:26:58:7e:9d:2c:a9:95:81:13:2d:43:82:45:56:d8:44:
         de:55:65:71:82:79:1a:81:ae:6a:5d:2f:59:61:c4:5f:f3:32:
         b4:b0:89:77:c4:3f:49:57:12:a3:19:ee:6b:72:c7:b0:f5:eb:
         5c:7b:e2:c4:02:ae:e6:4c:f7:68:05:33:2d:36:28:fa:f4:cc:
         f3:6c:e5:a1:41:57:05:97:9e:b2:44:49:ef:e5:45:81:d3:09:
         ca:92:9c:02:a6:6f:d2:f0:20:17:c2:e8:d7:5a:60:27:f7:ec:
         69:4b:8c:5c:b1:91:e9:7c:a4:91:24:82:13:33:af:b8:66:f2:
         21:e7:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----