Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/EL5aAFoGwJKZRVf2S6oK5M7iylI.roa
File:                     EL5aAFoGwJKZRVf2S6oK5M7iylI.roa (raw, json)
Hash identifier:          ZguZnR9tEcONHjnqjawMpBBCrgWeMZ3HZMwrSO+FGUg=
Subject key identifier:   10:BE:5A:00:5A:06:C0:92:99:45:57:F6:4B:AA:0A:E4:CE:E2:CA:52
Certificate issuer:       /CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
Certificate serial:       018CC3B6CB7963D2FF372CE22B2B8036D6C0
Authority key identifier: 61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/EL5aAFoGwJKZRVf2S6oK5M7iylI.roa
Signing time:             Mon 01 Jan 2024 06:29:45 +0000
ROA not before:           Mon 01 Jan 2024 06:29:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39995
IP address blocks:        2a02:7da0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:cb:79:63:d2:ff:37:2c:e2:2b:2b:80:36:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615fbbdfc901e8eb0ecd0dd3f4085c1289cfedf7
        Validity
            Not Before: Jan  1 06:29:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10be5a005a06c092994557f64baa0ae4cee2ca52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:72:d5:81:07:79:1c:aa:af:12:f5:1f:f1:
                    92:69:f6:7b:e9:14:cf:d5:cd:e7:aa:f0:e1:07:db:
                    b2:68:d2:ff:26:11:e2:1f:49:a9:7c:ca:74:d2:64:
                    a7:44:10:5c:a4:c7:8e:6b:eb:54:50:83:80:e4:58:
                    d1:2a:93:69:2a:02:7e:48:df:b7:d5:95:c4:a2:85:
                    6d:5c:e4:c4:5b:65:f0:65:c4:b3:ec:18:6d:79:8b:
                    41:d8:f8:24:ff:da:cb:e0:25:39:86:54:8e:dc:73:
                    cc:87:c4:77:03:9a:a8:d5:98:37:b2:6d:56:5f:89:
                    2a:52:5f:e1:ea:18:3c:69:4b:61:3f:4d:c2:23:20:
                    dd:4d:34:84:9d:8d:66:18:df:1a:69:cd:83:8c:08:
                    ff:9d:61:64:69:b8:99:d8:6f:f2:d7:44:27:35:3e:
                    e5:15:0e:bf:06:a7:6c:19:c0:5b:e4:42:32:b2:69:
                    be:dd:b3:bc:b1:42:d6:cd:44:cc:e2:19:84:ba:66:
                    42:12:ee:92:95:eb:7e:cb:21:db:08:42:16:79:f7:
                    9d:33:17:b3:b7:9c:06:19:cc:c1:93:f2:26:5b:fa:
                    86:ec:ca:61:4c:36:a3:e0:d2:52:0a:e3:83:ee:f7:
                    84:f7:41:6d:4f:8b:8f:cd:34:a7:2e:3e:c7:d7:aa:
                    bf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:5A:00:5A:06:C0:92:99:45:57:F6:4B:AA:0A:E4:CE:E2:CA:52
            X509v3 Authority Key Identifier:
                keyid:61:5F:BB:DF:C9:01:E8:EB:0E:CD:0D:D3:F4:08:5C:12:89:CF:ED:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YV-738kB6OsOzQ3T9AhcEonP7fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/EL5aAFoGwJKZRVf2S6oK5M7iylI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/74f313-7c92-4c54-838f-79c722c54e19/1/YV-738kB6OsOzQ3T9AhcEonP7fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:7da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:b6:93:fb:f4:c5:b2:76:b6:20:d6:33:2a:99:ca:2c:68:60:
         2b:c0:1a:f2:e7:1d:88:a9:85:38:18:b1:ab:f4:2d:24:20:58:
         2a:02:a2:66:5c:ae:63:94:de:b8:36:ed:83:19:9b:06:58:30:
         0b:cc:60:cc:e6:90:fb:c5:13:11:f9:a7:cd:e6:5b:af:c9:6c:
         95:67:e1:e2:a9:26:16:34:b7:65:77:9b:fc:6d:24:eb:55:3f:
         f9:6f:81:c9:e2:be:51:4b:36:2b:f1:75:b6:85:eb:d7:8a:3c:
         35:8f:ea:62:e5:c8:5e:9f:55:17:52:b4:d7:0a:35:59:ad:ec:
         e4:6f:b8:a4:87:cd:3f:f5:64:70:e1:ab:6b:5c:7e:af:38:76:
         e0:19:37:2a:27:17:70:b9:c7:3f:a4:51:cd:6f:c3:69:f5:29:
         d0:cf:58:bc:fb:d0:36:12:49:60:5e:b8:b5:fc:7d:80:ef:4f:
         93:71:2b:fa:13:49:d8:85:79:54:72:50:2c:af:c5:f6:aa:28:
         92:bf:12:bf:82:7c:3a:91:a0:9c:9c:f6:16:0e:e5:6b:f6:e9:
         bf:e2:26:39:74:60:02:de:8a:cf:e1:06:b5:0a:8c:09:6a:5f:
         f0:7f:d7:26:db:c6:4e:e6:b5:e2:be:74:32:a0:7a:44:06:40:
         e9:87:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----