Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/8mapcWNXwgPO8hoJZzDASndPq-Q.roa
File:                     8mapcWNXwgPO8hoJZzDASndPq-Q.roa (raw, json)
Hash identifier:          YYEFhsMS7jgq8RuMd4W+WbyogZE2vv4GKBF6C5HB3LI=
Subject key identifier:   F2:66:A9:71:63:57:C2:03:CE:F2:1A:09:67:30:C0:4A:77:4F:AB:E4
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       018E5C039F834477A7B28114E2B361C24232
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/8mapcWNXwgPO8hoJZzDASndPq-Q.roa
Signing time:             Wed 20 Mar 2024 13:18:45 +0000
ROA not before:           Wed 20 Mar 2024 13:18:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215315
IP address blocks:        2a0f:7803:faf0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:5c:03:9f:83:44:77:a7:b2:81:14:e2:b3:61:c2:42:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Mar 20 13:18:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f266a9716357c203cef21a096730c04a774fabe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:40:b3:17:96:21:e4:52:a4:23:e1:65:80:82:
                    23:c1:e2:8b:e4:7c:55:c1:19:b6:0e:b1:bd:01:fc:
                    e6:11:a0:1a:39:b3:b4:6b:8e:3c:44:88:b7:38:60:
                    1d:0b:0a:c0:b0:b0:5a:e7:63:24:9b:14:13:a3:a9:
                    98:56:c0:4f:18:2c:df:bc:eb:cf:95:38:69:87:d8:
                    df:87:71:1f:0c:33:4d:0d:97:bd:14:2b:dc:a9:34:
                    07:40:f4:34:18:5e:b1:d4:23:18:e0:e9:69:bf:b8:
                    c3:72:46:61:52:c1:18:20:9b:78:af:e1:2e:ce:63:
                    c1:df:16:a0:cc:d2:df:1c:42:91:d1:b3:c9:9c:0f:
                    d9:7d:58:34:8d:7b:40:d8:87:86:a8:0e:19:47:58:
                    70:d9:e6:97:5c:40:61:b0:d6:ab:30:8f:2c:0d:6c:
                    a3:2e:2c:01:7d:61:be:41:80:44:7e:3c:a1:0b:c1:
                    6a:37:e3:d4:23:2b:7d:02:14:57:13:ab:1b:0c:81:
                    be:b7:af:16:52:0f:5a:9f:c5:dd:ab:b6:bb:6e:73:
                    8e:9c:c9:61:dc:e5:90:e7:3c:02:fb:5e:d7:93:27:
                    84:77:11:d0:3f:75:e5:10:f9:75:13:07:c5:cf:9e:
                    7e:f4:a0:fe:bb:1f:0a:52:1b:e2:5a:2e:67:61:0e:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:66:A9:71:63:57:C2:03:CE:F2:1A:09:67:30:C0:4A:77:4F:AB:E4
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/8mapcWNXwgPO8hoJZzDASndPq-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:faf0::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:15:5d:9a:f2:59:8e:a9:e7:9b:3a:91:e3:9f:36:f0:b3:
         9b:e4:bc:80:94:91:5e:e3:b4:1a:a5:11:64:95:22:59:89:af:
         8d:5a:37:b2:62:bd:3e:90:70:96:b2:d7:a8:84:42:0c:78:d2:
         a5:dc:4e:21:46:94:a5:2c:2d:0e:bc:cc:ea:28:e6:12:67:d4:
         de:1c:81:08:13:7c:b3:45:ab:dc:67:c3:37:c7:96:6e:c9:b1:
         ec:e7:c2:1a:ce:21:d9:12:93:00:e8:71:86:97:1f:00:e1:3c:
         20:bf:11:7e:80:f8:8b:b7:9b:8d:71:d1:e9:14:3e:e3:31:d7:
         23:64:e8:13:ba:0a:0c:f2:bc:60:64:94:5c:c4:ca:11:c1:65:
         9c:50:98:61:b7:98:37:c9:5a:16:a4:a6:2b:c2:19:f1:fb:89:
         4e:07:55:c6:a1:6b:92:d8:f8:22:d7:84:6c:51:80:52:f9:a6:
         56:bb:61:fb:0e:a8:38:ed:83:bd:ce:11:d4:76:ff:40:40:9b:
         e9:d8:60:40:8f:3c:d3:2a:0a:0a:47:2b:8a:78:dd:c7:e4:0d:
         c3:d0:3e:ae:28:66:d2:ba:01:24:74:d0:ea:66:83:13:f8:a8:
         ea:9f:5d:62:38:5d:b7:1e:81:a1:5a:64:4c:b8:be:10:47:65:
         6c:6f:dd:75
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY5cA5+DRHensoEU4rNhwkIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjQwMzIwMTMxODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjY2YTk3MTYzNTdjMjAzY2VmMjFhMDk2NzMwYzA0YTc3NGZhYmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhECzF5Yh5FKkI+FlgIIjweKL5HxV
wRm2DrG9AfzmEaAaObO0a448RIi3OGAdCwrAsLBa52MkmxQTo6mYVsBPGCzfvOvP
lThph9jfh3EfDDNNDZe9FCvcqTQHQPQ0GF6x1CMY4Olpv7jDckZhUsEYIJt4r+Eu
zmPB3xagzNLfHEKR0bPJnA/ZfVg0jXtA2IeGqA4ZR1hw2eaXXEBhsNarMI8sDWyj
LiwBfWG+QYBEfjyhC8FqN+PUIyt9AhRXE6sbDIG+t68WUg9an8Xdq7a7bnOOnMlh
3OWQ5zwC+17XkyeEdxHQP3XlEPl1EwfFz55+9KD+ux8KUhviWi5nYQ57wQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPJmqXFjV8IDzvIaCWcwwEp3T6vkMB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvOG1hcGNXTlh3Z1BPOGhvSlp6REFTbmRQcS1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/rw
MA0GCSqGSIb3DQEBCwUAA4IBAQAJwhVdmvJZjqnnmzqR45828LOb5LyAlJFe47Qa
pRFklSJZia+NWjeyYr0+kHCWsteohEIMeNKl3E4hRpSlLC0OvMzqKOYSZ9TeHIEI
E3yzRavcZ8M3x5ZuybHs58IaziHZEpMA6HGGlx8A4TwgvxF+gPiLt5uNcdHpFD7j
MdcjZOgTugoM8rxgZJRcxMoRwWWcUJhht5g3yVoWpKYrwhnx+4lOB1XGoWuS2Pgi
14RsUYBS+aZWu2H7Dqg47YO9zhHUdv9AQJvp2GBAjzzTKgoKRyuKeN3H5A3D0D6u
KGbSugEkdNDqZoMT+Kjqn11iOF23HoGhWmRMuL4QR2Vsb911
-----END CERTIFICATE-----