Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/vfGrZ7WnXOfA7s2HZ3J8gsNGwao.roa
File:                     vfGrZ7WnXOfA7s2HZ3J8gsNGwao.roa (raw, json)
Hash identifier:          3296HqDQwN/TngnOEX00vA+NKZGa6l8KU+5SeirYDmA=
Subject key identifier:   BD:F1:AB:67:B5:A7:5C:E7:C0:EE:CD:87:67:72:7C:82:C3:46:C1:AA
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       01927AF0756A0B44A91440CA052AEA83C297
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/vfGrZ7WnXOfA7s2HZ3J8gsNGwao.roa
Signing time:             Fri 11 Oct 2024 09:37:11 +0000
ROA not before:           Fri 11 Oct 2024 09:37:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208745
IP address blocks:        2a01:f900:102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:7a:f0:75:6a:0b:44:a9:14:40:ca:05:2a:ea:83:c2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Oct 11 09:37:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bdf1ab67b5a75ce7c0eecd8767727c82c346c1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:ae:22:44:8c:ce:f0:41:c4:71:36:88:ac:
                    32:4a:0e:02:60:e1:07:ca:67:d5:90:08:66:e1:f5:
                    b1:11:94:73:f1:57:b1:83:94:66:17:66:d6:72:04:
                    e3:3c:2c:1d:a7:d1:d6:19:b9:bf:eb:eb:39:e0:27:
                    a5:d6:41:8c:27:de:85:17:0e:7c:91:ef:a3:89:81:
                    c2:1b:c3:16:a4:3d:ed:f2:94:c4:ad:b5:1c:44:27:
                    68:09:9a:f5:a2:e8:f8:cb:e6:80:ff:cf:34:ed:bf:
                    86:e1:6a:ee:d6:24:f6:e8:7e:a5:42:d6:b4:8f:19:
                    d1:83:3c:12:61:d7:6e:9e:5e:3b:c4:e5:ac:16:7b:
                    d8:d9:ce:7a:06:04:6d:a0:a3:2f:4f:99:05:e9:46:
                    8d:aa:69:28:1b:c6:fb:d8:31:01:52:e3:af:8b:12:
                    0b:66:d3:f9:70:20:7b:2a:13:52:fe:be:22:d2:f8:
                    49:2c:51:22:7d:80:7f:04:13:cd:75:d7:6d:b8:f4:
                    53:cc:8c:5b:3c:cd:a5:f1:92:f8:ac:bf:8b:42:cd:
                    0c:8c:ce:91:5c:5a:b7:9d:b0:b3:9a:97:0e:2c:36:
                    a3:fe:70:90:fc:dd:0d:4e:11:dc:e9:e4:91:0f:ab:
                    ea:86:5b:2e:0c:9d:d1:c9:db:1c:69:dc:7a:21:3d:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F1:AB:67:B5:A7:5C:E7:C0:EE:CD:87:67:72:7C:82:C3:46:C1:AA
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/vfGrZ7WnXOfA7s2HZ3J8gsNGwao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:f900:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:21:98:0d:10:da:a8:f3:8c:46:10:72:ed:dd:cb:43:6a:28:
         ef:74:47:0d:0d:69:c5:89:5e:30:cc:c3:f7:b6:93:44:a2:fa:
         3e:83:21:08:e5:d0:ea:e3:b5:ef:38:c2:f6:40:25:69:72:01:
         03:78:a7:ee:ae:f3:f5:15:a0:93:fb:d9:b4:86:18:aa:00:54:
         01:63:3e:0d:08:6a:42:c0:24:2a:ae:6e:0f:eb:09:46:6b:01:
         82:32:52:5d:2e:01:4f:d3:68:2b:8a:07:d7:86:39:e1:3e:f3:
         1f:6d:f3:3f:d5:76:b9:73:89:51:88:f5:74:b7:88:ef:7a:05:
         0b:e9:9f:b7:f0:24:e8:d1:9f:3e:05:27:4e:41:76:26:8f:4d:
         7a:42:0a:90:ec:84:75:08:ce:6d:f5:d7:60:b9:a8:f4:f3:81:
         19:ef:d8:6e:13:29:30:5c:64:17:3e:16:c5:11:ab:7d:1a:9c:
         a2:60:fd:d5:75:08:d7:59:5f:f7:2c:0d:21:f7:d7:20:bb:ed:
         da:31:ed:41:1f:e3:ea:b3:67:b1:49:97:37:5e:91:ba:f7:67:
         f5:9e:35:aa:a6:79:a8:89:cb:3c:06:90:b8:a8:d7:45:fe:04:
         39:8f:68:ec:44:6d:b5:03:e4:eb:57:b4:f8:af:3f:cc:94:0a:
         9e:9d:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----