Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/iWrNkqGa63IAzrUjX_y3EbmF32c.roa
File:                     iWrNkqGa63IAzrUjX_y3EbmF32c.roa (raw, json)
Hash identifier:          n38NNifXDOoma1NToeXnLZTI20GVa7E2UhetcC5Jbww=
Subject key identifier:   89:6A:CD:92:A1:9A:EB:72:00:CE:B5:23:5F:FC:B7:11:B9:85:DF:67
Certificate issuer:       /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial:       018CC5014BA7BC140DFFCD734922220A48A8
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/iWrNkqGa63IAzrUjX_y3EbmF32c.roa
Signing time:             Mon 01 Jan 2024 12:30:45 +0000
ROA not before:           Mon 01 Jan 2024 12:30:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15557
IP address blocks:        2a00:a080::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:4b:a7:bc:14:0d:ff:cd:73:49:22:22:0a:48:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
        Validity
            Not Before: Jan  1 12:30:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=896acd92a19aeb7200ceb5235ffcb711b985df67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:67:a1:ef:01:c4:8a:50:c1:26:73:48:75:
                    ca:90:53:a2:ad:55:b8:de:c8:e6:2c:a7:da:12:f6:
                    d9:cc:68:9c:da:ec:fb:f7:85:70:92:38:ae:2d:b9:
                    fe:3b:3c:65:4a:3e:9c:40:fc:10:f0:ea:0a:c1:9a:
                    53:b6:21:45:19:be:ee:36:77:a4:a6:b0:c7:d9:c3:
                    f7:63:c3:a2:4d:95:93:99:60:a6:a7:8c:5b:d5:49:
                    b0:89:7e:b4:5d:ce:4b:d5:2f:a0:67:b1:67:ce:d1:
                    03:50:9b:18:bf:7a:43:29:36:2d:7e:a1:b9:fd:8c:
                    b5:64:ae:0f:ae:9e:91:fb:fd:aa:61:f1:a0:cf:e3:
                    8c:99:a0:6a:eb:08:f5:1d:c4:9a:9c:c4:3d:c6:35:
                    21:60:ee:fc:a2:4b:7d:2a:1e:4e:c7:8b:d3:39:91:
                    7d:24:0e:af:b3:12:a3:fb:c8:2d:86:48:ed:41:e3:
                    a2:de:4c:0a:1b:9c:f2:2e:71:5f:ce:28:d2:f8:9e:
                    80:fd:fe:65:bf:4a:82:0a:6f:8c:3c:9d:3b:a2:8c:
                    dc:19:39:dd:5d:bb:ad:2b:42:08:e2:c3:2e:37:69:
                    21:af:b6:96:4f:03:de:d0:6f:08:4d:9d:99:6b:e3:
                    f0:52:ad:3c:6b:b7:cd:ba:3c:8d:63:3c:a2:5e:f8:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6A:CD:92:A1:9A:EB:72:00:CE:B5:23:5F:FC:B7:11:B9:85:DF:67
            X509v3 Authority Key Identifier:
                keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/iWrNkqGa63IAzrUjX_y3EbmF32c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:a080::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:48:19:08:e7:b8:bd:8b:a8:64:b8:3a:b3:ca:f8:5f:5d:98:
         8e:0d:fb:6e:c5:95:50:76:c0:25:4b:a9:72:18:b2:65:87:49:
         e6:6d:29:7e:2b:1c:05:b8:ec:7d:9d:77:9a:fa:0a:46:3b:db:
         e9:a2:25:74:f6:bd:3b:ee:ae:95:5d:94:96:f9:52:db:4d:4e:
         84:a3:52:b3:25:11:35:61:2c:d1:93:d5:7e:f2:f5:4a:4e:7d:
         d7:a5:9f:5b:d2:43:3c:38:6f:57:dc:b9:77:4b:47:91:37:de:
         fd:45:d9:bc:6c:8b:2f:09:b0:d8:63:43:e2:71:ff:77:80:54:
         99:74:6d:c8:be:5a:31:ea:39:7a:de:a0:ee:fc:22:f5:7b:e6:
         c6:2b:91:b6:0c:64:48:d4:1a:b4:0b:f0:e9:3b:0a:54:86:9b:
         a2:7e:18:93:1a:9c:b6:ce:dc:87:76:64:c3:11:2b:2e:c6:d3:
         18:c9:41:08:db:56:80:34:3c:05:1b:d0:7e:40:11:96:eb:81:
         b6:56:32:56:7f:e1:c8:24:5b:71:15:14:74:4e:b5:0a:e6:34:
         fc:fe:e9:a7:75:8c:4d:f8:95:17:fa:80:e1:6f:1a:01:49:50:
         41:4b:52:e7:0b:f5:88:8f:22:a5:2b:1c:20:80:d6:41:a4:df:
         8a:10:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----