Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a613130303a3a2f34302d3438203d3e203432333636.roa
File:                     326130313a3666303a613130303a3a2f34302d3438203d3e203432333636.roa (raw, json)
Hash identifier:          jB+pxAFAFB0rZQHlK/eA9Q274t1f85Z5OboS2zPMUNs=
Subject key identifier:   13:1D:E2:EC:F4:70:0D:58:5B:E4:0F:06:F8:53:AD:FE:31:2B:50:26
Certificate issuer:       /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial:       381E4B1283CEE9803EC72CAC600D4838AF909CBF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a613130303a3a2f34302d3438203d3e203432333636.roa
Signing time:             Fri 13 Sep 2024 15:43:17 +0000
ROA not before:           Fri 13 Sep 2024 15:38:17 +0000
ROA not after:            Fri 12 Sep 2025 15:43:17 +0000
asID:                     42366
IP address blocks:        2a01:6f0:a100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1e:4b:12:83:ce:e9:80:3e:c7:2c:ac:60:0d:48:38:af:90:9c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
        Validity
            Not Before: Sep 13 15:38:17 2024 GMT
            Not After : Sep 12 15:43:17 2025 GMT
        Subject: CN=131DE2ECF4700D585BE40F06F853ADFE312B5026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:7a:36:70:45:26:f2:9e:2a:88:c8:22:25:
                    dc:ce:62:28:8a:40:94:be:74:17:ca:25:06:f3:09:
                    a9:28:02:44:ac:d1:48:a8:46:84:f3:a9:7a:d4:1c:
                    a2:14:e1:64:67:81:49:92:9f:db:ce:99:1e:0a:79:
                    83:20:c0:8e:1c:0c:27:df:35:61:1b:16:38:2f:39:
                    48:94:32:42:f2:97:46:51:1a:7c:0d:b2:40:76:cd:
                    36:84:88:6c:a2:a7:fd:4a:09:17:da:bd:34:1f:3e:
                    18:c2:a4:bd:74:7e:67:55:57:65:ff:b3:37:55:c7:
                    bb:7e:5b:6d:99:a3:4d:96:44:94:ef:fa:c1:93:50:
                    49:ac:c6:3c:a8:0a:db:b3:d6:cb:c8:28:de:8c:25:
                    61:ee:52:8a:c9:be:48:a7:6c:94:46:09:38:bb:81:
                    9d:a8:57:4f:6c:0e:d6:38:21:f9:de:5f:e4:97:d8:
                    18:4a:ca:c5:5b:ab:30:b2:c1:e2:ce:64:3d:fd:19:
                    f4:23:0d:a1:fe:ca:d8:6a:7c:6b:f4:3a:51:94:75:
                    89:d1:b2:26:31:6e:48:b8:65:1a:80:49:50:2d:b5:
                    d5:d8:20:c6:2e:7e:0b:fc:db:bc:fb:29:46:c7:b9:
                    ae:1c:cf:1c:53:bf:fd:b3:83:84:22:1d:fe:c8:d2:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1D:E2:EC:F4:70:0D:58:5B:E4:0F:06:F8:53:AD:FE:31:2B:50:26
            X509v3 Authority Key Identifier:
                keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a613130303a3a2f34302d3438203d3e203432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6f0:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:4b:7b:cd:d8:62:c1:8c:a9:d8:86:3a:d3:52:dd:61:78:9d:
         8a:ff:e0:02:46:d6:b8:f5:ff:d9:79:ec:bb:83:c2:13:39:06:
         f4:73:ad:88:25:4e:ba:38:94:b8:3d:c0:4e:96:eb:f7:4c:20:
         ad:58:bc:38:b8:d1:de:fc:06:4e:20:8e:95:cc:db:e0:e4:b1:
         68:e9:8a:a9:89:28:04:3d:9a:d4:f4:c3:0e:91:ce:e9:26:ab:
         df:82:d2:e5:b9:50:17:ce:f6:fc:f6:4d:e5:bc:39:7c:ca:2e:
         ae:8b:05:d5:f5:40:78:f4:9f:c9:07:6b:b2:b9:c5:de:e7:55:
         a9:6f:a2:03:d2:21:fd:92:b9:08:79:4c:04:5f:3e:85:16:25:
         63:b0:09:28:32:d2:0e:f4:64:b1:9a:64:0b:c6:7f:e3:2d:1b:
         40:74:ff:1e:1e:56:57:8f:1f:93:c5:ee:a0:da:7e:86:91:e8:
         e5:51:12:ff:14:b6:cd:73:66:8c:44:12:d8:68:b1:5f:11:8e:
         42:34:34:cc:72:9f:6e:fe:55:5f:8a:c2:95:91:cb:be:5c:ec:
         ad:3f:a7:e3:5b:8f:23:59:32:2a:a6:da:a6:f3:cb:84:b7:02:
         79:5f:b6:17:d2:89:c8:83:b8:15:ed:e7:68:ef:55:d6:a2:56:
         c4:a5:c1:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----