Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/YuMXvy_LCmr_ye1cim7RQj7lOKI.roa
File:                     YuMXvy_LCmr_ye1cim7RQj7lOKI.roa (raw, json)
Hash identifier:          DVH4Y32ek8o9A73j4/n91w2wrdS5sz4XtEeISxuj8vs=
Subject key identifier:   62:E3:17:BF:2F:CB:0A:6A:FF:C9:ED:5C:8A:6E:D1:42:3E:E5:38:A2
Certificate issuer:       /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial:       018E7C4D0139BA2340E8F49345094574F30F
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/YuMXvy_LCmr_ye1cim7RQj7lOKI.roa
Signing time:             Tue 26 Mar 2024 19:46:45 +0000
ROA not before:           Tue 26 Mar 2024 19:46:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        2a14:2ec0:62b4::/48 maxlen: 48
                          2a14:2ec0:854e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:7c:4d:01:39:ba:23:40:e8:f4:93:45:09:45:74:f3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
        Validity
            Not Before: Mar 26 19:46:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=62e317bf2fcb0a6affc9ed5c8a6ed1423ee538a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:dc:db:93:35:2c:0d:6a:4e:b0:68:0a:75:
                    bd:fa:dd:64:85:6b:0a:ba:e3:e4:2c:37:ff:74:0d:
                    af:1e:c5:e7:69:c0:0b:20:11:50:6b:28:7b:ed:27:
                    e8:14:d2:ae:5f:da:39:67:da:07:71:d7:b2:ef:98:
                    93:23:c8:f1:28:fd:09:bd:b0:25:43:9d:c0:27:3f:
                    88:14:2c:1b:19:7c:13:cf:9f:0b:76:2b:2c:69:c2:
                    61:ec:f0:e9:9f:80:6c:66:69:3d:5b:70:6f:3d:5d:
                    64:ed:e9:80:35:1a:ac:60:70:0c:5d:e5:3a:11:8e:
                    9c:a4:b9:3f:0f:01:ec:01:15:33:2e:e6:ad:60:aa:
                    7a:6a:1f:93:4b:bc:ce:7a:4d:0c:97:34:cf:e6:25:
                    81:84:8b:4f:d1:2e:00:94:68:99:2b:18:d8:06:17:
                    26:bf:3a:66:b5:74:4b:71:33:c1:b4:ca:92:f2:b3:
                    b0:41:33:7c:b2:6a:c5:34:6d:52:bf:f1:01:93:db:
                    d7:ce:9a:93:fd:0d:37:96:c3:0b:c4:36:88:c4:bc:
                    1e:ea:67:80:18:15:17:94:81:a5:53:1f:49:fd:6a:
                    08:76:ab:82:fc:e7:0e:2e:7f:1c:d0:02:9c:9c:8a:
                    e8:98:91:98:f9:b4:f1:e4:08:a2:d6:60:8e:e2:d2:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E3:17:BF:2F:CB:0A:6A:FF:C9:ED:5C:8A:6E:D1:42:3E:E5:38:A2
            X509v3 Authority Key Identifier:
                keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/YuMXvy_LCmr_ye1cim7RQj7lOKI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:2ec0:62b4::/48
                  2a14:2ec0:854e::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:19:0a:0b:a2:25:31:60:01:a0:c9:ce:4e:2c:8c:81:c8:
         30:68:bf:95:0e:17:18:60:81:71:6c:58:05:40:78:a9:62:44:
         04:2b:5e:bf:9c:eb:e9:69:f3:f8:d9:31:85:39:3e:44:ff:8c:
         16:ba:79:c2:a2:87:9b:d9:7d:7f:ce:69:df:96:3e:eb:bf:e1:
         ff:6b:74:d1:08:53:c1:c1:c0:74:7c:85:74:4f:25:55:03:32:
         27:93:08:a5:e2:ac:74:c7:5f:44:60:96:ef:70:95:9a:84:d9:
         ba:c7:00:9d:97:07:be:68:16:72:4c:5b:fd:31:e9:6f:1b:c1:
         96:1a:a5:f6:1b:8b:5f:e8:ae:06:e4:29:ce:84:ce:1b:7c:2d:
         9f:5b:34:e4:b2:4e:74:e8:e5:e8:7a:66:85:30:ae:02:e6:6f:
         98:04:c6:a9:8c:70:1f:54:2b:06:fe:4b:c5:3f:9a:01:c7:77:
         31:47:5e:b0:71:3b:55:4d:21:46:95:38:41:a0:9d:98:8a:ef:
         ec:dc:f9:d1:8d:5f:2d:c5:65:12:9d:d0:de:35:1f:7f:e4:91:
         b8:d9:d3:10:0a:ac:ae:69:76:9c:9e:b4:50:82:18:38:89:2b:
         7a:81:11:ab:83:02:e4:04:56:5e:14:3a:d6:b3:74:e0:4b:ba:
         a1:8f:80:fc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY58TQE5uiNA6PSTRQlFdPMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMjY0MDM1MWFiMjFhMGRjN2FhYTE1ZmFiNWIxMTA5Nzc3
MTRhM2MwHhcNMjQwMzI2MTk0NjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmUzMTdiZjJmY2IwYTZhZmZjOWVkNWM4YTZlZDE0MjNlZTUzOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nnc25M1LA1qTrBoCnW9+t1khWsK
uuPkLDf/dA2vHsXnacALIBFQayh77SfoFNKuX9o5Z9oHcdey75iTI8jxKP0JvbAl
Q53AJz+IFCwbGXwTz58LdissacJh7PDpn4BsZmk9W3BvPV1k7emANRqsYHAMXeU6
EY6cpLk/DwHsARUzLuatYKp6ah+TS7zOek0MlzTP5iWBhItP0S4AlGiZKxjYBhcm
vzpmtXRLcTPBtMqS8rOwQTN8smrFNG1Sv/EBk9vXzpqT/Q03lsMLxDaIxLwe6meA
GBUXlIGlUx9J/WoIdquC/OcOLn8c0AKcnIromJGY+bTx5Aii1mCO4tJ4jwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGLjF78vywpq/8ntXIpu0UI+5TiiMB8GA1UdIwQY
MBaAFLImQDUashoNx6qhX6tbEQl3cUo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQt
MTc5ZTZlNDI5MGMwLzEvWXVNWHZ5X0xDbXJfeWUxY2ltN1JRajdsT0tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQtMTc5ZTZlNDI5MGMw
LzEvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKhQuwGK0
AwcAKhQuwIVOMA0GCSqGSIb3DQEBCwUAA4IBAQCm7hkKC6IlMWABoMnOTiyMgcgw
aL+VDhcYYIFxbFgFQHipYkQEK16/nOvpafP42TGFOT5E/4wWunnCooeb2X1/zmnf
lj7rv+H/a3TRCFPBwcB0fIV0TyVVAzInkwil4qx0x19EYJbvcJWahNm6xwCdlwe+
aBZyTFv9MelvG8GWGqX2G4tf6K4G5CnOhM4bfC2fWzTksk506OXoemaFMK4C5m+Y
BMapjHAfVCsG/kvFP5oBx3cxR16wcTtVTSFGlThBoJ2Yiu/s3PnRjV8txWUSndDe
NR9/5JG42dMQCqyuaXacnrRQghg4iSt6gRGrgwLkBFZeFDrWs3TgS7qhj4D8
-----END CERTIFICATE-----