Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Z1wdyi8j3NyRbhvk-DzJ7CSvP3A.roa
File:                     Z1wdyi8j3NyRbhvk-DzJ7CSvP3A.roa (raw, json)
Hash identifier:          gmKkMMEfYr/sAhy1sl1ViLTN6uUeVNm5ZKiOhROQUuk=
Subject key identifier:   67:5C:1D:CA:2F:23:DC:DC:91:6E:1B:E4:F8:3C:C9:EC:24:AF:3F:70
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       018E99B38E5E61E22B77A573BA43F1DE5FA3
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Z1wdyi8j3NyRbhvk-DzJ7CSvP3A.roa
Signing time:             Mon 01 Apr 2024 12:47:45 +0000
ROA not before:           Mon 01 Apr 2024 12:47:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211871
IP address blocks:        2a12:bec4:102a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 02:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:99:b3:8e:5e:61:e2:2b:77:a5:73:ba:43:f1:de:5f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Apr  1 12:47:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=675c1dca2f23dcdc916e1be4f83cc9ec24af3f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:3b:f9:85:2f:f3:83:8c:bd:f9:b3:54:f5:
                    90:6c:aa:f2:35:1d:a9:d5:16:49:a9:de:12:be:d6:
                    39:40:d3:b4:d1:8d:7c:1c:c0:79:f2:35:74:08:90:
                    17:aa:f6:f1:97:8d:c6:9a:1d:81:00:14:8f:07:34:
                    0b:62:9c:73:1d:ba:a2:6c:9a:75:6e:19:d8:ef:0e:
                    7d:4d:f9:b0:95:58:ef:41:68:90:24:9a:b7:a0:3f:
                    3f:2f:d7:18:ba:6e:cb:a9:03:9d:7b:22:98:f7:aa:
                    ce:d6:72:ea:15:85:34:6d:80:c7:29:49:0d:c2:7e:
                    5d:64:03:af:7d:0a:61:ea:65:81:8c:b5:9b:86:ec:
                    2c:eb:aa:a3:ae:98:24:59:e2:4b:ac:09:aa:f8:0a:
                    7c:94:55:90:50:c2:2d:a0:12:95:16:26:1c:00:cf:
                    ec:84:58:87:b6:5e:46:fb:8a:35:a4:43:f8:56:ef:
                    bf:91:9a:01:e9:86:46:49:78:68:ae:29:60:d5:43:
                    1e:f9:b7:67:0d:d5:aa:70:bd:b4:ca:de:91:c4:29:
                    b0:4a:af:c1:24:76:40:7f:b0:42:ba:82:3d:5b:12:
                    00:c6:76:38:02:8d:19:e3:9b:70:d6:aa:a8:0e:18:
                    60:28:fd:9f:79:80:e4:69:98:44:c9:83:ee:7f:0d:
                    25:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5C:1D:CA:2F:23:DC:DC:91:6E:1B:E4:F8:3C:C9:EC:24:AF:3F:70
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Z1wdyi8j3NyRbhvk-DzJ7CSvP3A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec4:102a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:41:5e:04:09:9a:b1:40:b1:46:65:14:0a:ca:f8:4f:08:f0:
         57:0b:5d:a1:72:a5:82:6c:24:fc:a5:a5:f1:99:5e:d1:43:17:
         1d:55:a8:8a:a7:3a:55:3b:25:a2:d9:94:1c:04:66:d2:0e:11:
         e9:ea:f4:4f:6f:9d:00:f0:c6:cc:d5:42:53:17:ec:f5:04:f3:
         8c:bd:5b:a0:49:52:a3:d0:f2:5a:65:23:80:70:e1:87:2b:38:
         6a:b2:7d:08:4b:f0:74:97:1c:84:aa:3a:13:57:52:a7:9b:13:
         79:f2:8e:61:74:14:be:bf:61:87:17:74:6e:f1:d3:68:0b:30:
         6e:c9:6b:40:e6:2b:b4:80:2b:5b:15:65:fe:66:06:df:a7:75:
         b8:7a:bb:e9:07:e4:cd:94:02:db:28:2b:1d:9c:dd:11:2a:b5:
         da:37:24:52:8c:6a:fc:43:77:34:89:11:87:fa:b4:5c:95:77:
         57:a0:c4:83:5a:d2:1a:e0:ed:63:d8:8f:f0:5f:a3:63:4a:81:
         05:7a:d7:13:e1:c7:60:cd:84:f9:43:30:ba:47:e5:e6:fa:95:
         ca:5b:56:76:46:19:e4:1b:3f:fe:77:1f:97:6f:1b:b5:93:c0:
         79:b6:a2:93:b7:ae:5f:ac:48:0b:b9:9f:ab:9b:96:7a:30:3e:
         00:cc:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----