Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Hpk97f0PJjVPLe2BoUnjl9stAhM.roa
File:                     Hpk97f0PJjVPLe2BoUnjl9stAhM.roa (raw, json)
Hash identifier:          XKHHQ2pQX8XRqZOI7sVWAz52AZz/3OOq5R5Hv0JOa64=
Subject key identifier:   1E:99:3D:ED:FD:0F:26:35:4F:2D:ED:81:A1:49:E3:97:DB:2D:02:13
Certificate issuer:       /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial:       018CC2DB19B971FE01B0147C7F7F26C5C349
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Hpk97f0PJjVPLe2BoUnjl9stAhM.roa
Signing time:             Mon 01 Jan 2024 02:29:47 +0000
ROA not before:           Mon 01 Jan 2024 02:29:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206754
IP address blocks:        2a04:5d00:80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:19:b9:71:fe:01:b0:14:7c:7f:7f:26:c5:c3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
        Validity
            Not Before: Jan  1 02:29:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1e993dedfd0f26354f2ded81a149e397db2d0213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:27:02:aa:a4:04:7b:02:cd:f2:f4:f1:4d:
                    49:66:6b:7b:e2:cc:58:49:ec:f5:e4:ef:c9:da:82:
                    93:58:46:20:80:21:f1:7c:fe:79:05:b6:fb:75:4d:
                    c1:fb:92:78:ed:33:a5:12:6c:66:9a:de:c5:86:e2:
                    01:48:49:64:5a:ac:dd:f2:e2:22:7c:4d:e6:ba:61:
                    46:01:e8:72:a0:7c:3e:e4:b2:c7:b4:1a:0d:0f:a6:
                    64:97:21:be:09:39:c8:2a:1c:3e:e4:f2:5f:57:e4:
                    0a:f6:38:e7:57:ad:c2:2d:da:cc:e4:a1:fe:52:2a:
                    5c:ae:ae:2f:c7:c1:4b:d1:79:58:83:c1:9e:87:84:
                    97:44:49:64:ee:50:99:91:fb:73:67:78:a8:0d:68:
                    22:5e:25:24:40:09:5e:de:f3:4d:3e:01:88:a7:cf:
                    7b:93:4a:bc:be:71:4b:f6:5f:9d:cf:47:48:fa:82:
                    b9:1d:f8:8c:7c:1f:48:de:ab:1c:a5:d0:43:df:56:
                    cd:14:59:f7:f7:ef:48:3a:d0:57:1c:a9:71:91:fc:
                    e8:cb:9a:b6:41:79:f8:2d:5d:df:67:36:3f:22:d6:
                    2a:71:c6:e6:79:07:6f:e9:6f:c7:ce:2d:e4:c8:7d:
                    8e:6f:d1:1a:9a:a1:d0:4a:d4:78:b4:b4:f4:04:a5:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:99:3D:ED:FD:0F:26:35:4F:2D:ED:81:A1:49:E3:97:DB:2D:02:13
            X509v3 Authority Key Identifier:
                keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Hpk97f0PJjVPLe2BoUnjl9stAhM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:5d00:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:15:06:ca:83:34:5d:86:dc:2d:73:ed:ac:4a:17:4d:8a:
         de:5e:fb:ef:7d:03:91:ba:33:b2:ea:9e:79:66:29:90:6c:58:
         54:40:06:3d:ed:4c:b5:79:43:4a:0e:50:a0:99:ba:b1:51:06:
         81:1a:57:90:42:ca:28:b7:64:0c:51:02:2b:26:4e:fd:04:56:
         89:5d:6a:b7:7d:14:e8:21:a1:61:02:6b:b0:04:c8:4a:0d:55:
         f2:70:4d:3f:e7:63:72:1c:6a:6f:1e:59:15:ca:db:d0:61:62:
         f9:b6:24:bf:9b:6b:69:9a:c4:5f:de:c0:ff:5c:05:fa:a1:4a:
         de:6f:3e:99:a7:80:8d:5a:fe:d8:cc:5d:11:63:49:c3:cc:aa:
         9c:97:03:13:d9:bb:00:3e:8f:d8:e2:9b:66:dc:a2:f3:72:80:
         7d:ef:fb:b5:91:ca:a6:09:f2:06:a7:1c:24:31:2a:d0:4e:f5:
         e7:b9:33:ed:23:28:96:ca:59:81:72:84:d0:a7:11:72:25:eb:
         89:5c:ca:c4:fa:0d:8c:cb:f3:6e:2c:04:7a:8a:50:ac:ff:0c:
         f5:31:ff:78:8e:38:59:2e:5e:c5:05:b6:89:66:60:d0:2f:98:
         5c:c3:6c:c3:88:bd:13:72:b4:2c:eb:4c:98:6f:bd:be:6d:94:
         65:ec:1b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----