Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/vt6DngyJfmqtFUFQ28F9T5D29Ss.roa
File:                     vt6DngyJfmqtFUFQ28F9T5D29Ss.roa (raw, json)
Hash identifier:          6RekCfZPybvunSc7yjFLQ6VJFgi4Ajl0XA0ikwNC6Ew=
Subject key identifier:   BE:DE:83:9E:0C:89:7E:6A:AD:15:41:50:DB:C1:7D:4F:90:F6:F5:2B
Certificate issuer:       /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial:       01920EF1EC5B13C35702D172B7F2B5EE0CAF
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/vt6DngyJfmqtFUFQ28F9T5D29Ss.roa
Signing time:             Fri 20 Sep 2024 10:19:48 +0000
ROA not before:           Fri 20 Sep 2024 10:19:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49440
IP address blocks:        2a0b:9700::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0e:f1:ec:5b:13:c3:57:02:d1:72:b7:f2:b5:ee:0c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
        Validity
            Not Before: Sep 20 10:19:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bede839e0c897e6aad154150dbc17d4f90f6f52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:92:f3:67:ab:6a:2a:24:9b:44:35:7c:1f:
                    39:d2:5f:61:56:f6:b2:22:e8:9a:64:7e:06:24:fa:
                    57:08:a4:e1:01:a8:35:93:37:4a:1f:e7:7b:e8:47:
                    7e:cc:45:f0:14:e1:fb:d3:c4:92:6f:0f:02:b7:19:
                    00:29:ea:da:39:6c:31:45:ef:19:17:c8:99:9f:b7:
                    9c:66:c2:95:ec:ca:b9:70:e3:45:a9:ca:b0:e9:54:
                    1a:15:7c:b9:95:b0:f9:55:de:90:fb:88:c2:2d:ab:
                    ae:7e:90:15:de:8f:d3:34:66:37:79:58:70:08:08:
                    b3:39:84:f3:6d:5c:99:84:25:8e:f9:b1:06:02:1e:
                    0d:01:96:ea:a7:76:62:94:a8:7f:85:6b:e6:40:88:
                    33:79:9a:c5:6e:7f:4a:75:3a:48:1e:9a:bf:dc:63:
                    5a:7a:73:bb:4c:39:87:f9:ee:1b:9a:fc:be:fe:c2:
                    13:71:0d:7e:cd:04:0b:83:37:bb:8a:93:8b:5e:a9:
                    29:cc:04:89:49:a9:69:45:48:2f:90:a6:e2:95:06:
                    d3:21:53:ca:70:63:58:87:99:27:d8:71:1f:39:ce:
                    a0:77:93:95:7f:93:af:44:4c:fd:63:6f:dc:42:49:
                    c9:0e:14:4e:b7:28:fe:78:24:1e:7a:9d:23:e7:e8:
                    f3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DE:83:9E:0C:89:7E:6A:AD:15:41:50:DB:C1:7D:4F:90:F6:F5:2B
            X509v3 Authority Key Identifier:
                keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/vt6DngyJfmqtFUFQ28F9T5D29Ss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9700::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:22:7c:0d:28:96:58:22:b7:45:c6:58:75:b8:ca:08:4c:18:
         55:91:22:bf:6d:91:46:79:78:99:40:6d:2c:42:dd:2e:a3:06:
         ce:37:1c:b6:62:50:80:46:b1:c1:c8:a5:5a:83:10:8f:17:a4:
         99:8b:49:2b:61:4d:4a:21:66:1a:14:ad:8d:ef:27:1f:99:ec:
         12:92:04:a5:2a:6c:e3:16:4c:4a:b8:44:d7:73:bf:1b:28:b7:
         26:7a:7a:a8:a9:31:3f:c0:eb:3c:94:e6:74:bd:8f:12:71:e0:
         bd:31:37:53:e6:79:6f:0b:6a:54:25:11:a1:01:16:68:13:94:
         6c:ad:30:7f:7e:19:f3:7b:91:ee:70:ef:56:84:a7:9a:33:b5:
         73:65:31:2c:89:23:69:0d:36:74:2b:38:4d:c9:6e:c7:4c:d5:
         ea:3c:0a:0d:d7:63:cf:18:dc:13:48:b4:38:43:22:f5:31:bc:
         07:61:cd:52:e6:ff:50:79:2a:50:53:d7:76:1e:76:00:fe:66:
         4f:b2:a9:fb:15:bf:d1:a8:09:91:02:7b:94:a6:ae:ae:dd:ce:
         0b:c2:a2:f3:27:d3:1a:e3:45:68:e7:2f:a0:d1:97:6a:9a:c5:
         64:f2:19:71:d1:a7:87:62:e6:5d:83:23:23:e5:cf:db:84:6d:
         0a:94:c5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----