Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/8PswYenOQp1zq7MQHtOjqmh5zrI.roa
File:                     8PswYenOQp1zq7MQHtOjqmh5zrI.roa (raw, json)
Hash identifier:          3s5GSMgwpU6PoAfahwISrnPfvLVmi+M5uZu7Fn+dB6g=
Subject key identifier:   F0:FB:30:61:E9:CE:42:9D:73:AB:B3:10:1E:D3:A3:AA:68:79:CE:B2
Certificate issuer:       /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial:       018E4C1C4711A1FB2AEE7F739806E225BFB3
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/8PswYenOQp1zq7MQHtOjqmh5zrI.roa
Signing time:             Sun 17 Mar 2024 11:11:45 +0000
ROA not before:           Sun 17 Mar 2024 11:11:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215351
IP address blocks:        2001:678:428::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:4c:1c:47:11:a1:fb:2a:ee:7f:73:98:06:e2:25:bf:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
        Validity
            Not Before: Mar 17 11:11:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f0fb3061e9ce429d73abb3101ed3a3aa6879ceb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:e5:76:8e:a4:38:9f:6e:a9:91:e1:f5:d0:
                    f3:51:df:9d:e7:b9:d9:c9:eb:d6:cf:cd:a1:11:18:
                    43:46:fa:64:78:5f:a4:b9:2a:b0:5f:4a:6a:43:7e:
                    41:87:9a:06:87:6e:ab:1a:9b:4e:8d:b1:98:d9:96:
                    85:26:b3:87:f1:07:ae:df:c1:a6:64:64:82:7b:b2:
                    ea:33:ef:f6:43:bd:9c:16:4a:d7:de:cb:2a:5a:26:
                    26:1d:31:ff:95:c0:48:30:11:e5:51:6d:78:2c:d7:
                    c1:9e:a2:55:7d:d5:7c:bc:6f:d1:c2:33:12:ce:fa:
                    cf:66:f7:0f:7b:99:37:c3:68:9b:5b:c8:c9:5a:0c:
                    8f:95:fc:c1:47:d0:3b:64:18:fb:fa:f8:df:3d:d8:
                    ca:f9:98:e8:94:73:da:2a:3a:0c:53:53:d0:e9:99:
                    5a:dc:24:0d:4f:f4:c9:31:9e:96:61:d4:51:de:ae:
                    d9:83:91:1d:eb:f1:e9:ec:b7:5a:f8:6b:71:eb:63:
                    98:37:fb:6d:95:f2:1e:94:11:3a:d0:6e:5f:43:69:
                    0a:56:64:7f:50:85:76:c9:c6:cf:13:e5:02:f9:25:
                    1a:9b:9c:b4:12:8d:91:4e:7f:df:92:fe:04:ba:38:
                    bd:13:ce:d3:08:6d:f9:ea:78:22:76:e4:7e:d6:05:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:30:61:E9:CE:42:9D:73:AB:B3:10:1E:D3:A3:AA:68:79:CE:B2
            X509v3 Authority Key Identifier:
                keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/8PswYenOQp1zq7MQHtOjqmh5zrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:428::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:a5:da:fc:e9:62:48:ad:c2:00:17:76:c1:a2:9b:23:c7:97:
         9e:7b:1d:b1:b5:5f:88:00:6f:e7:d0:bb:52:b4:1e:7a:93:ca:
         3b:ae:cf:ef:2d:a8:56:5d:c0:4b:5e:12:2a:a2:e3:ac:19:0c:
         2b:dd:55:62:4a:be:e1:8b:56:45:bc:10:86:d2:c5:62:6c:3c:
         da:fa:a2:6e:26:18:0e:a5:8a:35:c0:69:0e:9f:cd:12:22:5e:
         41:cb:80:72:a3:37:80:01:82:df:a1:3b:2a:27:80:f0:b6:dd:
         08:1d:e3:7a:a9:08:5c:20:a5:a5:f3:63:64:56:d9:f5:2d:23:
         04:92:ae:54:da:44:4e:5f:a1:0f:0c:99:aa:b4:df:07:ae:67:
         b8:56:66:09:b0:4d:91:4c:7e:aa:75:70:a4:06:a3:75:0e:8b:
         c5:fc:b5:5d:37:44:8a:12:15:a7:30:a7:d9:26:15:47:0f:5d:
         54:e3:35:70:94:4f:e4:0e:6a:49:15:4e:6a:33:3f:b9:22:b7:
         7e:b6:27:3c:4c:f5:61:0f:7b:67:f7:2b:4e:5d:75:92:2a:7d:
         75:24:3d:d2:51:80:c3:45:6e:11:90:94:be:00:4a:8f:97:dd:
         b7:c3:50:4a:6b:63:39:63:03:97:90:5e:44:13:74:6e:27:dd:
         7e:d8:c6:31
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY5MHEcRofsq7n9zmAbiJb+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjcxYmViYjhhYzNlMzBiNWQ3YzNkMjUzNzM1N2EzYjI1
NDZkNWIwHhcNMjQwMzE3MTExMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGZiMzA2MWU5Y2U0MjlkNzNhYmIzMTAxZWQzYTNhYTY4NzljZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXvldo6kOJ9uqZHh9dDzUd+d57nZ
yevWz82hERhDRvpkeF+kuSqwX0pqQ35Bh5oGh26rGptOjbGY2ZaFJrOH8Qeu38Gm
ZGSCe7LqM+/2Q72cFkrX3ssqWiYmHTH/lcBIMBHlUW14LNfBnqJVfdV8vG/RwjMS
zvrPZvcPe5k3w2ibW8jJWgyPlfzBR9A7ZBj7+vjfPdjK+ZjolHPaKjoMU1PQ6Zla
3CQNT/TJMZ6WYdRR3q7Zg5Ed6/Hp7Lda+Gtx62OYN/ttlfIelBE60G5fQ2kKVmR/
UIV2ycbPE+UC+SUam5y0Eo2RTn/fkv4Euji9E87TCG356ngiduR+1gUW4wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPD7MGHpzkKdc6uzEB7To6poec6yMB8GA1UdIwQY
MBaAFBJnG+u4rD4wtdfD0lNzV6OyVG1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMt
ZDQyODY5NzhhODBhLzEvOFBzd1llbk9RcDF6cTdNUUh0T2pxbWg1enJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMtZDQyODY5NzhhODBh
LzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAQo
MA0GCSqGSIb3DQEBCwUAA4IBAQB4pdr86WJIrcIAF3bBopsjx5eeex2xtV+IAG/n
0LtStB56k8o7rs/vLahWXcBLXhIqouOsGQwr3VViSr7hi1ZFvBCG0sVibDza+qJu
JhgOpYo1wGkOn80SIl5By4ByozeAAYLfoTsqJ4Dwtt0IHeN6qQhcIKWl82NkVtn1
LSMEkq5U2kROX6EPDJmqtN8Hrme4VmYJsE2RTH6qdXCkBqN1DovF/LVdN0SKEhWn
MKfZJhVHD11U4zVwlE/kDmpJFU5qMz+5Ird+tic8TPVhD3tn9ytOXXWSKn11JD3S
UYDDRW4RkJS+AEqPl923w1BKa2M5YwOXkF5EE3RuJ91+2MYx
-----END CERTIFICATE-----