Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XqqOy__kSyUvD_ti-p49cQgi1C4.roa
File:                     XqqOy__kSyUvD_ti-p49cQgi1C4.roa (raw, json)
Hash identifier:          785hS+96SSpMGir1396On/YFUtJPHE6pN+2ZTLrbMTE=
Subject key identifier:   5E:AA:8E:CB:FF:E4:4B:25:2F:0F:FB:62:FA:9E:3D:71:08:22:D4:2E
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       018D8926C3C2A54426CDCE05936327575C88
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XqqOy__kSyUvD_ti-p49cQgi1C4.roa
Signing time:             Thu 08 Feb 2024 14:37:15 +0000
ROA not before:           Thu 08 Feb 2024 14:37:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197860
IP address blocks:        2a12:bec0:390::/44 maxlen: 48
                          2a12:bec4:1010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:89:26:c3:c2:a5:44:26:cd:ce:05:93:63:27:57:5c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Feb  8 14:37:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5eaa8ecbffe44b252f0ffb62fa9e3d710822d42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:d7:34:c8:9d:56:75:a5:b6:98:49:36:3d:
                    5e:81:9c:cf:47:58:2c:46:e7:7c:d2:ab:6c:eb:33:
                    86:d7:12:c4:41:a2:f5:da:a1:18:cc:5d:a3:31:14:
                    e1:2c:f8:5e:4f:8a:a4:49:c0:11:2e:1b:42:1d:c9:
                    a7:2a:b5:93:9e:65:a3:2f:95:1c:aa:f7:67:0d:cb:
                    8d:05:c0:ac:42:ec:a7:48:da:f7:89:0a:75:b5:e2:
                    22:c1:b2:01:96:8f:79:b3:4d:1a:d3:3f:e5:fd:0a:
                    68:91:f1:4d:b6:f1:5c:45:89:cb:f3:dd:9e:39:0c:
                    ee:b6:af:1a:a7:34:cb:63:92:2f:bb:46:88:57:60:
                    2b:de:a3:e2:17:c2:1a:6f:12:88:5a:a5:5d:cc:28:
                    0d:86:b8:04:19:0d:46:8b:06:14:7c:c9:5b:cd:7f:
                    94:17:66:55:b8:df:d7:e4:7e:00:3a:3f:bf:99:e0:
                    45:06:7f:2b:20:84:94:15:fa:ab:b7:f7:7d:1e:5e:
                    c4:9c:15:37:e6:f8:cd:81:07:fd:42:09:5e:71:09:
                    83:e1:81:a4:d8:5b:76:6a:b7:28:15:cd:ec:b6:9a:
                    df:f3:19:36:f2:c8:35:73:33:34:be:25:46:2e:79:
                    c1:43:c2:68:e1:e9:0b:da:25:20:69:75:e2:44:31:
                    cd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:8E:CB:FF:E4:4B:25:2F:0F:FB:62:FA:9E:3D:71:08:22:D4:2E
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XqqOy__kSyUvD_ti-p49cQgi1C4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec0:390::/44
                  2a12:bec4:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:5e:16:14:74:26:b1:2d:f5:55:8c:d5:3a:12:75:73:aa:71:
         35:39:5a:ad:c4:9c:bc:b7:20:64:4b:15:12:5d:96:b2:bd:2a:
         b6:09:03:94:12:0a:5f:b3:4b:3a:1f:f2:31:d9:3d:d9:15:b2:
         6c:d6:78:de:94:ca:98:4a:be:08:2d:5f:1c:c4:76:2a:97:22:
         8c:ac:e3:c0:f5:ef:5f:02:fa:09:88:c0:c6:ad:d1:d1:c7:51:
         3a:c4:65:d5:32:d3:f5:d4:19:1e:35:a8:ad:42:fb:82:e3:57:
         95:72:1f:38:a9:31:80:c9:30:90:70:90:8d:d2:4d:b8:85:19:
         9c:08:d0:27:d5:d2:f7:a1:39:f2:49:e9:ae:f6:c0:32:08:32:
         57:d3:9c:56:6f:e3:7a:35:27:3e:f0:56:43:53:79:61:6d:92:
         a7:86:a7:82:6a:cd:4e:f5:d7:c2:c7:8e:cb:fd:19:80:a4:ac:
         1f:d0:9d:26:41:bd:6f:f6:80:0a:86:61:f9:ba:2b:04:a9:07:
         87:96:f5:42:92:33:2a:de:d8:85:03:d0:63:46:fc:e3:3a:50:
         94:98:cd:77:2d:31:3e:9a:f6:d7:ae:48:e7:65:f4:11:84:a6:
         a7:79:91:fe:14:5d:6b:39:3e:55:74:9c:6d:e9:1b:1b:69:7f:
         07:83:6f:63
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY2JJsPCpUQmzc4Fk2MnV1yIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwMjA4MTQzNzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWFhOGVjYmZmZTQ0YjI1MmYwZmZiNjJmYTllM2Q3MTA4MjJkNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ/XNMidVnWltphJNj1egZzPR1gs
Rud80qts6zOG1xLEQaL12qEYzF2jMRThLPheT4qkScARLhtCHcmnKrWTnmWjL5Uc
qvdnDcuNBcCsQuynSNr3iQp1teIiwbIBlo95s00a0z/l/QpokfFNtvFcRYnL892e
OQzutq8apzTLY5Ivu0aIV2Ar3qPiF8IabxKIWqVdzCgNhrgEGQ1GiwYUfMlbzX+U
F2ZVuN/X5H4AOj+/meBFBn8rIISUFfqrt/d9Hl7EnBU35vjNgQf9QglecQmD4YGk
2Ft2arcoFc3stprf8xk28sg1czM0viVGLnnBQ8Jo4ekL2iUgaXXiRDHNhQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFF6qjsv/5EslLw/7YvqePXEIItQuMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvWHFxT3lfX2tTeVV2RF90aS1wNDljUWdpMUM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKhK+wAOQ
AwcEKhK+xBAQMA0GCSqGSIb3DQEBCwUAA4IBAQCPXhYUdCaxLfVVjNU6EnVzqnE1
OVqtxJy8tyBkSxUSXZayvSq2CQOUEgpfs0s6H/Ix2T3ZFbJs1njelMqYSr4ILV8c
xHYqlyKMrOPA9e9fAvoJiMDGrdHRx1E6xGXVMtP11BkeNaitQvuC41eVch84qTGA
yTCQcJCN0k24hRmcCNAn1dL3oTnySemu9sAyCDJX05xWb+N6NSc+8FZDU3lhbZKn
hqeCas1O9dfCx47L/RmApKwf0J0mQb1v9oAKhmH5uisEqQeHlvVCkjMq3tiFA9Bj
RvzjOlCUmM13LTE+mvbXrkjnZfQRhKaneZH+FF1rOT5VdJxt6RsbaX8Hg29j
-----END CERTIFICATE-----