Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qRfH12hM3kWL4Z_QmhcYKmUQg9Y.roa
File:                     qRfH12hM3kWL4Z_QmhcYKmUQg9Y.roa (raw, json)
Hash identifier:          tprc2wcJOWRsIZS8OcOdx7UVykHxOHmPBv7K5O7ANoI=
Subject key identifier:   A9:17:C7:D7:68:4C:DE:45:8B:E1:9F:D0:9A:17:18:2A:65:10:83:D6
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018CCA2A5A28C239F4508F9874A9219B320C
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qRfH12hM3kWL4Z_QmhcYKmUQg9Y.roa
Signing time:             Tue 02 Jan 2024 12:33:42 +0000
ROA not before:           Tue 02 Jan 2024 12:33:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209859
IP address blocks:        2a06:e881:5300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:5a:28:c2:39:f4:50:8f:98:74:a9:21:9b:32:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 12:33:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a917c7d7684cde458be19fd09a17182a651083d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:9c:1f:33:4a:1c:d0:6a:6a:ab:f0:62:87:
                    67:f4:d1:a9:cb:ca:a2:eb:d8:5b:eb:1e:41:2a:cb:
                    5a:fe:57:91:ee:d1:fe:56:55:8e:ea:f5:0e:53:b4:
                    bf:8e:b5:74:0f:33:ae:a3:f0:54:1f:4b:be:6a:7d:
                    9b:89:12:e6:c0:80:f9:82:f2:b4:60:a0:73:9d:ed:
                    db:2f:d1:86:6a:15:f9:46:f8:5e:59:79:0c:c7:8a:
                    35:67:17:e5:49:aa:51:82:16:4c:b5:b2:41:77:0f:
                    51:c5:73:5e:32:a4:bd:af:f0:13:8d:34:5d:d9:d4:
                    8a:8b:3f:8c:1b:fa:0a:1a:3a:b6:9f:0e:81:1d:07:
                    f8:8e:67:86:46:ad:f2:17:d9:a8:dc:de:07:4c:5c:
                    1e:05:2f:15:83:b0:5d:6a:58:f6:53:7d:b4:33:34:
                    ee:1c:3f:ab:4a:81:73:e8:2a:9f:14:6a:ba:fc:89:
                    79:27:06:82:14:61:de:1e:02:e8:18:a3:44:ab:55:
                    d2:09:fd:ae:07:10:ca:3e:2c:9b:eb:f7:31:a6:f1:
                    68:72:18:7e:5c:36:2a:18:14:89:a8:85:e9:c0:bb:
                    fa:fd:5d:d2:3c:06:87:1e:cd:7c:ca:0e:d7:4a:f4:
                    49:f0:79:40:57:e5:15:0b:17:af:74:0c:7f:e8:ee:
                    91:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:C7:D7:68:4C:DE:45:8B:E1:9F:D0:9A:17:18:2A:65:10:83:D6
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qRfH12hM3kWL4Z_QmhcYKmUQg9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:3c:24:7f:e6:0d:a0:ce:af:01:0a:d8:a7:e6:d2:45:6a:c6:
         bc:5e:e1:de:9d:90:67:7d:91:6b:ee:3e:af:42:64:b0:40:c0:
         ca:83:fc:4e:f4:f7:14:bc:03:ea:9a:cb:59:c0:0d:45:97:26:
         e7:36:da:d3:0d:87:8a:67:f9:e1:41:eb:d8:66:7e:ce:3d:bf:
         8e:3d:e7:c2:e8:d8:56:d9:96:63:06:25:61:19:2f:3f:6b:19:
         b8:7a:9e:e3:0e:1f:44:ad:23:0f:5c:39:30:b3:ab:4d:61:38:
         d4:f6:7a:5a:15:9f:a7:95:83:6a:19:54:f5:95:d5:50:9e:43:
         1e:3d:4b:6c:6e:45:6b:96:16:2a:d1:93:3a:e5:6e:fe:56:ba:
         36:66:ee:69:8a:b9:bf:a6:0c:1c:2f:30:25:9c:6c:71:b2:7d:
         79:e1:52:40:02:2d:4e:28:39:a3:d1:c8:e9:6a:de:cd:44:eb:
         5b:18:f3:70:e7:74:80:1d:e5:6b:55:de:dc:c4:28:cd:57:c6:
         e7:4b:a8:7f:51:1f:c2:7a:43:80:5e:13:21:dd:96:8e:48:33:
         46:23:8b:06:ae:2d:1c:89:fc:00:05:95:bf:56:d2:69:84:77:
         d6:48:ab:18:5b:71:cd:0a:09:92:ab:f1:30:34:cd:83:99:da:
         a2:bb:c8:8a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzKKloowjn0UI+YdKkhmzIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjQwMTAyMTIzMzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTE3YzdkNzY4NGNkZTQ1OGJlMTlmZDA5YTE3MTgyYTY1MTA4M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0icHzNKHNBqaqvwYodn9NGpy8qi
69hb6x5BKsta/leR7tH+VlWO6vUOU7S/jrV0DzOuo/BUH0u+an2biRLmwID5gvK0
YKBzne3bL9GGahX5RvheWXkMx4o1ZxflSapRghZMtbJBdw9RxXNeMqS9r/ATjTRd
2dSKiz+MG/oKGjq2nw6BHQf4jmeGRq3yF9mo3N4HTFweBS8Vg7Bdalj2U320MzTu
HD+rSoFz6CqfFGq6/Il5JwaCFGHeHgLoGKNEq1XSCf2uBxDKPiyb6/cxpvFochh+
XDYqGBSJqIXpwLv6/V3SPAaHHs18yg7XSvRJ8HlAV+UVCxevdAx/6O6ROwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKkXx9doTN5Fi+Gf0JoXGCplEIPWMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvcVJmSDEyaE0za1dMNFpfUW1oY1lLbVVRZzlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgbogVMw
DQYJKoZIhvcNAQELBQADggEBAK48JH/mDaDOrwEK2Kfm0kVqxrxe4d6dkGd9kWvu
Pq9CZLBAwMqD/E709xS8A+qay1nADUWXJuc22tMNh4pn+eFB69hmfs49v44958Lo
2FbZlmMGJWEZLz9rGbh6nuMOH0StIw9cOTCzq01hONT2eloVn6eVg2oZVPWV1VCe
Qx49S2xuRWuWFirRkzrlbv5WujZm7mmKub+mDBwvMCWcbHGyfXnhUkACLU4oOaPR
yOlq3s1E61sY83DndIAd5WtV3tzEKM1XxudLqH9RH8J6Q4BeEyHdlo5IM0Yjiwau
LRyJ/AAFlb9W0mmEd9ZIqxhbcc0KCZKr8TA0zYOZ2qK7yIo=
-----END CERTIFICATE-----