Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1-dnQ4456xVAkg-_iaN_HzfxfmOY.roa
File:                     1-dnQ4456xVAkg-_iaN_HzfxfmOY.roa (raw, json)
Hash identifier:          +qbwYVJdu/904q480GhdikgzEVZ2ZfLTUpE0EmoAgbM=
Subject key identifier:   F9:D9:D0:E3:8E:7A:C5:50:24:83:EF:E2:68:DF:C7:CD:FC:5F:98:E6
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       018F116A46F9CC4CA5263318C719AA32C0BE
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1-dnQ4456xVAkg-_iaN_HzfxfmOY.roa
Signing time:             Wed 24 Apr 2024 18:42:08 +0000
ROA not before:           Wed 24 Apr 2024 18:42:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57304
IP address blocks:        2a0e:5380::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:11:6a:46:f9:cc:4c:a5:26:33:18:c7:19:aa:32:c0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Apr 24 18:42:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f9d9d0e38e7ac5502483efe268dfc7cdfc5f98e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:c7:f5:32:ed:50:06:41:06:0c:fb:84:1b:
                    7d:85:ef:b3:95:90:e8:09:07:fa:cc:e2:63:9a:b9:
                    d5:4e:84:6e:29:61:69:f9:2d:24:41:86:1f:99:b1:
                    93:04:72:0c:fc:16:66:f9:71:1c:85:d8:0b:a8:1d:
                    f7:d2:b7:46:eb:c1:4a:0c:da:e8:2c:85:42:da:c3:
                    26:05:4f:7f:b9:c2:21:a3:b3:24:31:13:3d:ac:e9:
                    2b:46:36:08:7f:ff:3d:f8:ed:9e:a4:11:51:82:3f:
                    44:93:94:c1:0c:0d:cb:34:ba:de:9b:0b:88:e8:e1:
                    44:f8:d9:c1:3d:00:de:b0:f6:27:02:77:77:50:ce:
                    8d:b7:04:9a:0a:11:8f:c9:05:a0:b4:ff:8a:ee:f8:
                    f4:7c:71:e1:0e:55:c0:d5:bc:d6:b7:6d:b1:51:89:
                    03:a4:aa:a4:91:7e:29:b3:43:a3:75:12:38:cf:03:
                    02:5b:df:bb:85:69:28:03:47:22:39:3c:58:a2:1e:
                    0b:b3:be:f2:0b:f0:21:e9:62:a3:78:de:08:25:22:
                    73:17:45:cc:66:94:c9:dd:e4:13:57:44:eb:5f:b4:
                    24:a2:b7:9d:d6:85:95:59:4f:03:24:36:e8:94:47:
                    5a:50:75:6a:50:c9:e4:74:5b:ee:06:ca:63:75:10:
                    9c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:D0:E3:8E:7A:C5:50:24:83:EF:E2:68:DF:C7:CD:FC:5F:98:E6
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/1-dnQ4456xVAkg-_iaN_HzfxfmOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:5380::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:f1:60:bc:5f:80:63:e0:ca:1a:e0:d1:34:72:28:ec:79:05:
         b6:b7:e3:7c:f6:c4:27:2b:cc:93:a7:ec:f5:a9:ef:4a:60:ce:
         94:a9:05:09:32:d6:32:ac:6d:8f:66:b3:d5:eb:ed:64:7d:a7:
         46:d0:d4:bd:da:e0:c9:a2:ec:3c:d1:06:ab:74:de:32:89:d4:
         e8:47:29:2a:88:db:39:8c:9c:d7:0c:06:47:48:3f:93:e2:95:
         f5:99:04:37:8c:a3:82:65:2a:2f:f6:d9:68:b0:e2:39:5b:f2:
         11:b3:38:f3:b0:4f:e3:9a:f3:3e:af:0f:aa:81:e8:ac:64:5c:
         a7:02:76:93:15:45:85:f8:87:6a:92:fe:8b:a4:8f:4d:9d:19:
         55:6e:67:50:94:57:c0:5e:b7:98:75:c1:20:7d:3d:94:54:73:
         3d:3b:3e:fc:ba:99:65:6e:a9:9e:36:48:8c:e9:c2:6b:0a:c0:
         55:87:2e:ec:d3:cf:00:65:47:64:fe:7b:e8:90:91:48:03:fb:
         94:67:3a:3e:dc:f7:89:89:bf:1c:34:f5:14:8b:03:9b:8e:5b:
         f7:02:87:11:6d:d2:2c:f9:ee:e7:ce:d7:41:fe:20:49:46:51:
         ca:bd:22:03:47:72:3d:77:ec:30:91:bb:cb:39:df:2f:02:69:
         81:49:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----