Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/2SnaMjHqPUSI0ZZp9p8Bil4ouVY.roa
File:                     2SnaMjHqPUSI0ZZp9p8Bil4ouVY.roa (raw, json)
Hash identifier:          roOcdAoSfuhPR3HBhvxTE9Ehn2oK7r4PoUTHIBpOZBU=
Subject key identifier:   D9:29:DA:32:31:EA:3D:44:88:D1:96:69:F6:9F:01:8A:5E:28:B9:56
Certificate issuer:       /CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Certificate serial:       0191ECBEBE3DAAFAA509554BEDF8D1CB0BDE
Authority key identifier: 76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/2SnaMjHqPUSI0ZZp9p8Bil4ouVY.roa
Signing time:             Fri 13 Sep 2024 18:56:48 +0000
ROA not before:           Fri 13 Sep 2024 18:56:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199669
IP address blocks:        2a11:8305::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:ec:be:be:3d:aa:fa:a5:09:55:4b:ed:f8:d1:cb:0b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
        Validity
            Not Before: Sep 13 18:56:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d929da3231ea3d4488d19669f69f018a5e28b956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:c3:79:d8:ff:20:67:ba:9d:69:52:e4:77:
                    c1:9b:93:38:a3:3a:54:e0:24:18:19:f9:82:5b:15:
                    92:59:82:e4:03:6f:27:77:4f:03:24:6a:b4:59:23:
                    47:1c:f2:86:35:e3:9a:ed:71:74:bc:3a:cd:c5:cd:
                    1c:c4:9e:c1:25:41:e6:76:0b:2f:a1:9b:46:68:7d:
                    65:ed:c8:fe:2a:e2:23:c3:a0:d3:ec:c1:42:1a:80:
                    0d:18:bc:a7:5c:40:cf:e4:65:fe:19:06:23:a0:cc:
                    fc:0f:87:2b:56:7d:4d:00:ac:75:05:42:26:10:e3:
                    cd:77:77:b9:9c:e9:e9:d0:f1:67:ed:7d:1b:c3:b4:
                    d1:cb:f9:d9:79:a3:82:08:0e:48:30:31:25:af:a0:
                    e7:9a:fd:6d:8e:4c:e7:67:af:c7:92:a1:9b:8c:45:
                    9b:1d:56:27:14:63:59:af:00:71:62:a9:a2:d7:47:
                    de:bf:83:fd:57:0c:a6:58:57:97:67:6c:09:7b:6e:
                    b7:97:de:0c:04:5b:7a:b4:75:6a:e4:99:12:89:b6:
                    54:9c:cd:bc:07:41:84:92:59:92:3c:b1:4e:e5:eb:
                    19:11:57:a4:3f:82:34:eb:60:63:1d:b5:97:cf:89:
                    9c:0b:50:04:1b:b4:df:9e:df:15:ea:df:14:ac:a3:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:29:DA:32:31:EA:3D:44:88:D1:96:69:F6:9F:01:8A:5E:28:B9:56
            X509v3 Authority Key Identifier:
                keyid:76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/2SnaMjHqPUSI0ZZp9p8Bil4ouVY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:8305::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:4a:f7:73:f5:d1:d8:f7:6e:66:2b:d9:14:a5:80:0f:2c:66:
