Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/e1vns9In-iVbZnI9Eh1xzpDwzYk.roa
File:                     e1vns9In-iVbZnI9Eh1xzpDwzYk.roa (raw, json)
Hash identifier:          r1ueevGwSUIPsbA4x3yLrXhRsOR/co0ICk8doSnMTG0=
Subject key identifier:   7B:5B:E7:B3:D2:27:FA:25:5B:66:72:3D:12:1D:71:CE:90:F0:CD:89
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       01921D97ED0B32249125242127805B69EE84
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/e1vns9In-iVbZnI9Eh1xzpDwzYk.roa
Signing time:             Mon 23 Sep 2024 06:35:48 +0000
ROA not before:           Mon 23 Sep 2024 06:35:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     138840
IP address blocks:        2a0e:1a83:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:1d:97:ed:0b:32:24:91:25:24:21:27:80:5b:69:ee:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Sep 23 06:35:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7b5be7b3d227fa255b66723d121d71ce90f0cd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:91:0a:ed:1a:a0:9e:d7:81:2a:a6:2f:b6:
                    6c:32:06:4e:9f:19:9c:fc:6e:b3:48:75:25:01:50:
                    d0:7e:24:5e:1d:9d:05:a1:15:97:5f:86:0d:46:1b:
                    e0:89:03:96:db:40:22:b0:00:1b:b9:3f:03:18:96:
                    d3:e0:60:89:cf:aa:8b:1a:0e:50:43:53:ee:35:1e:
                    36:b5:e2:e6:ba:51:cc:a8:7a:a7:9c:40:db:5a:1b:
                    2e:12:95:07:1a:c5:2b:66:47:65:10:81:a7:f1:cb:
                    c4:25:d7:f4:16:f9:c9:c4:bd:70:3f:7f:e1:66:1f:
                    3c:4b:37:d4:d5:b3:62:20:b1:b3:ae:e8:f4:e8:64:
                    c8:cb:d3:d2:99:00:87:81:56:f2:bc:45:17:11:27:
                    f4:2d:06:8d:b7:1c:1e:95:93:c2:50:27:12:16:be:
                    21:88:35:fa:39:5e:e1:47:d2:78:42:16:89:35:d1:
                    ec:00:7b:03:7d:f7:56:32:20:6b:b6:94:ea:05:8c:
                    c7:7d:c3:5c:82:c5:13:43:4c:36:9a:84:8b:1a:57:
                    d0:1d:e9:b7:73:f8:6f:ae:75:77:5e:88:65:16:81:
                    a9:30:d5:f8:14:ad:7f:be:30:5b:38:fa:8e:f6:d5:
                    cf:63:e8:5d:e1:c0:cf:70:94:4c:9a:29:15:74:92:
                    23:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5B:E7:B3:D2:27:FA:25:5B:66:72:3D:12:1D:71:CE:90:F0:CD:89
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/e1vns9In-iVbZnI9Eh1xzpDwzYk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:1a83:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:60:ab:c0:68:d2:24:ef:b7:fe:ff:6e:6e:2a:14:85:d0:
         6e:a5:af:2f:dd:80:c5:84:5d:96:bb:b5:35:29:7e:5b:2c:f6:
         f7:34:a9:33:c4:ec:d3:54:a8:13:73:25:26:ed:64:76:99:d6:
         05:d0:24:c6:8b:93:c5:71:7e:b6:da:20:ea:87:96:7d:43:65:
         fb:00:ca:11:0f:2d:e8:47:fa:a3:f0:22:f7:ab:19:b5:2f:3e:
         bb:21:69:e8:e8:e9:67:44:1f:ca:14:7e:28:89:df:8a:31:b2:
         c9:94:92:60:6d:ae:c6:8c:7b:b6:5e:d7:9c:88:3a:72:67:d2:
         e3:1c:ce:bf:bb:ad:23:5a:0a:b9:79:7a:80:6d:c4:08:7f:42:
         b5:20:0f:7f:f7:39:a8:b5:61:43:4d:15:4e:f8:94:8c:55:7f:
         3c:13:9b:1e:e8:82:91:3a:8a:26:5f:0b:f2:29:17:72:24:8e:
         d9:73:90:eb:8e:c5:36:6e:80:49:95:b6:5f:af:e3:f0:3d:92:
         09:23:9b:61:48:a7:b6:b2:67:57:d7:5c:7e:57:aa:ab:6e:38:
         27:6c:22:fc:90:22:4a:16:af:97:c1:d2:cd:40:a8:ea:1c:9b:
         a0:5c:2f:d7:9a:99:b1:f3:3f:85:ba:21:de:35:fa:84:db:a2:
         af:7b:76:92
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZIdl+0LMiSRJSQhJ4Bbae6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwOTIzMDYzNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjViZTdiM2QyMjdmYTI1NWI2NjcyM2QxMjFkNzFjZTkwZjBjZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuaRCu0aoJ7XgSqmL7ZsMgZOnxmc
/G6zSHUlAVDQfiReHZ0FoRWXX4YNRhvgiQOW20AisAAbuT8DGJbT4GCJz6qLGg5Q
Q1PuNR42teLmulHMqHqnnEDbWhsuEpUHGsUrZkdlEIGn8cvEJdf0FvnJxL1wP3/h
Zh88SzfU1bNiILGzruj06GTIy9PSmQCHgVbyvEUXESf0LQaNtxwelZPCUCcSFr4h
iDX6OV7hR9J4QhaJNdHsAHsDffdWMiBrtpTqBYzHfcNcgsUTQ0w2moSLGlfQHem3
c/hvrnV3XohlFoGpMNX4FK1/vjBbOPqO9tXPY+hd4cDPcJRMmikVdJIj9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHtb57PSJ/olW2ZyPRIdcc6Q8M2JMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZTF2bnM5SW4taVZiWm5JOUVoMXh6cER3ellrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg4agwEA
MA0GCSqGSIb3DQEBCwUAA4IBAQCM32CrwGjSJO+3/v9ubioUhdBupa8v3YDFhF2W
u7U1KX5bLPb3NKkzxOzTVKgTcyUm7WR2mdYF0CTGi5PFcX622iDqh5Z9Q2X7AMoR
Dy3oR/qj8CL3qxm1Lz67IWno6OlnRB/KFH4oid+KMbLJlJJgba7GjHu2XteciDpy
Z9LjHM6/u60jWgq5eXqAbcQIf0K1IA9/9zmotWFDTRVO+JSMVX88E5se6IKROoom
XwvyKRdyJI7Zc5DrjsU2boBJlbZfr+PwPZIJI5thSKe2smdX11x+V6qrbjgnbCL8
kCJKFq+XwdLNQKjqHJugXC/Xmpmx8z+FuiHeNfqE26Kve3aS
-----END CERTIFICATE-----