Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/1-7v_CO99LlsGkRLKstc3AURDWiA.roa
File:                     1-7v_CO99LlsGkRLKstc3AURDWiA.roa (raw, json)
Hash identifier:          Skdl82qmh+SruBFLM4rMyGXAWRhVQMxkSNyLbiQln+E=
Subject key identifier:   FB:BB:FF:08:EF:7D:2E:5B:06:91:12:CA:B2:D7:37:01:44:43:5A:20
Certificate issuer:       /CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
Certificate serial:       018CC72740D96F65D81B09143C2C4AF5D24D
Authority key identifier: 2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/1-7v_CO99LlsGkRLKstc3AURDWiA.roa
Signing time:             Mon 01 Jan 2024 22:31:27 +0000
ROA not before:           Mon 01 Jan 2024 22:31:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199268
IP address blocks:        2001:67c:1328::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:40:d9:6f:65:d8:1b:09:14:3c:2c:4a:f5:d2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f8d8d0ceebccd75b606ba4968f5c7946e8d47c0
        Validity
            Not Before: Jan  1 22:31:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=fbbbff08ef7d2e5b069112cab2d7370144435a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:ba:20:64:c2:c6:f2:ee:04:f5:eb:1b:c2:
                    4f:7f:fc:6b:45:c9:5b:56:da:c6:62:c5:ad:fd:1a:
                    84:4f:62:2a:7f:11:03:13:40:22:53:dc:33:25:09:
                    61:eb:62:03:21:66:cd:35:f3:37:0e:60:b4:32:c0:
                    6a:47:4e:70:9f:9f:16:74:c5:37:24:a2:ed:d8:3c:
                    d9:93:98:7e:a4:b1:b7:51:15:df:52:c4:63:ee:d4:
                    b6:9a:8d:e0:7a:87:5c:d3:2c:f0:8e:90:82:70:64:
                    fa:51:3a:f0:9e:7e:6c:cb:19:39:60:c7:63:1a:8a:
                    ab:11:03:fc:c9:b5:79:bc:25:58:e0:ae:bd:5f:dd:
                    cd:a1:f1:c0:6c:8f:12:5e:e2:d4:15:b5:1a:70:b7:
                    a9:eb:43:ad:ce:38:f6:f7:d8:5e:38:28:99:4c:58:
                    0e:0e:9a:6d:5f:3e:2a:25:78:6c:d4:4d:ff:84:2e:
                    c7:4b:ff:8c:ad:4a:47:7e:86:50:7c:5b:56:b6:9f:
                    7b:11:51:56:03:52:75:83:78:b4:16:8c:92:37:e7:
                    6f:40:85:7c:9b:56:fd:a1:89:b4:d5:f7:27:d9:83:
                    97:86:4e:a9:e7:b6:3c:10:a2:ca:9b:9e:a9:9e:e9:
                    42:fc:32:fb:bf:aa:aa:b2:11:b8:42:b8:9b:0b:e8:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BB:FF:08:EF:7D:2E:5B:06:91:12:CA:B2:D7:37:01:44:43:5A:20
            X509v3 Authority Key Identifier:
                keyid:2F:8D:8D:0C:EE:BC:CD:75:B6:06:BA:49:68:F5:C7:94:6E:8D:47:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L42NDO68zXW2BrpJaPXHlG6NR8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/1-7v_CO99LlsGkRLKstc3AURDWiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f3bbd-4a61-42c5-8b07-3cbd5257b03e/1/L42NDO68zXW2BrpJaPXHlG6NR8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1328::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:1d:01:8b:b2:1c:08:c5:c2:dd:93:79:8d:61:aa:8b:74:9b:
