Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/rejN9UQ62WpCliarayO8dsB0u8I.roa
File:                     rejN9UQ62WpCliarayO8dsB0u8I.roa (raw, json)
Hash identifier:          vWC27sw3c1Nm4b/Lj6Ng/zJxXPT4xY9K1cDSPh8e3YU=
Subject key identifier:   AD:E8:CD:F5:44:3A:D9:6A:42:96:26:AB:6B:23:BC:76:C0:74:BB:C2
Certificate issuer:       /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial:       01926C6EAAFB5A51083C40FF6D32512CCB6F
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/rejN9UQ62WpCliarayO8dsB0u8I.roa
Signing time:             Tue 08 Oct 2024 14:00:44 +0000
ROA not before:           Tue 08 Oct 2024 14:00:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     28788
IP address blocks:        2001:4128::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:6c:6e:aa:fb:5a:51:08:3c:40:ff:6d:32:51:2c:cb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
        Validity
            Not Before: Oct  8 14:00:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ade8cdf5443ad96a429626ab6b23bc76c074bbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:f8:97:ce:ac:80:ed:5b:f2:7a:a0:15:08:
                    47:fc:11:09:0a:dd:77:4a:3e:cf:5a:b7:72:5c:b2:
                    b4:0d:0a:73:2a:19:0d:a7:4a:ec:4e:a3:73:88:a6:
                    cb:72:d4:7f:86:02:9f:9f:2e:84:32:a4:2c:54:f1:
                    13:f9:1c:b6:95:16:db:fe:6c:3a:41:41:dd:44:68:
                    ca:60:f5:d2:8f:29:04:97:a0:69:2e:71:29:be:74:
                    e0:9a:fe:b5:d2:7c:14:2c:1a:4c:0f:81:8c:a4:d2:
                    1f:6a:7c:c8:94:ad:83:4f:b3:ac:03:bd:f8:71:db:
                    49:70:37:8a:58:65:ab:1e:37:a5:4a:9d:3c:ca:5e:
                    e2:20:3d:8f:09:10:ff:c6:04:05:e3:d4:29:ec:38:
                    67:c0:16:88:24:80:fa:4d:61:87:6c:03:f8:c7:cc:
                    72:e9:d6:38:bf:35:93:1d:5c:7a:9e:7e:45:1a:8b:
                    b8:fe:2f:79:e7:66:04:3f:36:f7:35:92:bc:f0:f4:
                    c1:e9:41:e5:a1:d6:5f:c2:8e:c4:1e:ed:05:c5:8c:
                    ff:4d:d0:81:35:3c:58:c8:81:b9:ef:d3:89:ac:82:
                    5a:4b:b4:82:7a:e7:f0:4b:e2:8f:86:52:95:a9:a6:
                    26:8e:77:75:f3:3e:92:11:6e:f0:97:f9:a6:74:86:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E8:CD:F5:44:3A:D9:6A:42:96:26:AB:6B:23:BC:76:C0:74:BB:C2
            X509v3 Authority Key Identifier:
                keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/rejN9UQ62WpCliarayO8dsB0u8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4128::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:e9:2f:bf:d4:bb:9f:43:94:46:50:77:10:7f:f9:7c:aa:c4:
         e8:33:20:bd:53:f8:9f:60:c3:8a:57:0d:06:00:6f:3b:58:7d:
         86:12:77:ee:63:4c:07:8c:ee:f1:5b:23:6e:61:00:87:45:0d:
         c3:c9:9a:a6:72:58:45:f5:ee:f2:7e:ec:41:bf:e5:9a:58:94:
         7f:8c:dc:be:1d:c3:72:1b:ad:9f:aa:c1:31:95:2b:bd:bc:ff:
         66:07:3f:82:f2:5f:98:60:39:1d:32:e5:19:ae:38:70:c1:56:
         d0:d5:9b:c9:f5:d2:01:0c:38:cd:ed:77:03:d4:a9:93:f8:36:
         31:57:cb:d6:c6:ef:c8:e0:25:d1:47:61:a2:85:02:09:8a:3c:
         f4:ba:0e:41:04:32:10:bd:4c:4f:f9:40:f1:a9:48:db:4b:cd:
         70:4b:2c:df:d7:6b:f7:b0:ba:80:09:f3:25:13:9f:6b:7f:c9:
         9c:55:15:5e:d5:b4:66:57:f4:4f:1b:84:7b:7f:18:9c:52:3c:
         81:ea:08:c8:3c:75:d3:88:f6:4f:a8:64:4d:bd:bd:4b:be:0e:
         68:aa:28:d2:8f:67:65:5f:e2:a1:9e:f0:df:c5:b1:07:00:b0:
         fd:06:bf:cb:99:e1:a1:57:fd:80:00:cc:87:1a:2d:64:5b:bd:
         cb:79:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----