Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DKJWemfNS4M9iXrb0VvpGIFvKPA.roa
File:                     DKJWemfNS4M9iXrb0VvpGIFvKPA.roa (raw, json)
Hash identifier:          Xng+TpILX4KD6SqORosnYf/ITnrhYj2O0alXJMCojX8=
Subject key identifier:   0C:A2:56:7A:67:CD:4B:83:3D:89:7A:DB:D1:5B:E9:18:81:6F:28:F0
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01913BC929CD730E88FE7F6D73B20BD90CA2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DKJWemfNS4M9iXrb0VvpGIFvKPA.roa
Signing time:             Sat 10 Aug 2024 10:15:24 +0000
ROA not before:           Sat 10 Aug 2024 10:15:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197730
IP address blocks:        2a0f:3d80:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:3b:c9:29:cd:73:0e:88:fe:7f:6d:73:b2:0b:d9:0c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Aug 10 10:15:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0ca2567a67cd4b833d897adbd15be918816f28f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:d7:bb:d0:74:95:f8:86:66:4a:e2:52:47:
                    cc:bb:34:b3:3f:ed:fc:29:97:f3:05:2f:bd:e7:b0:
                    6b:1b:58:a9:3c:7f:e6:24:84:3b:6c:1f:84:eb:56:
                    64:98:47:19:56:77:12:c2:b6:0b:85:be:23:b6:1e:
                    cd:53:2f:3f:51:1b:bb:b9:99:82:08:ed:93:b9:77:
                    4a:24:4b:24:da:27:a6:93:1d:9d:ab:e1:92:8f:41:
                    2f:d8:57:c5:9a:57:39:24:89:8f:7c:ca:15:72:28:
                    90:7b:0b:6b:52:42:77:97:4a:cd:f3:bf:8b:b9:45:
                    44:34:6a:43:44:1a:90:58:bb:67:67:16:2d:b0:57:
                    be:bc:35:25:f9:71:ee:d6:0a:0f:73:00:57:81:8e:
                    87:4c:4f:9f:17:23:0a:39:0e:d9:c5:1e:bf:a4:a5:
                    05:91:a2:02:f3:63:60:c2:c0:7c:a2:7c:46:5e:e5:
                    78:b1:e1:e5:3d:89:dd:7f:d6:df:c8:d9:df:02:c0:
                    c5:19:f1:0b:b0:ce:6f:ab:65:a3:df:0b:2e:b9:29:
                    bf:cd:c5:26:85:44:39:30:43:a8:fb:00:41:71:b3:
                    5f:18:08:d4:9f:e3:34:48:25:fa:48:fb:2f:69:19:
                    42:ed:e0:4f:63:a4:5f:03:18:84:f4:34:91:fe:00:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A2:56:7A:67:CD:4B:83:3D:89:7A:DB:D1:5B:E9:18:81:6F:28:F0
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DKJWemfNS4M9iXrb0VvpGIFvKPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:3d80:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:e9:5a:29:53:71:ec:f9:87:3b:b6:dd:48:93:a4:ac:9f:d1:
         55:94:5a:f4:56:cb:ff:e3:1d:ca:f6:ee:22:83:a8:fd:7d:ef:
         25:a5:1c:e2:6d:5f:fc:d8:d2:9e:9e:20:fe:6b:c5:52:c7:c0:
         9c:94:49:df:f6:a4:2a:12:ec:23:dd:e3:66:f3:cd:d6:c8:bf:
         a5:c4:98:73:39:14:ce:4a:9b:04:67:f2:07:44:fe:82:f2:aa:
         d0:bd:3d:8b:04:f1:89:3b:0e:35:dd:c0:2a:a2:5d:91:35:92:
         ce:24:4c:77:4b:1f:d6:59:a7:c1:20:c3:7f:23:87:f7:e1:ec:
         32:a7:f0:0a:d0:f7:63:1f:39:e6:3f:96:2f:8d:24:53:b4:4d:
         a5:cd:86:87:d2:7b:09:22:16:fc:c3:e1:05:57:d4:36:e2:ca:
         fc:e6:9f:9d:d8:0a:75:d2:84:bb:b3:28:1a:f6:33:33:01:37:
         ea:94:fc:2a:82:c0:be:f4:6b:fe:f4:dd:29:c2:06:bc:e1:36:
         30:37:22:b1:01:07:46:b8:04:0d:ea:78:39:6f:ce:55:90:33:
         5b:6a:2c:fa:4d:84:78:11:3d:0a:60:32:6b:15:c8:26:05:76:
         78:e8:74:45:4e:f8:de:a1:98:6d:1e:b7:ba:19:f0:ee:ef:93:
         04:4f:05:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----