Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/q3vAi3x8-Kr-v2uP7Hb-iPUZC8A.roa
File:                     q3vAi3x8-Kr-v2uP7Hb-iPUZC8A.roa (raw, json)
Hash identifier:          3z+q0tnEZIx9659g0Vs4mdg6f4tLIDG4i450OvBVE5Q=
Subject key identifier:   AB:7B:C0:8B:7C:7C:F8:AA:FE:BF:6B:8F:EC:76:FE:88:F5:19:0B:C0
Certificate issuer:       /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial:       0192AFAA51A9FCD79C0591DA869C4577405B
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/q3vAi3x8-Kr-v2uP7Hb-iPUZC8A.roa
Signing time:             Mon 21 Oct 2024 15:20:27 +0000
ROA not before:           Mon 21 Oct 2024 15:20:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57801
IP address blocks:        2a04:2b00:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:aa:51:a9:fc:d7:9c:05:91:da:86:9c:45:77:40:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
        Validity
            Not Before: Oct 21 15:20:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ab7bc08b7c7cf8aafebf6b8fec76fe88f5190bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5f:06:b7:7c:ea:b5:d6:69:d0:37:e5:12:59:
                    79:65:07:b3:02:b8:3e:52:dd:f0:e2:7d:b4:00:43:
                    45:37:48:1b:0a:68:f6:51:93:c6:a5:52:56:02:d6:
                    7f:1f:34:55:e3:b1:76:c6:6e:f0:a9:ee:7c:bc:06:
                    cc:71:e3:0d:46:38:87:c6:b1:0b:9b:66:b5:11:d7:
                    36:ed:f7:cc:88:53:6c:4c:0c:27:ab:27:36:79:b6:
                    59:a2:30:16:39:9a:06:0b:d8:a6:23:0d:35:c0:35:
                    92:9a:b9:89:a7:93:52:3a:72:87:e8:c5:c7:30:6a:
                    c0:b6:5c:62:89:df:07:98:e7:86:90:fe:78:a9:38:
                    5e:64:84:e5:0e:79:09:8a:b9:75:0b:8c:e3:f2:f3:
                    6c:33:be:15:e1:5b:25:3f:cb:83:d0:70:bb:0b:d5:
                    12:c6:6c:29:99:12:2b:30:c6:cc:60:a5:99:74:06:
                    8c:f9:22:34:b0:7c:49:db:54:00:62:bb:da:ed:8d:
                    1e:d6:f9:4a:f5:a2:fc:24:65:d7:21:e3:14:10:48:
                    27:77:be:10:fc:eb:8a:86:18:ff:7c:b1:12:f7:c2:
                    c5:1d:6e:d3:b0:84:47:e3:c7:63:8a:47:0b:9d:4e:
                    65:59:59:04:48:f1:4a:a6:46:19:05:6b:b4:0d:3d:
                    91:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7B:C0:8B:7C:7C:F8:AA:FE:BF:6B:8F:EC:76:FE:88:F5:19:0B:C0
            X509v3 Authority Key Identifier:
                keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/q3vAi3x8-Kr-v2uP7Hb-iPUZC8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:2b00:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:6f:6e:a2:00:eb:06:5f:23:83:57:ae:54:34:11:d7:35:e7:
         fd:f7:ce:35:d7:94:30:41:fc:b1:8c:09:9f:b3:3b:89:f4:1b:
         f5:12:00:83:f9:ac:fa:06:ed:32:47:11:89:1e:cd:2c:bd:06:
         8f:6b:22:13:8d:6a:e9:d5:9d:c6:6a:13:53:b8:c6:7e:9f:23:
         51:b1:20:4f:1d:4b:ca:83:c7:9b:48:8f:be:66:64:37:97:ab:
         81:f0:16:a6:8c:81:2c:77:d1:3f:19:f8:62:f0:a4:f3:6d:2f:
         9f:d8:87:c7:2e:71:c0:f1:ac:78:82:32:8e:54:b8:25:5b:99:
         80:56:82:03:d5:89:a6:02:e4:a3:71:31:cb:a0:1e:06:c7:3e:
         5f:2f:15:91:0e:78:2a:19:98:7b:4e:41:6b:4e:ae:ff:4d:0b:
         55:d4:d8:4b:65:d6:4f:d6:b6:33:4c:4b:1b:5b:dd:61:df:64:
         e7:ba:d4:20:77:55:e6:14:a1:f2:88:ca:72:ac:6b:7a:e1:74:
         a4:5f:34:39:2c:99:b1:0e:ac:b3:56:4f:bf:8a:58:f5:99:de:
         bf:cf:13:e4:ce:51:41:87:df:da:14:23:bb:03:ca:80:5d:ef:
         3e:99:7b:42:b3:e0:56:76:67:e7:f4:bf:6b:99:2c:08:c6:8c:
         e3:a0:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----