Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a623a3a2f34382d3438203d3e2039303039.roa
File:                     326131333a393530303a623a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          sVudCPVVhi/Y0YFbQWr6L4cIJImY8OYJTpyxvDHD/yY=
Subject key identifier:   8D:8F:00:72:83:A2:4E:92:60:B0:10:38:4F:9D:ED:F6:0B:95:6D:06
Certificate issuer:       /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial:       24FE37AEE8D5D4EC1F8A5FAD12EE20BAE34D4B9E
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a623a3a2f34382d3438203d3e2039303039.roa
Signing time:             Fri 14 Jun 2024 09:59:01 +0000
ROA not before:           Fri 14 Jun 2024 09:54:01 +0000
ROA not after:            Fri 13 Jun 2025 09:59:01 +0000
asID:                     9009
IP address blocks:        2a13:9500:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fe:37:ae:e8:d5:d4:ec:1f:8a:5f:ad:12:ee:20:ba:e3:4d:4b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
        Validity
            Not Before: Jun 14 09:54:01 2024 GMT
            Not After : Jun 13 09:59:01 2025 GMT
        Subject: CN=8D8F007283A24E9260B010384F9DEDF60B956D06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:e4:ed:9d:ea:56:91:87:d9:24:4a:aa:9d:
                    e4:a2:c4:71:fc:41:b2:f8:37:4d:65:7b:b3:09:ed:
                    65:13:03:9d:ee:bc:c0:59:dd:63:d6:75:f5:13:6f:
                    7a:17:cf:91:79:09:44:5d:1a:d9:27:88:f7:96:97:
                    68:57:a3:dc:2e:ff:23:32:2e:5d:84:56:a1:af:4b:
                    6d:dd:f2:1d:fc:89:a6:a0:84:2e:38:9b:ca:b6:0d:
                    ca:e6:fa:08:78:8d:d8:19:51:e4:c0:33:71:b2:bc:
                    42:d6:aa:46:aa:a3:2f:f2:38:a4:30:53:26:aa:94:
                    60:89:d5:0a:c0:58:42:4b:55:7c:b2:2e:8d:95:03:
                    15:48:2c:e6:bb:24:11:d1:af:6d:fc:71:6d:89:87:
                    1d:61:b1:35:a3:0b:57:09:94:bc:29:7a:7d:95:b3:
                    28:ed:f5:77:b4:bc:ab:50:14:73:9c:2f:b1:16:9c:
                    46:4a:eb:0d:67:c5:53:62:93:09:ef:81:84:ec:69:
                    b8:c5:87:ab:4d:c2:87:4d:4a:f5:f3:ec:e3:08:9d:
                    d7:4d:7e:3d:93:59:5a:ea:67:d0:12:2e:4e:0e:ad:
                    fc:5f:dc:bc:3c:05:19:6d:ea:75:69:cc:50:1e:69:
                    ce:18:cc:f3:94:12:23:99:55:74:cd:18:9b:40:52:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8F:00:72:83:A2:4E:92:60:B0:10:38:4F:9D:ED:F6:0B:95:6D:06
            X509v3 Authority Key Identifier:
                keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a623a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9500:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:9b:5e:77:13:43:e2:7d:86:fc:90:e8:53:af:5b:8d:91:
         23:ed:f6:68:0f:9f:09:7e:71:76:05:e5:fc:e3:63:6c:60:ac:
         b8:de:9c:38:92:68:43:66:46:b3:dc:18:9e:6a:ab:05:0a:31:
         4e:8f:03:8a:1b:fd:e2:af:21:0c:3b:b4:b3:1f:ba:f8:2d:21:
         b2:a3:67:20:69:31:ae:65:38:79:db:3c:87:1a:c0:2d:93:f8:
         ae:82:8e:26:27:de:3e:19:c5:e2:85:be:e7:79:9d:0b:32:fc:
         a8:ae:25:8f:05:3a:27:6d:ba:39:2b:74:ee:5d:04:88:f3:11:
         bd:6c:82:40:5f:4e:68:f7:e3:22:e3:cf:b9:6c:76:51:8b:fe:
         b5:cc:c7:3f:ab:7a:84:ae:10:ee:11:2b:ef:4a:da:68:b5:b0:
         97:70:98:bd:9f:38:c2:35:23:f5:07:23:c5:b1:d7:64:80:f4:
         ff:23:3e:ec:a9:3d:62:92:a1:2d:1f:14:05:5d:21:40:ec:39:
         22:74:92:10:3f:3a:c6:ec:c9:ab:82:6c:52:10:24:26:db:39:
         35:ee:62:36:d7:20:4b:c4:0d:57:69:0f:52:84:cc:05:b1:d7:
         9a:13:af:7b:8f:f9:a9:54:f7:cc:07:b0:13:e0:ca:47:03:21:
         20:8a:a1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----