Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GbxA14lYmUG4J6xZGG75AMp0ekw.roa
File:                     GbxA14lYmUG4J6xZGG75AMp0ekw.roa (raw, json)
Hash identifier:          365MYXNbYd4z/6NmX04ktDi5dNZVE8FnSBeAj6k+KK8=
Subject key identifier:   19:BC:40:D7:89:58:99:41:B8:27:AC:59:18:6E:F9:00:CA:74:7A:4C
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       018CC26D464D9F9E09041BDEC114B010F228
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GbxA14lYmUG4J6xZGG75AMp0ekw.roa
Signing time:             Mon 01 Jan 2024 00:29:50 +0000
ROA not before:           Mon 01 Jan 2024 00:29:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215848
IP address blocks:        2a0e:aa07:e160::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:46:4d:9f:9e:09:04:1b:de:c1:14:b0:10:f2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 00:29:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=19bc40d789589941b827ac59186ef900ca747a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:7e:55:35:f5:27:8c:f4:61:50:26:15:fa:
                    51:0b:db:0a:7a:a9:25:82:fb:bc:ff:16:38:3c:dc:
                    73:0b:6b:cd:d6:81:32:b9:ff:34:df:c8:1e:30:c9:
                    db:29:c9:2a:74:ed:97:99:bf:fa:df:86:1c:ab:fc:
                    6c:19:6f:ac:46:ce:3d:29:39:19:e8:cd:c0:c4:dc:
                    dc:a8:44:ca:c7:39:50:63:76:2e:1c:3f:ed:d1:1d:
                    d5:5b:f7:7f:4e:b4:ef:b2:8e:c4:e3:fd:03:54:a1:
                    87:93:60:7c:07:5e:a2:bd:db:03:c1:43:a4:25:86:
                    a3:60:33:d6:29:53:2c:93:4f:d0:b7:e7:0a:39:55:
                    00:46:c8:86:6d:84:9b:d1:0d:a8:73:c3:9c:32:dd:
                    e3:ed:33:3f:f9:73:59:35:87:c5:dd:fc:f5:07:ae:
                    25:60:2f:da:02:1a:ce:6e:85:4a:73:ae:13:88:3c:
                    b3:01:46:56:68:22:7e:63:99:8b:42:a4:af:13:80:
                    32:03:ac:00:c1:79:05:e4:da:87:c9:62:a8:56:ae:
                    c5:5b:a9:85:86:5b:54:f9:83:c4:b4:13:99:1e:50:
                    f6:fd:8d:1c:00:0a:50:df:ba:86:96:87:2b:88:52:
                    40:8c:19:3c:49:10:37:4c:d0:ee:0d:14:82:57:89:
                    27:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BC:40:D7:89:58:99:41:B8:27:AC:59:18:6E:F9:00:CA:74:7A:4C
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/GbxA14lYmUG4J6xZGG75AMp0ekw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e160::/44

    Signature Algorithm: sha256WithRSAEncryption
         26:48:dd:0a:02:76:0e:3b:00:f1:fa:0d:95:cd:06:99:58:d8:
         77:ec:a9:1b:43:14:b4:a3:c8:5e:a2:53:12:11:fe:f9:84:40:
         90:46:b6:7c:1e:fb:56:77:8c:08:99:07:74:20:90:d0:a2:7a:
         e3:2f:ee:a5:e8:57:f3:dc:68:d8:2f:38:f7:08:06:5a:bc:23:
         b3:05:b9:a2:47:1b:e9:8f:79:52:e8:d6:3b:84:2e:16:cf:7a:
         48:1f:8b:1d:e0:44:b2:e5:10:eb:9c:65:9f:c3:83:96:4c:e5:
         2c:48:2f:9d:2c:ee:76:5b:c5:6a:c6:9e:bd:01:d4:83:27:05:
         b3:5e:64:81:66:63:00:f0:1f:e0:db:f3:87:e1:b9:6d:70:33:
         24:93:18:e1:bd:19:7f:27:cd:92:4c:a8:92:38:11:7e:89:53:
         50:60:4a:40:4d:41:8a:1e:d9:f0:07:75:05:26:fa:4c:3b:6e:
         8b:99:51:30:e9:9c:91:12:69:da:b7:b7:22:e3:55:a3:a7:bf:
         9b:98:6c:76:0c:73:b5:3c:40:de:be:6d:15:74:d8:a9:b7:83:
         27:24:d1:14:57:01:a6:1e:46:40:2f:1d:49:94:13:90:75:5d:
         48:6a:8f:a6:d3:d0:9d:13:d5:65:3e:3b:d0:41:21:0e:71:26:
         a5:c2:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----