Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/E9SLe9nAbaETRLPryGljRIfCJQY.roa
File:                     E9SLe9nAbaETRLPryGljRIfCJQY.roa (raw, json)
Hash identifier:          zoE09QmnjXCnfcTkzMxVcFi4PFtkmx8bC6PTX8kzyH0=
Subject key identifier:   13:D4:8B:7B:D9:C0:6D:A1:13:44:B3:EB:C8:69:63:44:87:C2:25:06
Certificate issuer:       /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial:       019169CDA07475875412F0C98943B88F6C6F
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/E9SLe9nAbaETRLPryGljRIfCJQY.roa
Signing time:             Mon 19 Aug 2024 08:42:49 +0000
ROA not before:           Mon 19 Aug 2024 08:42:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62240
IP address blocks:        2a11:b687::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:69:cd:a0:74:75:87:54:12:f0:c9:89:43:b8:8f:6c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
        Validity
            Not Before: Aug 19 08:42:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=13d48b7bd9c06da11344b3ebc869634487c22506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ce:4a:eb:7b:69:6f:bf:b4:ce:91:73:27:c0:
                    db:ea:e7:dc:19:72:87:25:61:d8:50:39:c6:5c:9c:
                    43:da:66:a5:76:3e:be:63:eb:97:8d:19:32:71:1c:
                    97:67:66:f5:fe:6d:9e:10:dc:c9:f6:07:ba:51:76:
                    7e:28:b3:4b:c9:c7:99:27:02:27:7c:45:37:0a:fa:
                    26:76:3b:1e:a9:25:26:08:8a:dd:e0:82:d2:b7:71:
                    48:cb:98:74:b0:93:1c:36:09:46:f3:cc:f2:60:f2:
                    bb:bd:07:b0:d5:46:9f:e9:f4:5a:57:05:fb:f8:f2:
                    91:1e:68:79:31:98:25:72:2e:cf:f4:1f:80:07:2d:
                    7b:16:a6:58:47:5c:b0:c7:6b:f4:de:dc:ff:02:41:
                    80:9f:e3:48:2e:a5:d4:bb:f3:aa:cd:b0:ad:8e:8d:
                    69:54:a3:0c:a5:60:3f:8e:c6:fb:95:d4:f9:d1:a5:
                    18:d3:9a:d6:23:30:48:dd:c3:a0:5a:7b:2e:e1:e0:
                    59:88:ed:57:5c:3a:33:cd:2f:a6:6d:a2:7b:88:a6:
                    57:a2:c8:3d:b4:b8:bb:02:9e:e7:cd:40:c1:a2:9f:
                    3c:78:c6:be:6a:c8:9f:59:be:f5:22:75:0d:c3:d9:
                    66:fd:e4:29:f0:40:7c:5b:9d:94:e6:f8:0c:0a:1b:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D4:8B:7B:D9:C0:6D:A1:13:44:B3:EB:C8:69:63:44:87:C2:25:06
            X509v3 Authority Key Identifier:
                keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/E9SLe9nAbaETRLPryGljRIfCJQY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:b687::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:be:3f:c8:8c:0b:bf:2c:50:9b:44:a7:3d:89:e2:a4:b9:de:
         27:89:95:b7:b4:41:22:23:7e:fa:56:ad:10:75:71:b1:d0:ae:
         7a:49:80:c9:71:76:d2:c2:89:72:ec:c6:f8:2d:c0:ec:0e:19:
         c0:34:ba:5d:d7:28:a3:4d:3f:4c:2c:c7:0d:f3:45:7b:88:a3:
         c3:c5:30:7c:92:bc:4b:89:c2:07:62:9e:84:cc:4a:97:29:a0:
         33:30:23:fd:9e:6a:e8:5e:84:c8:13:42:ed:2f:62:d3:ef:f3:
         ff:90:ff:4d:60:89:5b:19:c6:19:0f:33:9f:eb:a1:ad:1a:be:
         03:ee:4b:31:aa:7f:f2:a7:be:d0:6a:d1:22:25:2f:41:cc:56:
         ca:69:dd:9e:24:4a:5f:46:6d:dc:37:12:74:a5:7f:25:23:13:
         a0:06:bc:80:2b:59:bc:36:86:aa:82:93:8b:4c:1a:49:c8:9d:
         9c:f0:94:73:38:14:ec:75:ee:f5:32:18:23:59:c8:b1:a4:56:
         40:43:2e:b4:9e:93:d6:29:b2:15:e7:bd:83:50:f6:8e:7d:7f:
         07:60:f9:b4:86:5a:18:3b:30:fe:ff:6f:29:2b:33:ff:ce:dc:
         3e:5a:20:7d:8a:0c:1d:48:ac:f9:7c:11:98:2f:67:4e:fb:df:
         55:a6:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----