Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eyvjBtq8mBvatuRARhdJruZ1T3w.roa
File:                     eyvjBtq8mBvatuRARhdJruZ1T3w.roa (raw, json)
Hash identifier:          gjkV1Tzp39tu3iXHrUC4IwiGqLq+h41+6Musb3K62Qo=
Subject key identifier:   7B:2B:E3:06:DA:BC:98:1B:DA:B6:E4:40:46:17:49:AE:E6:75:4F:7C
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0191D73AED4E2CA5CEBDC55A76971F45F617
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eyvjBtq8mBvatuRARhdJruZ1T3w.roa
Signing time:             Mon 09 Sep 2024 14:40:48 +0000
ROA not before:           Mon 09 Sep 2024 14:40:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215523
IP address blocks:        2a0f:30c0::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d7:3a:ed:4e:2c:a5:ce:bd:c5:5a:76:97:1f:45:f6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Sep  9 14:40:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7b2be306dabc981bdab6e440461749aee6754f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:e3:38:88:5c:f9:19:ba:7c:94:3c:6b:ab:
                    00:dc:ec:30:a2:8e:33:e5:e5:cb:e4:68:8f:90:d2:
                    be:df:31:09:c1:b5:10:61:b7:df:da:7d:0f:d8:9f:
                    b0:6d:1a:90:14:0f:08:ba:27:47:dd:fa:ae:8a:ea:
                    96:5d:be:31:77:97:24:c7:c4:8d:7f:31:80:7b:1d:
                    14:c9:fd:a3:00:5e:d4:f4:e4:4b:c4:54:52:3f:ba:
                    37:21:5b:53:0e:61:7d:39:8f:1b:86:01:1e:f5:a0:
                    76:d3:d7:95:b0:0c:54:b1:06:25:96:e9:18:18:e5:
                    9e:ee:74:0e:6e:ae:05:b7:e7:17:9f:d7:9d:a6:8e:
                    f5:da:54:8a:7b:46:29:81:33:8d:b0:79:a6:1c:e4:
                    bb:b5:67:a0:21:88:a8:d2:b4:12:dc:cc:53:f6:8c:
                    4d:99:b2:a3:0b:55:1f:58:55:11:a5:46:26:83:f1:
                    f2:50:83:66:2f:3e:26:e8:89:a0:40:99:f8:98:6b:
                    6a:e5:ff:f0:f7:df:e7:81:f5:bb:c5:bd:1d:cc:01:
                    4c:17:37:44:1c:e1:b1:c8:27:f8:2c:ad:b1:d3:64:
                    82:e0:57:b3:fb:bf:97:fd:7c:dc:ac:45:02:62:cc:
                    74:7b:aa:bb:33:19:13:86:d8:a4:9c:08:dc:a4:0c:
                    22:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2B:E3:06:DA:BC:98:1B:DA:B6:E4:40:46:17:49:AE:E6:75:4F:7C
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eyvjBtq8mBvatuRARhdJruZ1T3w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:30c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5a:75:ae:c1:d5:b7:b1:47:52:59:68:d6:7c:00:52:ef:18:12:
         53:02:a1:d8:81:fb:7b:aa:eb:f2:38:58:ec:b8:e5:3f:e6:69:
         0b:fb:37:d0:bc:dd:ba:65:51:4a:a4:2f:dc:e4:32:e1:c9:73:
         0c:41:64:39:19:47:28:9b:9e:1b:a3:69:df:60:f1:53:b8:2f:
         0c:e1:c3:5b:04:6f:d0:a2:4b:3e:df:9a:d7:1d:2c:8d:41:aa:
         6b:86:15:7b:24:98:87:4b:6a:28:b4:0f:34:b0:b6:00:99:67:
         4a:18:3c:a3:db:d1:a1:25:f1:7d:8c:bf:ca:14:4c:fc:c0:c4:
         f1:4d:04:b1:fa:e7:f5:5d:a7:8c:d4:32:dc:3c:bc:db:95:ae:
         bf:d6:84:39:6b:2e:50:14:2f:d4:16:57:b9:8f:bd:1b:8c:c2:
         74:bf:69:19:ad:6a:fd:a3:5b:22:82:4b:d4:b7:92:ff:60:27:
         17:88:c9:6a:dd:35:2f:a7:8b:58:2e:75:f5:c0:2a:70:da:7b:
         ff:03:a2:f7:9e:66:04:64:cb:de:13:b2:37:84:5b:bc:4a:09:
         2a:1f:4a:f3:b3:0e:71:d1:b3:90:7a:5c:81:36:3c:b8:d0:1e:
         b6:85:57:ec:54:e0:20:61:13:16:d6:c3:2c:01:63:cd:8a:49:
         e3:39:ec:b5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZHXOu1OLKXOvcVadpcfRfYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwOTA5MTQ0MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjJiZTMwNmRhYmM5ODFiZGFiNmU0NDA0NjE3NDlhZWU2NzU0ZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp7jOIhc+Rm6fJQ8a6sA3Owwoo4z
5eXL5GiPkNK+3zEJwbUQYbff2n0P2J+wbRqQFA8IuidH3fquiuqWXb4xd5ckx8SN
fzGAex0Uyf2jAF7U9ORLxFRSP7o3IVtTDmF9OY8bhgEe9aB209eVsAxUsQYllukY
GOWe7nQObq4Ft+cXn9edpo712lSKe0YpgTONsHmmHOS7tWegIYio0rQS3MxT9oxN
mbKjC1UfWFURpUYmg/HyUINmLz4m6ImgQJn4mGtq5f/w99/ngfW7xb0dzAFMFzdE
HOGxyCf4LK2x02SC4Fez+7+X/XzcrEUCYsx0e6q7MxkThtiknAjcpAwiWwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHsr4wbavJgb2rbkQEYXSa7mdU98MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZXl2akJ0cThtQnZhdHVSQVJoZEpydVoxVDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg8wwDAN
BgkqhkiG9w0BAQsFAAOCAQEAWnWuwdW3sUdSWWjWfABS7xgSUwKh2IH7e6rr8jhY
7LjlP+ZpC/s30LzdumVRSqQv3OQy4clzDEFkORlHKJueG6Np32DxU7gvDOHDWwRv
0KJLPt+a1x0sjUGqa4YVeySYh0tqKLQPNLC2AJlnShg8o9vRoSXxfYy/yhRM/MDE
8U0Esfrn9V2njNQy3Dy825Wuv9aEOWsuUBQv1BZXuY+9G4zCdL9pGa1q/aNbIoJL
1LeS/2AnF4jJat01L6eLWC519cAqcNp7/wOi955mBGTL3hOyN4RbvEoJKh9K87MO
cdGzkHpcgTY8uNAetoVX7FTgIGETFtbDLAFjzYpJ4znstQ==
-----END CERTIFICATE-----