Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/KKwyYMQy2AppzAWy5stlzrtSL4I.roa
File:                     KKwyYMQy2AppzAWy5stlzrtSL4I.roa (raw, json)
Hash identifier:          1VXtTA7GEYSGNEtCwo91EQ5SdQBCfCUFYFjtcwZAeZc=
Subject key identifier:   28:AC:32:60:C4:32:D8:0A:69:CC:05:B2:E6:CB:65:CE:BB:52:2F:82
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       018CC348FC2D3BDB40835A8D8E05E7BFBB1B
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/KKwyYMQy2AppzAWy5stlzrtSL4I.roa
Signing time:             Mon 01 Jan 2024 04:29:49 +0000
ROA not before:           Mon 01 Jan 2024 04:29:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203348
IP address blocks:        2001:648:25e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:fc:2d:3b:db:40:83:5a:8d:8e:05:e7:bf:bb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Jan  1 04:29:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=28ac3260c432d80a69cc05b2e6cb65cebb522f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:75:e3:86:8b:50:a4:77:17:ef:09:66:97:ae:
                    44:88:72:55:41:e0:bd:38:18:a2:5e:68:43:87:1e:
                    7b:40:a4:48:02:60:e4:0e:1e:2d:32:5f:52:0b:8c:
                    c9:da:0e:45:f6:69:30:30:87:15:0c:9e:27:6c:ba:
                    e8:76:fc:69:4c:cd:7e:3c:4d:76:1c:9a:2f:15:5c:
                    ec:3c:6c:f5:9e:51:99:f9:94:8d:03:37:39:20:4e:
                    a7:25:88:ba:1b:0f:ff:56:13:a2:23:39:49:a3:23:
                    a0:0e:5e:58:6e:48:25:77:a2:a1:a2:8d:38:1d:ec:
                    34:81:2d:a3:a6:85:58:11:40:fd:32:1f:fb:a3:93:
                    4b:c1:6b:7e:91:28:a9:a3:57:bd:67:9d:1b:fa:8c:
                    51:e8:49:2c:e3:85:b4:c9:de:bf:1b:36:f4:33:24:
                    5d:4d:7d:c7:b6:92:db:fe:bc:25:2b:10:f4:13:ae:
                    f1:0d:5a:c8:af:ab:0d:69:21:32:c9:0a:e7:94:1d:
                    2b:6b:20:3d:3d:8a:d6:22:54:36:9f:8d:2b:ab:0f:
                    f6:64:ce:87:93:c1:b0:6d:d3:c6:18:ed:35:29:68:
                    40:c6:06:86:79:87:89:d2:85:f8:5d:4a:0e:73:2e:
                    c8:96:76:bf:dd:e5:9f:64:17:19:04:4b:51:2d:11:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AC:32:60:C4:32:D8:0A:69:CC:05:B2:E6:CB:65:CE:BB:52:2F:82
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/KKwyYMQy2AppzAWy5stlzrtSL4I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:648:25e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:49:dd:43:35:07:f3:eb:be:13:f1:26:2a:0f:13:dd:18:b4:
         0b:9e:80:e3:c1:85:f3:c7:bf:87:2d:e0:a2:69:62:ab:4c:1b:
         50:f5:2d:53:3a:cb:64:fa:0b:71:c8:c0:da:32:e9:cf:f9:eb:
         89:b2:84:41:c5:2e:b6:db:71:af:f6:e7:09:18:79:43:78:83:
         6c:bd:a7:0d:fd:b0:03:ae:7b:d0:1f:9c:40:77:27:36:90:1e:
         84:dd:ec:1b:4a:ef:09:de:1f:eb:14:44:5e:71:46:a9:e8:9d:
         f5:4f:87:eb:79:5c:e8:40:77:f9:b3:30:11:9d:96:24:bc:7a:
         96:0b:2a:9b:ab:a3:a8:dc:53:06:85:48:4f:11:ae:a3:07:63:
         93:e4:24:da:cc:d3:3b:ef:3a:90:fe:35:61:0b:1d:4f:68:f0:
         e2:07:73:10:ed:3a:d3:8d:b1:1a:c5:e4:9a:3c:90:32:e3:0e:
         25:e6:5e:aa:76:2c:89:66:99:20:9d:58:97:43:f1:31:4b:44:
         de:97:4f:7a:c4:fc:cb:ef:d4:70:fd:27:20:b8:45:90:5e:5d:
         98:8a:5b:71:25:c1:07:79:c6:56:23:70:7e:6c:77:4a:33:15:
         49:b5:02:30:3d:02:29:d4:2e:48:95:f6:4d:11:bb:9d:f8:85:
         5c:6f:8f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----