         c2:11:6d:6d:4c:d8:99:27:58:ab:7f:6e:33:b3:ea:10:1c:a9:
         58:9f:11:d0:a8:77:d1:63:64:b8:54:9b:5b:62:f9:0e:67:af:
         3c:8a:14:02:f5:5b:fd:3c:24:0f:7a:ff:f0:35:9b:64:ed:c6:
         b0:f2:e4:3d:af:7f:33:24:cc:7b:73:21:82:b0:3b:eb:af:57:
         5b:f4:56:8f:09:c0:23:d7:31:3e:f6:b5:0a:45:17:a4:9e:3e:
         7d:ad:76:98:5a:69:72:ee:92:3a:bb:7f:62:4c:e7:d8:0c:96:
         c2:64:11:0e:e4:45:18:62:1a:d7:08:1e:e3:0d:7a:43:d4:6c:
         c4:91:a5:3b:f3:5a:6c:fd:01:9c:de:32:47:c7:1c:42:79:e1:
         46:57:6d:45:6e:ad:99:40:1a:21:5f:d0:83:99:41:4a:df:34:
         ed:6d:85:7b:9a:bd:50:f6:9e:e7:ac:c8:57:48:69:fb:78:6e:
         4b:bb:28:b8:55:ba:a4:3b:5e:33:6e:e4:34:e6:28:3c:09:ad:
         0c:55:e7:c7:cb:8a:1c:c7:93:41:74:4d:b7:29:27:d9:09:3b:
         5d:be:f0:be:01:6d:8f:63:ee:8d:97:a0:d5:e5:6a:c2:04:cc:
         9c:34:0e:3b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZHsvr49qvqlCVVL7fjRywveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2M2Q0NTdlNWQzY2MwYWNkOGE3NGY4YjEwZTI2ODZiZmJj
NDk2Y2IwHhcNMjQwOTEzMTg1NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTI5ZGEzMjMxZWEzZDQ0ODhkMTk2NjlmNjlmMDE4YTVlMjhiOTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgLDedj/IGe6nWlS5HfBm5M4ozpU
4CQYGfmCWxWSWYLkA28nd08DJGq0WSNHHPKGNeOa7XF0vDrNxc0cxJ7BJUHmdgsv
oZtGaH1l7cj+KuIjw6DT7MFCGoANGLynXEDP5GX+GQYjoMz8D4crVn1NAKx1BUIm
EOPNd3e5nOnp0PFn7X0bw7TRy/nZeaOCCA5IMDElr6Dnmv1tjkznZ6/HkqGbjEWb
HVYnFGNZrwBxYqmi10fev4P9VwymWFeXZ2wJe263l94MBFt6tHVq5JkSibZUnM28
B0GEklmSPLFO5esZEVekP4I062BjHbWXz4mcC1AEG7Tfnt8V6t8UrKPVZwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNkp2jIx6j1EiNGWafafAYpeKLlWMB8GA1UdIwQY
MBaAFHY9RX5dPMCs2KdPixDiaGv7xJbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGoxRmZsMDh3S3pZcDAtTEVPSm9hX3ZFbHNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jY2M5NGItYzI4Ny00ZTVmLTg2MDQt
N2U1OTRmMjQ5NGNjLzEvMlNuYU1qSHFQVVNJMFpacDlwOEJpbDRvdVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jY2M5NGItYzI4Ny00ZTVmLTg2MDQtN2U1OTRmMjQ5NGNj
LzEvZGoxRmZsMDh3S3pZcDAtTEVPSm9hX3ZFbHNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhGDBTAN
BgkqhkiG9w0BAQsFAAOCAQEAHEr3c/XR2PduZivZFKWADyxmwhFtbUzYmSdYq39u
M7PqEBypWJ8R0Kh30WNkuFSbW2L5DmevPIoUAvVb/TwkD3r/8DWbZO3GsPLkPa9/
MyTMe3MhgrA7669XW/RWjwnAI9cxPva1CkUXpJ4+fa12mFppcu6SOrt/Ykzn2AyW
wmQRDuRFGGIa1wge4w16Q9RsxJGlO/NabP0BnN4yR8ccQnnhRldtRW6tmUAaIV/Q
g5lBSt807W2Fe5q9UPae56zIV0hp+3huS7souFW6pDteM27kNOYoPAmtDFXnx8uK
HMeTQXRNtykn2Qk7Xb7wvgFtj2PujZeg1eVqwgTMnDQOOw==
-----END CERTIFICATE-----