Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/w1BygKSz7IAwCHYNL3Nj_vRjL9Y.roa
File:                     w1BygKSz7IAwCHYNL3Nj_vRjL9Y.roa (raw, json)
Hash identifier:          uLhYerUHQBl0Qn9YQLXLqqlkqQt/y7h6f3O/IrBms7Y=
Subject key identifier:   C3:50:72:80:A4:B3:EC:80:30:08:76:0D:2F:73:63:FE:F4:63:2F:D6
Certificate issuer:       /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial:       0191A79F2EC38350962B7A9ABB9F8DE5D527
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/w1BygKSz7IAwCHYNL3Nj_vRjL9Y.roa
Signing time:             Sat 31 Aug 2024 08:48:32 +0000
ROA not before:           Sat 31 Aug 2024 08:48:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13235
IP address blocks:        2a03:55e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:a7:9f:2e:c3:83:50:96:2b:7a:9a:bb:9f:8d:e5:d5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
        Validity
            Not Before: Aug 31 08:48:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c3507280a4b3ec803008760d2f7363fef4632fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2e:29:56:5a:ee:0e:9a:10:0e:7e:c8:f7:71:
                    11:be:56:db:79:ee:59:4d:18:3e:56:70:9c:eb:20:
                    1a:1c:07:f4:e9:43:8e:53:8e:f2:4d:6a:7e:81:60:
                    30:e5:ba:28:b5:08:fd:aa:b5:28:a5:44:37:42:17:
                    1b:15:80:15:d0:25:51:8c:b3:e8:10:43:20:f1:05:
                    e9:75:03:5b:05:ec:24:ce:1f:9f:99:40:0e:48:79:
                    3f:df:1c:b9:e9:f0:80:15:c7:4a:5c:6d:64:f1:07:
                    47:88:52:06:05:00:a9:09:3e:f4:1d:39:df:f4:02:
                    74:69:31:6c:dc:b7:b5:90:0d:f2:88:92:da:4c:a1:
                    2d:4a:38:72:a6:b5:f1:2d:ec:32:33:e6:ed:62:9c:
                    33:84:b8:b2:c7:78:3d:a2:0e:12:11:34:a8:28:10:
                    71:e2:6c:b5:94:c0:9f:51:3f:76:8f:e6:c7:e8:c1:
                    ba:92:ae:b2:ac:bc:f6:39:bd:e2:c0:de:a2:d3:96:
                    75:e9:74:e2:ff:18:7d:6f:21:82:b7:d2:b9:6e:59:
                    bf:44:15:98:78:f0:00:29:cd:a9:74:aa:59:2e:bb:
                    1e:d6:5f:b3:aa:61:57:29:91:00:23:b7:ad:9b:30:
                    8b:bd:7d:1d:37:00:71:4f:46:3f:a3:31:28:dd:9d:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:50:72:80:A4:B3:EC:80:30:08:76:0D:2F:73:63:FE:F4:63:2F:D6
            X509v3 Authority Key Identifier:
                keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/w1BygKSz7IAwCHYNL3Nj_vRjL9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:55e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:ae:27:97:39:3b:67:2a:0b:18:c3:d2:3e:91:6f:52:64:13:
         b7:db:c2:e6:84:e8:06:5d:19:f6:c8:bc:0b:6b:ca:50:e8:a3:
         bd:b4:e5:d0:82:ec:38:99:47:63:3c:88:44:7c:19:62:3e:3a:
         91:70:f3:c6:3e:f0:a0:00:ac:5c:23:13:31:80:0e:bc:57:4e:
         dc:f1:9a:31:25:ef:a8:04:2a:f8:b0:31:92:08:9f:9a:78:2b:
         a4:78:93:87:74:bf:f5:33:59:de:dd:68:eb:dc:54:aa:62:21:
         0b:14:a9:4a:aa:6f:0e:70:49:6c:c8:27:87:42:8e:ed:43:80:
         11:2c:25:d6:d7:07:bb:81:2d:aa:88:d3:4f:2e:1f:e1:17:4a:
         d7:e0:42:ad:67:28:fb:62:4b:0e:20:eb:fb:d8:3a:ef:bc:c1:
         1a:af:24:79:0a:f0:2f:77:3c:d6:2f:ab:4e:25:a4:3d:cc:12:
         89:0c:69:ae:2f:c6:cc:a2:97:a3:cc:04:aa:8c:04:52:30:5b:
         c6:6c:eb:02:4b:01:c5:1e:d5:d6:87:1e:87:66:4e:4b:1e:60:
         1e:5b:f3:1d:55:e3:35:a3:9a:f5:f1:10:5f:28:2e:4a:7f:f3:
         06:6c:dd:c2:4c:a7:44:dd:80:c5:7e:9d:7a:a3:45:cd:ce:73:
         93:77:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----