Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/5QnARHRDUHW4-K1-cBQM9gWtQws.roa
File:                     5QnARHRDUHW4-K1-cBQM9gWtQws.roa (raw, json)
Hash identifier:          nwoEo0UgHD810OOXKIgVpixYyMf8treKdI5awrduzvM=
Subject key identifier:   E5:09:C0:44:74:43:50:75:B8:F8:AD:7E:70:14:0C:F6:05:AD:43:0B
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       01907D0A80447010716AB75B41D4E42C6511
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/5QnARHRDUHW4-K1-cBQM9gWtQws.roa
Signing time:             Thu 04 Jul 2024 09:19:18 +0000
ROA not before:           Thu 04 Jul 2024 09:19:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9098
IP address blocks:        2a0f:b4c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7d:0a:80:44:70:10:71:6a:b7:5b:41:d4:e4:2c:65:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Jul  4 09:19:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e509c04474435075b8f8ad7e70140cf605ad430b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:61:4b:59:1b:ee:cd:2c:5a:00:43:e5:a3:
                    aa:f5:56:6f:41:07:6d:ec:d6:98:44:84:83:1b:99:
                    29:1a:13:8c:d7:67:a8:3b:06:f0:fc:f0:46:85:6f:
                    31:d3:84:05:6a:d0:0e:f2:62:ab:b3:b3:21:d2:17:
                    59:58:2b:a2:77:bd:c5:4f:fb:2a:c5:34:6c:a7:ab:
                    15:cb:a2:68:2d:c3:62:52:71:be:3c:a3:5a:62:a1:
                    93:af:0c:a2:4f:88:8b:11:ca:9c:64:00:f7:13:83:
                    04:54:51:33:ed:7f:5d:b9:72:81:fb:22:0a:39:21:
                    77:d8:24:df:ba:71:c7:b4:77:e8:bf:f5:03:f8:b5:
                    0a:ae:b3:86:b7:30:4b:f5:47:6d:71:0e:c9:6a:b6:
                    5c:c7:2c:de:c2:43:a1:84:24:30:24:44:87:30:7a:
                    e5:5f:d5:30:b0:49:2f:4f:07:38:63:57:b1:b8:a4:
                    60:b6:79:d8:3c:ed:b7:a6:36:9e:6d:94:b9:18:67:
                    ce:52:a0:a9:c9:c7:f2:8a:90:be:aa:0d:d8:f0:7f:
                    1d:b3:2b:cd:05:64:ce:87:90:22:94:3c:99:a9:d6:
                    b8:e1:cd:6f:b6:41:f6:2a:c4:93:6a:d8:0e:fe:0e:
                    35:ab:73:00:c8:c4:1b:5c:a4:af:bc:ab:af:e4:f5:
                    76:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:09:C0:44:74:43:50:75:B8:F8:AD:7E:70:14:0C:F6:05:AD:43:0B
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/5QnARHRDUHW4-K1-cBQM9gWtQws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:19:15:30:2b:a7:b9:ce:e8:e1:1e:a1:88:f9:2a:5f:58:d2:
         1d:b3:73:23:4b:81:77:45:dc:bd:c3:1b:d5:a9:ae:a3:85:f6:
         67:a7:c5:1d:25:74:94:1f:21:f1:96:96:2e:4e:65:13:f5:71:
         bc:4f:a7:6f:6b:7c:59:7e:64:23:7a:3c:84:df:67:0f:5a:e3:
         63:81:93:f9:7d:7a:95:24:5d:7b:99:98:a0:20:3b:1b:1b:9d:
         79:88:a5:20:6f:e9:c0:0c:8e:a6:ac:65:14:b3:b1:6f:be:bc:
         fe:b8:d8:18:01:c6:0b:6b:4c:1e:df:fa:12:e7:8f:77:14:de:
         4f:af:10:9f:8e:0f:23:b8:b6:16:d5:d6:51:2c:ea:d9:6d:02:
         32:ce:b7:26:74:d0:bb:3b:12:f0:95:50:dd:ed:3c:6f:62:7d:
         65:8c:10:88:3d:33:51:74:f4:b3:8a:7f:e0:a4:14:2c:36:a9:
         0e:4e:bd:07:01:a2:d8:d2:b5:1d:94:67:32:22:23:a7:59:cc:
         99:fe:b0:87:d7:0e:56:b9:0d:7a:e9:aa:a5:6a:82:7c:a7:2a:
         83:7c:7e:60:1c:aa:c6:41:31:d0:ee:ae:5d:a5:09:f8:c4:98:
         8b:7e:2b:37:b4:50:85:61:43:54:69:57:f8:62:f5:00:05:83:
         4d:bf:0a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----