Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/zVSRtl3M-BUN9rLzv4udQo20uOY.roa
File:                     zVSRtl3M-BUN9rLzv4udQo20uOY.roa (raw, json)
Hash identifier:          nW8eZ2PRIx3zDV30UgDIZFnf/xjSp5ofccE6zlSSBgs=
Subject key identifier:   CD:54:91:B6:5D:CC:F8:15:0D:F6:B2:F3:BF:8B:9D:42:8D:B4:B8:E6
Certificate issuer:       /CN=1532415c319fad65875bd1aa035a55888ceb733e
Certificate serial:       018CC86F45A9569FCEC858C380E74DE5B32E
Authority key identifier: 15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/zVSRtl3M-BUN9rLzv4udQo20uOY.roa
Signing time:             Tue 02 Jan 2024 04:29:44 +0000
ROA not before:           Tue 02 Jan 2024 04:29:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207455
IP address blocks:        2001:678:c24::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:45:a9:56:9f:ce:c8:58:c3:80:e7:4d:e5:b3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1532415c319fad65875bd1aa035a55888ceb733e
        Validity
            Not Before: Jan  2 04:29:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cd5491b65dccf8150df6b2f3bf8b9d428db4b8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:b3:b4:68:e1:61:64:57:74:16:d8:b5:b4:
                    76:2b:af:09:7a:72:b4:9a:11:84:62:2d:bd:79:94:
                    7b:be:98:a8:85:da:09:72:21:ac:a6:93:55:9a:53:
                    f1:2a:43:0f:88:68:5b:47:b3:24:cc:ca:78:de:c2:
                    6c:d2:c7:77:90:49:9c:49:e7:ef:43:5b:ad:a2:81:
                    54:b4:16:86:87:b7:8f:d2:f8:11:9e:fe:ba:7d:b4:
                    48:c7:d2:08:05:93:3d:02:7f:72:ef:73:aa:e1:89:
                    c7:2a:68:7b:d8:f7:c7:6a:5e:3a:d0:86:e9:46:d1:
                    91:2e:13:49:c3:64:e6:db:4f:06:13:54:b7:98:26:
                    67:90:ce:cb:93:e8:e5:6f:7f:94:e4:2d:fb:d3:69:
                    bb:1d:be:73:d7:48:30:bd:af:40:cc:0e:04:e6:69:
                    57:14:b2:ae:6e:5b:e8:32:a0:1b:2f:4b:78:0b:de:
                    0f:53:2c:7b:6f:38:69:24:f1:6c:f5:96:f8:33:16:
                    28:d7:32:fb:e8:94:bd:2b:f1:c3:a7:fb:9b:d2:f5:
                    c1:35:89:47:4c:0d:22:39:c1:ec:31:3a:c5:9d:8d:
                    cb:aa:08:27:d8:80:6b:92:c5:51:d4:dc:d1:90:dc:
                    d7:ad:72:14:c0:19:83:a2:7e:1a:1c:f9:2c:05:17:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:91:B6:5D:CC:F8:15:0D:F6:B2:F3:BF:8B:9D:42:8D:B4:B8:E6
            X509v3 Authority Key Identifier:
                keyid:15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/zVSRtl3M-BUN9rLzv4udQo20uOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c24::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:4c:bc:1e:b9:e7:7f:79:bf:6e:d7:d8:10:e3:cc:39:08:
         4d:35:b1:d7:6d:5f:bc:7c:c3:5f:31:b4:ce:31:e3:fd:23:75:
         27:d2:61:1d:3e:1f:49:85:db:a9:94:c8:b5:8a:53:91:75:75:
         66:0a:ec:a9:ba:6c:f1:fe:0d:df:4a:db:90:e5:b7:65:10:6c:
         5f:ea:12:08:d2:90:00:96:78:95:e5:fe:ee:ae:91:3b:4a:89:
         57:5f:1a:85:1e:c3:3a:38:1b:6c:ec:6d:de:92:73:fe:a3:24:
         e7:60:a2:b5:5c:ef:69:10:3f:fc:82:e5:ff:59:94:21:fe:e2:
         0c:70:1d:62:7f:f3:28:c4:27:df:7d:41:ca:39:9f:e2:ce:79:
         d2:e0:8d:83:be:1a:50:be:62:a6:af:b8:09:d1:2b:10:30:1b:
         62:0a:2d:50:f8:8c:7c:33:25:f7:61:da:7d:70:e5:c9:94:a5:
         a6:98:e3:22:93:6b:0f:86:6d:80:c2:31:f6:28:9d:b9:79:25:
         a6:32:72:74:01:c1:8c:82:89:a1:fd:d9:4e:75:33:9c:d1:a3:
         94:c0:d2:37:25:9e:86:8f:3a:a2:8e:ed:a6:06:3c:b6:d6:d3:
         45:53:da:f9:e1:cd:01:46:dd:ea:b9:95:31:c1:28:7e:99:04:
         3b:b8:b4:83
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIb0WpVp/OyFjDgOdN5bMuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzI0MTVjMzE5ZmFkNjU4NzViZDFhYTAzNWE1NTg4OGNl
YjczM2UwHhcNMjQwMTAyMDQyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDU0OTFiNjVkY2NmODE1MGRmNmIyZjNiZjhiOWQ0MjhkYjRiOGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT+ztGjhYWRXdBbYtbR2K68JenK0
mhGEYi29eZR7vpiohdoJciGsppNVmlPxKkMPiGhbR7MkzMp43sJs0sd3kEmcSefv
Q1utooFUtBaGh7eP0vgRnv66fbRIx9IIBZM9An9y73Oq4YnHKmh72PfHal460Ibp
RtGRLhNJw2Tm208GE1S3mCZnkM7Lk+jlb3+U5C3702m7Hb5z10gwva9AzA4E5mlX
FLKublvoMqAbL0t4C94PUyx7bzhpJPFs9Zb4MxYo1zL76JS9K/HDp/ub0vXBNYlH
TA0iOcHsMTrFnY3Lqggn2IBrksVR1NzRkNzXrXIUwBmDon4aHPksBRdr2QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM1UkbZdzPgVDfay87+LnUKNtLjmMB8GA1UdIwQY
MBaAFBUyQVwxn61lh1vRqgNaVYiM63M+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRKQlhER2ZyV1dIVzlHcUExcFZpSXpyY3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjkt
MDE1Zjc2NjRiOWQ3LzEvelZTUnRsM00tQlVOOXJMenY0dWRRbzIwdU9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZDVkNDItZTg0My00NDExLTkwZjktMDE1Zjc2NjRiOWQ3
LzEvRlRKQlhER2ZyV1dIVzlHcUExcFZpSXpyY3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAwk
MA0GCSqGSIb3DQEBCwUAA4IBAQBNBky8Hrnnf3m/btfYEOPMOQhNNbHXbV+8fMNf
MbTOMeP9I3Un0mEdPh9JhduplMi1ilORdXVmCuypumzx/g3fStuQ5bdlEGxf6hII
0pAAlniV5f7urpE7SolXXxqFHsM6OBts7G3eknP+oyTnYKK1XO9pED/8guX/WZQh
/uIMcB1if/MoxCfffUHKOZ/iznnS4I2DvhpQvmKmr7gJ0SsQMBtiCi1Q+Ix8MyX3
Ydp9cOXJlKWmmOMik2sPhm2AwjH2KJ25eSWmMnJ0AcGMgomh/dlOdTOc0aOUwNI3
JZ6Gjzqiju2mBjy21tNFU9r54c0BRt3quZUxwSh+mQQ7uLSD
-----END CERTIFICATE-----