Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GaDDxNPKB5kLcL6Vk5H9R6zq2rQ.roa
File:                     GaDDxNPKB5kLcL6Vk5H9R6zq2rQ.roa (raw, json)
Hash identifier:          sFDqOJjTplN2v6Gm4aiMtMaK+zDzHGBRzlQljK1lXdY=
Subject key identifier:   19:A0:C3:C4:D3:CA:07:99:0B:70:BE:95:93:91:FD:47:AC:EA:DA:B4
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01934AC1B90F52E6EB20D818FCCD657D315B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GaDDxNPKB5kLcL6Vk5H9R6zq2rQ.roa
Signing time:             Wed 20 Nov 2024 18:07:10 +0000
ROA not before:           Wed 20 Nov 2024 18:07:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     53356
IP address blocks:        2a0f:2dc0::/29 maxlen: 29
                          2a0f:3040::/29 maxlen: 29
                          2a0f:3240::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:4a:c1:b9:0f:52:e6:eb:20:d8:18:fc:cd:65:7d:31:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Nov 20 18:07:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=19a0c3c4d3ca07990b70be959391fd47aceadab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:fc:ad:06:97:8a:41:e2:0a:6f:6a:ea:0f:
                    c6:56:c0:25:6b:2b:e3:47:8d:b5:57:e0:4a:a1:54:
                    9f:d6:71:50:a7:8a:40:8c:e1:65:fa:d2:e4:c2:81:
                    9a:06:e4:cc:5f:d4:e9:f4:c1:f0:9e:9a:74:9b:62:
                    b2:8e:da:00:8c:38:df:0c:4d:73:8f:35:92:04:fe:
                    8e:f7:ae:59:4a:85:fb:af:0c:40:94:3d:7e:a6:a2:
                    4a:e4:34:a1:5c:e1:33:3a:72:f1:39:be:47:66:ce:
                    c7:33:87:b7:81:6c:11:9d:05:aa:4d:a8:64:7b:86:
                    26:db:44:42:17:5c:6b:c4:04:ee:16:1d:39:e6:10:
                    fd:72:17:40:12:ca:c1:1c:cb:9c:ed:4e:b5:42:6f:
                    20:d3:f9:f6:97:07:0d:9b:b9:26:60:64:b5:5e:78:
                    c7:93:c5:d3:7b:6f:0d:0b:79:e9:2f:21:3e:0a:be:
                    7d:25:cd:c0:d5:d4:11:c7:51:ea:73:16:ff:28:98:
                    8b:fd:12:ed:72:7a:db:84:e5:14:7c:a5:b9:11:ed:
                    b7:90:1b:6e:83:28:fe:05:40:ef:34:74:b3:95:e6:
                    bd:14:49:52:5a:fb:eb:7c:c1:19:72:8f:e6:c8:3c:
                    49:54:4d:97:4d:f3:22:31:07:fa:62:f7:20:8b:53:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A0:C3:C4:D3:CA:07:99:0B:70:BE:95:93:91:FD:47:AC:EA:DA:B4
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/GaDDxNPKB5kLcL6Vk5H9R6zq2rQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:2dc0::/29
                  2a0f:3040::/29
                  2a0f:3240::/29

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:05:5b:ab:79:c0:74:fc:05:ae:1d:01:00:84:71:1c:78:
         f9:4d:de:93:95:44:e6:93:f7:47:0f:fa:75:0e:10:81:db:ef:
         29:eb:2a:39:74:fc:3e:24:af:75:81:50:76:4e:63:05:9d:af:
         69:4f:5d:1c:9d:d5:a0:68:2d:fb:e3:e5:7d:dc:9a:d9:dc:e5:
         85:5a:b7:41:da:99:bf:d2:d1:1a:2f:cc:c6:c8:6d:32:28:cb:
         94:9f:72:27:fc:10:2f:82:07:68:e5:91:62:3d:27:7c:c3:67:
         08:a5:1b:84:88:74:cb:cf:d5:3f:09:98:77:83:d7:53:ef:61:
         ef:e3:94:b3:7f:90:b1:f1:e9:41:96:52:ff:42:08:4b:d6:e5:
         bf:ae:f0:15:06:48:aa:a2:1d:5f:60:ec:38:c8:7a:29:44:39:
         6e:b2:3c:08:7c:f7:49:15:86:b8:23:f6:e2:23:4c:61:0f:57:
         e3:05:f1:a8:7b:43:7e:dd:e2:2b:ce:03:45:80:fc:88:6c:57:
         36:eb:63:07:fb:09:18:40:a6:80:14:58:ea:bd:8c:61:82:e3:
         a1:65:46:8d:d1:90:2b:d3:ba:70:f0:6c:a2:57:ad:d5:c0:cc:
         2c:39:1b:78:80:0f:bc:0c:32:c3:05:56:e5:64:40:e1:9d:d7:
         df:0f:d5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----