Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DAJmvubfbV2MSQXFifAboOS7Hk4.roa
File:                     DAJmvubfbV2MSQXFifAboOS7Hk4.roa (raw, json)
Hash identifier:          vAU6BC+tipT+CQr6dPuAoWeNA74hWrCwxOmbeJSh5dw=
Subject key identifier:   0C:02:66:BE:E6:DF:6D:5D:8C:49:05:C5:89:F0:1B:A0:E4:BB:1E:4E
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       018CC9BC21DA61F15A426C1D1BC1FFD832E2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DAJmvubfbV2MSQXFifAboOS7Hk4.roa
Signing time:             Tue 02 Jan 2024 10:33:19 +0000
ROA not before:           Tue 02 Jan 2024 10:33:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29465
IP address blocks:        2a13:e107:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 09:40:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:21:da:61:f1:5a:42:6c:1d:1b:c1:ff:d8:32:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jan  2 10:33:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0c0266bee6df6d5d8c4905c589f01ba0e4bb1e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:e3:09:ad:2f:92:07:3a:96:24:5c:f8:98:
                    d6:96:77:5d:25:e4:f1:75:6c:16:3b:11:27:5a:86:
                    47:2b:e7:42:b7:52:c7:12:fe:21:2a:6b:07:f9:d9:
                    42:19:45:ab:ef:2f:c0:0e:79:53:1b:6a:21:fa:33:
                    ec:ad:6d:d6:b1:84:cf:fc:c1:8b:b3:2e:59:28:15:
                    7e:f8:42:9a:16:49:3b:56:4f:95:5f:4c:14:ed:c3:
                    f4:80:ae:b2:3a:85:f9:06:76:aa:e0:2c:8d:d4:28:
                    b1:51:61:06:3b:43:3b:0f:83:78:d5:60:69:87:7d:
                    df:1e:83:38:20:c3:e5:55:00:a7:fb:02:c5:3a:91:
                    0d:f1:60:eb:ae:dc:bf:a1:d2:23:39:55:d6:de:4f:
                    03:30:bb:c7:8f:e7:08:5a:02:ff:93:16:21:ca:a5:
                    d6:d1:f9:4c:1e:78:c8:aa:af:b9:64:94:c8:5e:43:
                    8d:c8:ed:46:28:8b:52:25:99:3e:37:c4:d4:f6:14:
                    be:66:5b:03:b2:52:f6:e6:41:38:16:d4:9b:d8:cc:
                    83:9b:9e:5f:80:9b:9e:ef:d2:46:da:83:8a:69:8f:
                    c4:f7:41:33:17:dd:4c:15:03:1e:f8:c8:2a:8a:e5:
                    5d:27:e1:0a:7f:c5:7d:c8:9b:91:70:6c:bc:cf:80:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:02:66:BE:E6:DF:6D:5D:8C:49:05:C5:89:F0:1B:A0:E4:BB:1E:4E
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DAJmvubfbV2MSQXFifAboOS7Hk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:e107:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:d9:8f:60:0b:a0:00:26:00:32:70:67:ec:f8:a8:82:2d:a6:
         de:d2:bc:ee:20:7a:54:12:e3:cc:7c:c5:e7:fe:5b:94:80:5c:
         87:c5:2d:da:d2:83:d4:70:40:c9:1e:90:b2:4b:67:2c:5e:8b:
         3b:9f:3b:07:14:f5:b3:bf:bd:02:49:4a:13:93:4f:e6:bd:24:
         14:c0:b9:ab:98:2f:5f:18:47:fa:d5:62:f9:98:9d:bb:75:fc:
         91:08:d0:8e:de:0a:7a:d9:e1:bf:87:83:b5:bc:5b:1c:05:c2:
         49:9d:42:37:d3:79:81:cc:ee:8b:b7:37:c1:4b:14:22:2f:fc:
         6e:8a:a5:7f:5b:98:17:3d:24:60:88:88:d9:b2:ea:9d:4b:57:
         da:b0:a0:13:1e:11:a4:e1:7d:5f:03:f4:de:0a:19:48:84:b7:
         e4:1e:10:47:f3:43:b6:4f:6f:0d:61:4a:14:f6:c2:2b:44:08:
         ee:22:28:e9:97:1a:02:6d:d4:ed:a5:a7:1b:cb:45:cb:32:14:
         ac:aa:10:9e:a8:0e:9f:6f:ab:8d:50:f8:21:2e:ab:e2:9b:63:
         b6:c2:de:f0:fa:c1:48:36:ca:a8:7b:c9:bc:74:d6:67:46:a4:
         3a:2b:a1:1d:ce:4c:df:bf:84:62:84:80:f1:48:1d:41:bc:e6:
         77:7f:49:c5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzJvCHaYfFaQmwdG8H/2DLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMTAyMTAzMzE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzAyNjZiZWU2ZGY2ZDVkOGM0OTA1YzU4OWYwMWJhMGU0YmIxZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXLjCa0vkgc6liRc+JjWlnddJeTx
dWwWOxEnWoZHK+dCt1LHEv4hKmsH+dlCGUWr7y/ADnlTG2oh+jPsrW3WsYTP/MGL
sy5ZKBV++EKaFkk7Vk+VX0wU7cP0gK6yOoX5Bnaq4CyN1CixUWEGO0M7D4N41WBp
h33fHoM4IMPlVQCn+wLFOpEN8WDrrty/odIjOVXW3k8DMLvHj+cIWgL/kxYhyqXW
0flMHnjIqq+5ZJTIXkONyO1GKItSJZk+N8TU9hS+ZlsDslL25kE4FtSb2MyDm55f
gJue79JG2oOKaY/E90EzF91MFQMe+MgqiuVdJ+EKf8V9yJuRcGy8z4AlAwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAwCZr7m321djEkFxYnwG6Dkux5OMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvREFKbXZ1YmZiVjJNU1FYRmlmQWJvT1M3SGs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhPhBwAH
MA0GCSqGSIb3DQEBCwUAA4IBAQDD2Y9gC6AAJgAycGfs+KiCLabe0rzuIHpUEuPM
fMXn/luUgFyHxS3a0oPUcEDJHpCyS2csXos7nzsHFPWzv70CSUoTk0/mvSQUwLmr
mC9fGEf61WL5mJ27dfyRCNCO3gp62eG/h4O1vFscBcJJnUI303mBzO6LtzfBSxQi
L/xuiqV/W5gXPSRgiIjZsuqdS1fasKATHhGk4X1fA/TeChlIhLfkHhBH80O2T28N
YUoU9sIrRAjuIijplxoCbdTtpacby0XLMhSsqhCeqA6fb6uNUPghLqvim2O2wt7w
+sFINsqoe8m8dNZnRqQ6K6Edzkzfv4RihIDxSB1BvOZ3f0nF
-----END CERTIFICATE-----