Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/pY7XJS0TxyWrQOs27vxtE6mePps.roa
File:                     pY7XJS0TxyWrQOs27vxtE6mePps.roa (raw, json)
Hash identifier:          pJFrzcJls1Lj9uCA7U0u5GilSgebKbtMn5DxyK67oEg=
Subject key identifier:   A5:8E:D7:25:2D:13:C7:25:AB:40:EB:36:EE:FC:6D:13:A9:9E:3E:9B
Certificate issuer:       /CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Certificate serial:       0191381EBFBA8CC843759ED21EE383BC00DA
Authority key identifier: E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/pY7XJS0TxyWrQOs27vxtE6mePps.roa
Signing time:             Fri 09 Aug 2024 17:10:24 +0000
ROA not before:           Fri 09 Aug 2024 17:10:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210644
IP address blocks:        2a12:5940::/32 maxlen: 36
                          2a12:5940:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:38:1e:bf:ba:8c:c8:43:75:9e:d2:1e:e3:83:bc:00:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
        Validity
            Not Before: Aug  9 17:10:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a58ed7252d13c725ab40eb36eefc6d13a99e3e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:08:ca:11:30:73:af:b3:f0:60:ce:d2:49:
                    42:77:b7:3c:40:c9:88:0d:9a:cd:81:4b:05:0b:e2:
                    3a:a0:c9:4a:b5:53:10:1b:af:7f:36:cf:1c:93:a4:
                    ce:60:da:17:9d:f3:0b:1a:ac:c1:0c:8d:b8:e3:93:
                    2f:cf:05:e9:99:b0:3b:63:68:d2:79:cc:5f:ad:48:
                    d1:03:84:ea:83:55:42:b6:d3:29:c7:a0:a1:ff:6d:
                    79:86:7b:df:3a:08:88:b5:d4:e0:cb:45:b5:f6:f1:
                    3f:df:f0:1d:5e:c8:86:da:01:b4:c6:62:fa:a7:17:
                    56:5f:ec:ff:8e:7f:56:a0:a6:17:aa:10:60:c3:81:
                    9c:79:13:de:f3:a4:f4:6b:e8:f3:2b:77:0d:49:87:
                    17:b8:60:1d:dd:de:46:c3:c1:dc:4d:58:6a:96:c2:
                    96:73:13:37:63:8d:f0:47:81:8b:f8:af:d8:37:2b:
                    ea:22:29:32:e5:2f:a0:ef:f4:a5:ee:95:65:d2:b6:
                    0a:df:f8:ae:40:01:f0:5f:29:3e:a0:88:1a:86:c3:
                    cb:e7:7d:83:91:d7:49:69:bd:83:d0:c6:98:ad:ce:
                    b8:9c:8b:e1:40:81:04:ae:3f:d7:a3:6a:3d:5b:4d:
                    28:ac:f6:f2:66:a0:2d:90:a3:bc:6d:a2:c1:4e:c6:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8E:D7:25:2D:13:C7:25:AB:40:EB:36:EE:FC:6D:13:A9:9E:3E:9B
            X509v3 Authority Key Identifier:
                keyid:E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/pY7XJS0TxyWrQOs27vxtE6mePps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:5940::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:fd:11:4c:83:8d:69:c7:66:a1:dc:58:df:78:cf:29:a6:13:
         ad:9a:dc:50:7c:24:60:70:b5:4d:34:e0:e9:0e:c3:5e:76:d0:
         20:7f:af:fc:d2:5e:89:67:2b:3e:35:6d:0e:16:34:37:3d:ee:
         d6:d4:e3:e6:0d:32:1d:7f:04:6a:a9:5c:be:fb:9a:1a:79:27:
         ef:53:3b:f3:f2:c7:aa:e5:f3:e4:07:ae:e8:34:ef:af:72:fd:
         fa:f1:0f:48:fd:eb:fe:7c:a8:59:b0:78:cc:93:fd:ee:da:3a:
         59:16:57:77:8f:fb:63:1c:1c:13:01:1a:56:67:ac:96:c3:23:
         5f:42:fc:bc:6d:2b:3a:a4:89:87:f7:a8:bb:cc:f5:4b:79:f4:
         d1:0b:0f:4b:8e:8b:98:a1:fb:70:d5:e0:78:32:7a:7a:a0:f1:
         dd:af:d7:5e:2e:49:e3:ba:aa:57:8a:2b:35:0b:0c:7d:ea:2c:
         e7:12:70:8f:69:a1:fd:de:49:67:57:6e:bc:42:26:48:1e:ae:
         c8:6b:83:7d:9a:f7:6e:25:d1:0f:1e:a9:43:28:f7:f6:ed:7f:
         14:b2:d6:0b:f3:30:4f:0c:e3:dc:a9:a8:a5:dd:c0:49:0b:f6:
         1f:8a:f4:60:3b:ca:a9:57:a3:d6:9e:3c:45:50:11:2a:8b:bc:
         49:ae:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----