Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/9BQ4wx-EJ_pe5jHdnBc4yc9aGXA.roa
File:                     9BQ4wx-EJ_pe5jHdnBc4yc9aGXA.roa (raw, json)
Hash identifier:          ai304BYVuRoBtsTM6riq4DyIHrT1Bgx2d9dAqE1YN7M=
Subject key identifier:   F4:14:38:C3:1F:84:27:FA:5E:E6:31:DD:9C:17:38:C9:CF:5A:19:70
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       018CC2DB04E225C78BAE75F4697F941C6820
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/9BQ4wx-EJ_pe5jHdnBc4yc9aGXA.roa
Signing time:             Mon 01 Jan 2024 02:29:42 +0000
ROA not before:           Mon 01 Jan 2024 02:29:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207963
IP address blocks:        2a0f:5707:ad01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:04:e2:25:c7:8b:ae:75:f4:69:7f:94:1c:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  1 02:29:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f41438c31f8427fa5ee631dd9c1738c9cf5a1970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:ba:b7:3c:4a:cf:ea:92:8f:61:9a:01:9b:
                    ec:01:2a:1c:e3:6a:1c:f4:94:e0:c4:ed:62:28:52:
                    ff:8e:90:90:03:7b:8a:02:1b:43:38:ed:c2:78:d6:
                    25:8a:57:85:26:3c:ed:c2:b9:94:b4:a2:62:91:4c:
                    bb:0b:d9:a7:46:5e:66:dd:62:87:30:62:1f:57:29:
                    da:20:8d:ed:af:5c:0d:1a:31:16:11:76:66:85:1c:
                    c3:66:58:1c:b2:03:26:76:03:35:98:97:a5:0f:50:
                    b5:e4:24:64:64:4c:95:d6:41:92:99:e3:7b:fe:5c:
                    69:d4:4c:b0:c3:6c:62:71:4e:3d:42:ff:b6:7a:ad:
                    4f:9c:dd:3b:a7:0d:ce:7b:3a:3b:f4:00:8e:b7:75:
                    f5:60:fb:67:f7:02:ad:17:74:a4:b3:fd:5b:6d:81:
                    4b:7c:99:c3:a6:be:49:bf:5d:38:34:84:cd:cf:6d:
                    50:8c:d7:de:be:01:43:88:61:98:97:07:70:9b:a9:
                    47:3f:4d:80:bf:36:6e:e4:1c:56:6c:f2:fe:5e:a9:
                    5a:fb:4b:d2:cb:02:3f:5c:39:79:6c:26:8c:37:0d:
                    91:96:72:f6:55:78:f5:c1:f6:26:55:96:b4:77:91:
                    fc:45:58:03:a2:62:78:2b:8d:bf:9c:24:75:46:1a:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:14:38:C3:1F:84:27:FA:5E:E6:31:DD:9C:17:38:C9:CF:5A:19:70
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/9BQ4wx-EJ_pe5jHdnBc4yc9aGXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:ad01::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:5e:54:6e:6e:a6:ac:d6:a1:64:e4:33:f4:8b:ef:a8:ba:ea:
         98:5e:91:9b:b7:88:aa:d5:cf:15:c7:d0:46:12:5a:7f:14:70:
         96:55:bb:3c:d2:40:dc:24:d5:38:38:26:68:18:a3:0c:de:c2:
         fe:cc:b4:5d:25:17:4e:bc:4e:fc:e7:bb:4a:76:18:5a:1a:af:
         17:7f:e8:e7:da:57:10:2a:eb:44:e1:6b:a1:42:f0:81:f1:cb:
         fa:15:d2:e5:42:84:15:78:4d:72:f3:8e:c8:14:39:0d:a2:9f:
         45:eb:f0:94:36:f0:51:c7:7a:2f:4a:dd:b8:19:11:dc:7d:1b:
         76:b4:42:b7:95:fd:8d:07:81:3f:60:4d:0d:f1:55:33:df:29:
         f2:ef:15:c8:42:ff:b6:4d:e7:25:6b:99:3f:51:c1:04:85:1b:
         ef:26:da:4f:e9:9b:10:42:89:a4:18:2b:46:d3:f9:a2:73:ed:
         a7:6d:10:d1:b5:0a:a6:c6:ce:83:8b:86:ff:fd:ab:ce:6f:1a:
         e3:0c:5a:f0:87:cb:52:b7:79:14:a7:9c:89:8d:d2:72:b7:98:
         c7:9d:a2:88:ee:3c:c8:99:9f:52:ba:a9:c2:78:90:cb:9e:8f:
         de:02:bd:ec:49:08:24:00:f8:b0:78:ff:40:dc:a1:81:0e:4e:
         c9:04:0c:3f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzC2wTiJceLrnX0aX+UHGggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjQwMTAxMDIyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDE0MzhjMzFmODQyN2ZhNWVlNjMxZGQ5YzE3MzhjOWNmNWExOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjO6tzxKz+qSj2GaAZvsASoc42oc
9JTgxO1iKFL/jpCQA3uKAhtDOO3CeNYlileFJjztwrmUtKJikUy7C9mnRl5m3WKH
MGIfVynaII3tr1wNGjEWEXZmhRzDZlgcsgMmdgM1mJelD1C15CRkZEyV1kGSmeN7
/lxp1Eyww2xicU49Qv+2eq1PnN07pw3Oezo79ACOt3X1YPtn9wKtF3Sks/1bbYFL
fJnDpr5Jv104NITNz21QjNfevgFDiGGYlwdwm6lHP02AvzZu5BxWbPL+Xqla+0vS
ywI/XDl5bCaMNw2RlnL2VXj1wfYmVZa0d5H8RVgDomJ4K42/nCR1Rhq19QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPQUOMMfhCf6XuYx3ZwXOMnPWhlwMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvOUJRNHd4LUVKX3BlNWpIZG5CYzR5YzlhR1hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9XB60B
MA0GCSqGSIb3DQEBCwUAA4IBAQA7XlRubqas1qFk5DP0i++ouuqYXpGbt4iq1c8V
x9BGElp/FHCWVbs80kDcJNU4OCZoGKMM3sL+zLRdJRdOvE7857tKdhhaGq8Xf+jn
2lcQKutE4WuhQvCB8cv6FdLlQoQVeE1y847IFDkNop9F6/CUNvBRx3ovSt24GRHc
fRt2tEK3lf2NB4E/YE0N8VUz3yny7xXIQv+2Tecla5k/UcEEhRvvJtpP6ZsQQomk
GCtG0/mic+2nbRDRtQqmxs6Di4b//avObxrjDFrwh8tSt3kUp5yJjdJyt5jHnaKI
7jzImZ9SuqnCeJDLno/eAr3sSQgkAPiweP9A3KGBDk7JBAw/
-----END CERTIFICATE-----