         53:1c:a7:ca:ff:9a:f3:a9:d6:75:dd:d7:1c:d0:b7:10:06:a9:
         7b:5d:f0:82:91:83:cb:81:da:61:a5:ab:ab:e2:e0:f1:bf:cc:
         22:89:15:35:c3:9a:ab:a7:a7:97:bc:e2:32:90:98:08:e9:4f:
         ad:2e:80:39:4a:e2:98:e6:d3:16:0e:00:b8:19:75:9f:05:f6:
         9a:75:30:9a:f7:9c:6e:91:2b:11:2f:d0:19:ec:68:82:e0:76:
         89:2b:c4:7e:4b:17:f8:b4:78:df:5a:8f:a3:37:da:43:3e:5e:
         a8:98:37:cd:a3:c4:b0:35:d9:5c:f8:03:80:ff:a4:fc:3f:cf:
         5a:5d:88:e7:85:c5:e2:a5:2c:80:45:79:50:ad:67:e6:43:ad:
         a6:8b:cd:3a:ae:93:e3:e8:6f:1e:56:2a:e1:0b:e0:39:96:71:
         f1:2b:d5:87:37:b8:a6:2f:14:d5:d7:9b:36:75:d1:4c:8d:5e:
         c6:36:0b:77:d0:f0:62:88:22:90:25:88:b1:64:09:7b:cc:b2:
         79:25:be:13:fc:25:98:72:41:2a:9a:36:6f:d7:75:f7:00:10:
         bd:4f:1d:3e:7b:6b:1c:8c:bf:98:7c:ba:a7:2b:5c:b7:66:0b:
         ba:9c:26:e3
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYzHJ0DZb2XYGwkUPCxK9dJNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOGQ4ZDBjZWViY2NkNzViNjA2YmE0OTY4ZjVjNzk0NmU4
ZDQ3YzAwHhcNMjQwMTAxMjIzMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmJiZmYwOGVmN2QyZTViMDY5MTEyY2FiMmQ3MzcwMTQ0NDM1YTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx26IGTCxvLuBPXrG8JPf/xrRclb
VtrGYsWt/RqET2IqfxEDE0AiU9wzJQlh62IDIWbNNfM3DmC0MsBqR05wn58WdMU3
JKLt2DzZk5h+pLG3URXfUsRj7tS2mo3geodc0yzwjpCCcGT6UTrwnn5syxk5YMdj
GoqrEQP8ybV5vCVY4K69X93NofHAbI8SXuLUFbUacLep60Otzjj299heOCiZTFgO
DpptXz4qJXhs1E3/hC7HS/+MrUpHfoZQfFtWtp97EVFWA1J1g3i0FoySN+dvQIV8
m1b9oYm01fcn2YOXhk6p57Y8EKLKm56pnulC/DL7v6qqshG4QribC+gvYQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPu7/wjvfS5bBpESyrLXNwFEQ1ogMB8GA1UdIwQY
MBaAFC+NjQzuvM11tga6SWj1x5RujUfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDQyTkRPNjh6WFcyQnJwSmFQWEhsRzZOUjhBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZjNiYmQtNGE2MS00MmM1LThiMDct
M2NiZDUyNTdiMDNlLzEvMS03dl9DTzk5TGxzR2tSTEtzdGMzQVVSRFdpQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODYvNGYzYmJkLTRhNjEtNDJjNS04YjA3LTNjYmQ1MjU3YjAz
ZS8xL0w0Mk5ETzY4elhXMkJycEphUFhIbEc2TlI4QS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACABBnwT
KDANBgkqhkiG9w0BAQsFAAOCAQEAQB0Bi7IcCMXC3ZN5jWGqi3SbUxynyv+a86nW
dd3XHNC3EAape13wgpGDy4HaYaWrq+Lg8b/MIokVNcOaq6enl7ziMpCYCOlPrS6A
OUrimObTFg4AuBl1nwX2mnUwmvecbpErES/QGexoguB2iSvEfksX+LR431qPozfa
Qz5eqJg3zaPEsDXZXPgDgP+k/D/PWl2I54XF4qUsgEV5UK1n5kOtpovNOq6T4+hv
HlYq4QvgOZZx8SvVhze4pi8U1debNnXRTI1exjYLd9DwYogikCWIsWQJe8yyeSW+
E/wlmHJBKpo2b9d19wAQvU8dPntrHIy/mHy6pytct2YLupwm4w==
-----END CERTIFICATE-----