Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/hD0sWOxgQKStFqvtrslu3x86Clw.roa
File:                     hD0sWOxgQKStFqvtrslu3x86Clw.roa (raw, json)
Hash identifier:          Oa7Vc5U+KRGxxTi2PPUdsG6T9rk2IWMRD3L8Qcz30wc=
Subject key identifier:   84:3D:2C:58:EC:60:40:A4:AD:16:AB:ED:AE:C9:6E:DF:1F:3A:0A:5C
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018CC86F9F8B96E88266AFB78CF839187548
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/hD0sWOxgQKStFqvtrslu3x86Clw.roa
Signing time:             Tue 02 Jan 2024 04:30:07 +0000
ROA not before:           Tue 02 Jan 2024 04:30:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6233
IP address blocks:        2a07:e340::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:9f:8b:96:e8:82:66:af:b7:8c:f8:39:18:75:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  2 04:30:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=843d2c58ec6040a4ad16abedaec96edf1f3a0a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:96:b9:f7:4f:b8:71:26:50:67:22:d6:a3:
                    16:58:3c:b8:01:b3:6b:17:99:67:ce:f0:0f:79:c3:
                    e0:1d:6e:b9:88:6e:b9:6b:f9:04:2d:a7:43:93:0a:
                    52:52:fc:d0:7e:bd:69:e2:cd:9a:fc:cd:5f:69:59:
                    24:37:3a:3a:d7:4e:b4:81:22:b1:fe:08:ea:87:24:
                    ff:6e:30:2b:97:1b:de:49:76:9a:3d:4f:f0:8f:3c:
                    66:eb:1e:ff:10:42:49:47:56:bf:17:85:27:6d:9e:
                    92:c6:a9:a8:dc:5e:dc:5b:6b:5e:85:c0:45:34:b4:
                    13:62:f4:e3:67:e1:83:19:78:f6:77:76:21:6a:e2:
                    47:9f:d2:7f:28:0b:a7:ce:07:6c:46:a1:57:d0:f5:
                    df:54:8a:63:64:9d:90:c2:ce:bf:3d:cc:ba:e5:6d:
                    b4:b2:32:e0:39:0e:80:07:78:66:b3:81:8e:9b:34:
                    d4:7d:b3:c9:dd:c9:73:c8:55:30:7d:99:f4:d4:43:
                    8e:59:43:a1:fa:27:3a:1c:58:b9:09:34:1c:54:28:
                    10:8e:4e:00:61:db:8a:e8:ad:d1:6a:0d:ce:7b:28:
                    4c:d5:23:b7:67:f6:9b:e8:25:c0:f5:e5:bf:fa:7e:
                    c4:fc:d1:9d:46:0e:88:0a:5f:7d:b8:b7:2e:f0:78:
                    cd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3D:2C:58:EC:60:40:A4:AD:16:AB:ED:AE:C9:6E:DF:1F:3A:0A:5C
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/hD0sWOxgQKStFqvtrslu3x86Clw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:e340::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:1f:d6:01:96:a6:d7:bf:24:3d:34:cf:c9:9f:28:c9:ae:
         99:aa:87:31:ce:f8:e0:75:73:1e:bd:29:01:64:f9:81:9c:7f:
         74:dd:d5:15:69:1e:e1:43:f0:09:be:1c:ed:c3:66:e6:4b:3d:
         01:c0:22:7d:fd:51:89:bb:68:da:99:fc:11:fb:62:17:e2:8d:
         bc:11:3c:3d:68:75:e9:41:57:a8:95:b2:a4:ef:c4:ec:3e:89:
         14:06:ab:11:34:b6:c8:dc:01:53:a3:f1:ce:2b:e3:07:ec:96:
         45:7c:01:3c:91:e6:69:5f:26:1c:13:b3:cf:f3:6d:96:f4:86:
         e2:5f:45:a4:e2:e1:d1:63:56:b3:ce:f5:6d:61:7d:50:25:d7:
         66:75:c6:fa:72:d7:3e:dc:06:cf:0e:e6:7d:0f:d5:10:28:be:
         97:ad:ec:f9:c9:c5:14:81:ab:ac:c2:d3:39:19:d0:26:05:87:
         aa:65:e9:28:10:0e:ea:6f:70:8c:17:3e:6f:fa:de:db:55:04:
         91:f3:2c:a2:bc:40:fe:68:54:ae:b3:06:9e:02:4e:aa:03:46:
         d4:f3:dc:42:3c:1c:31:ef:c4:eb:f1:e0:29:8b:83:82:8e:55:
         29:1a:60:46:bc:a1:92:5b:e4:39:fd:ec:5b:0a:dc:cc:aa:28:
         3b:dd:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----