Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/HRvSqW1pqvGLFELIIDtZd6Vt9h0.roa
File:                     HRvSqW1pqvGLFELIIDtZd6Vt9h0.roa (raw, json)
Hash identifier:          Pjll13/49JhPpy+ia8gFIKeRP6Qq9pt8lKYeuI/7g/E=
Subject key identifier:   1D:1B:D2:A9:6D:69:AA:F1:8B:14:42:C8:20:3B:59:77:A5:6D:F6:1D
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       018CC26D25213981F63E3299C3EA7A0D6CB9
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/HRvSqW1pqvGLFELIIDtZd6Vt9h0.roa
Signing time:             Mon 01 Jan 2024 00:29:41 +0000
ROA not before:           Mon 01 Jan 2024 00:29:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60326
IP address blocks:        2a0e:aa07:f090::/44 maxlen: 48
                          2a0e:aa07:f080::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:25:21:39:81:f6:3e:32:99:c3:ea:7a:0d:6c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 00:29:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1d1bd2a96d69aaf18b1442c8203b5977a56df61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:3b:af:84:fb:c2:ef:5c:d4:04:3a:65:3d:
                    4e:44:fc:ed:18:42:8b:11:83:01:bc:f1:53:67:f1:
                    e1:5b:23:5e:c7:94:6a:4d:25:d6:29:70:63:3c:9e:
                    f3:85:fa:6c:28:85:0f:e7:83:56:46:2b:14:eb:d6:
                    1d:dc:e0:58:6d:22:0a:e4:b5:71:a2:aa:7d:65:ca:
                    c8:0d:7a:ab:4b:08:18:94:6f:b1:60:55:ff:ab:c0:
                    8f:c5:24:0c:7a:43:7d:07:df:7f:e4:7e:e3:fa:b8:
                    e2:0c:aa:2d:11:af:eb:00:0c:f0:a0:50:3d:43:16:
                    9b:83:f5:38:eb:60:70:33:9a:d6:cd:46:15:30:06:
                    fc:fa:53:7c:a4:3e:0a:b1:b0:90:ef:c6:78:06:fe:
                    f4:83:27:5b:17:31:78:9d:60:24:18:7c:1a:20:f8:
                    00:d3:2d:7d:9a:6c:93:27:0b:da:b3:94:b6:2e:ee:
                    b4:be:44:18:f3:88:36:2d:db:36:33:f9:f9:70:70:
                    4f:f5:e4:76:f5:b5:b5:a4:ab:39:18:94:71:9a:72:
                    99:b2:f4:b3:b2:35:07:b9:ca:b1:1d:4f:32:5c:5b:
                    7a:91:6b:df:91:73:84:08:dc:a9:55:58:78:34:f1:
                    5a:c6:61:da:d2:87:f3:f1:e6:50:c8:3b:44:4e:21:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1B:D2:A9:6D:69:AA:F1:8B:14:42:C8:20:3B:59:77:A5:6D:F6:1D
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/HRvSqW1pqvGLFELIIDtZd6Vt9h0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:f080::/43

    Signature Algorithm: sha256WithRSAEncryption
         0a:5a:f2:fb:9e:f8:10:26:9f:ff:78:ed:24:a3:f1:b1:db:c6:
         1f:f5:27:fc:18:37:de:67:08:b5:9b:7b:c0:d5:ea:61:0a:e0:
         0f:ee:3a:fb:b4:f1:97:5a:28:61:ba:93:a0:8e:d6:7d:b7:80:
         41:ae:73:1d:0f:c8:8c:09:c9:bb:4e:0a:e0:66:90:41:c0:fd:
         37:34:95:dd:39:72:ad:02:9f:09:e5:d3:66:64:3b:dc:a4:ef:
         a7:9f:24:98:74:dd:e4:93:41:ff:f9:bb:6a:7d:87:fd:d2:d1:
         19:8d:5b:78:65:cc:08:e7:d1:c5:4b:65:9c:1e:15:3b:13:23:
         07:0d:bc:ab:95:a2:8d:5e:a1:09:ce:d0:95:60:8b:df:69:79:
         b9:1d:5b:51:ab:0e:69:21:05:53:6c:4d:fb:0a:f2:3b:cd:cf:
         45:f3:7e:2d:2c:56:d6:20:fd:8c:3d:8f:d9:e1:55:da:80:af:
         9d:da:33:a0:73:b9:5d:c9:56:cb:92:5e:b4:67:38:66:83:3e:
         47:79:84:9b:30:fe:98:25:2f:1c:c9:65:41:d1:a8:2f:c8:1e:
         94:8f:ec:84:67:51:0b:29:ca:14:ca:b1:76:31:91:53:72:79:
         6d:2c:31:49:f5:ab:9f:82:87:94:1f:8b:dd:c1:8a:e4:cc:c8:
         93:f1:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----