Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/sWar9PMH9_9rmvYFZyHW4b7SxMM.roa
File:                     sWar9PMH9_9rmvYFZyHW4b7SxMM.roa (raw, json)
Hash identifier:          dMuyzm8sHuim6PLNO+4BG+1gcP5w7kThY7BvMTz59SM=
Subject key identifier:   B1:66:AB:F4:F3:07:F7:FF:6B:9A:F6:05:67:21:D6:E1:BE:D2:C4:C3
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018CC4256BD3ECBF2994D12DFC115EC288A3
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/sWar9PMH9_9rmvYFZyHW4b7SxMM.roa
Signing time:             Mon 01 Jan 2024 08:30:35 +0000
ROA not before:           Mon 01 Jan 2024 08:30:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208088
IP address blocks:        2a0b:b87:ffb3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:6b:d3:ec:bf:29:94:d1:2d:fc:11:5e:c2:88:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 08:30:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b166abf4f307f7ff6b9af6056721d6e1bed2c4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ea:f6:5e:ef:50:12:0d:57:1d:49:99:4c:d2:
                    ef:49:6a:c2:4d:5e:ef:3e:e3:c8:68:b4:01:2a:74:
                    72:e0:37:be:65:e2:ed:a0:34:2f:b9:29:2a:27:16:
                    24:d7:db:00:65:fc:80:8d:81:1c:a6:33:29:88:ac:
                    15:81:cf:5a:d1:4a:af:50:02:bd:5d:03:c4:9b:47:
                    5a:1f:58:d7:0e:31:75:a0:73:83:ca:d5:9e:63:3e:
                    be:6d:66:05:dd:b2:93:90:e1:04:0f:19:fc:43:4b:
                    6f:43:10:d8:4e:dc:16:d5:e2:03:d6:3b:35:6a:49:
                    9e:23:70:9a:68:1f:a0:36:db:03:dc:ba:cd:a6:52:
                    89:80:3b:73:ed:c6:88:d6:f5:22:b6:b8:bb:99:9c:
                    ef:42:45:fb:4d:45:a0:f1:c3:6d:42:66:90:34:ab:
                    22:b9:85:9c:09:67:31:c7:c4:62:2d:98:33:58:8c:
                    1d:84:cf:30:63:89:f5:b0:8f:5d:0e:9d:f8:20:3c:
                    8d:fa:1b:3a:f8:65:a1:d3:3e:58:f1:8c:93:51:16:
                    f4:53:49:09:61:52:77:de:fb:3a:fe:0a:2a:0f:69:
                    a4:60:43:af:d3:e3:3f:89:83:cb:e9:f2:71:7b:18:
                    90:54:f0:de:3b:5b:09:d0:c3:74:b6:37:67:f9:03:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:66:AB:F4:F3:07:F7:FF:6B:9A:F6:05:67:21:D6:E1:BE:D2:C4:C3
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/sWar9PMH9_9rmvYFZyHW4b7SxMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b87:ffb3::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:ce:cc:f9:11:be:87:b2:55:d9:87:8d:3d:44:23:c4:90:0e:
         e5:d5:47:c1:61:65:8c:d1:43:a0:39:23:bf:ec:d3:8d:9a:29:
         a1:43:74:f0:5c:08:0b:e1:6e:3e:cf:9f:8b:da:c9:d9:fe:81:
         52:b8:b9:a1:99:26:1d:7a:c0:71:d7:c0:c0:dd:bd:2c:ef:f0:
         0d:d4:be:25:e4:da:df:c3:37:f4:77:cd:f5:5f:ea:a8:46:1a:
         09:d9:f4:ed:4d:33:4a:d5:17:0b:09:31:da:c0:8a:76:95:27:
         8a:28:24:d8:e7:b1:2a:77:ac:c5:d3:0c:f7:dc:69:08:6c:df:
         b8:fa:ea:c3:ad:b5:b1:aa:51:ca:ef:36:24:45:4e:10:6d:6f:
         e4:23:8b:ce:65:fb:80:e7:bf:ea:12:f4:d9:31:ec:fb:6e:5e:
         0b:ee:dc:2c:11:d6:24:31:f0:38:8a:09:c5:f3:b5:b5:06:da:
         39:54:68:0b:11:b9:99:43:25:40:04:35:81:ad:85:68:47:5a:
         c8:40:b7:fe:c4:d5:dc:98:d3:4d:5c:15:10:ef:c1:1e:a7:d6:
         86:48:10:82:76:78:b9:6d:09:00:97:98:85:d3:a7:37:c7:cb:
         f4:f7:e8:ef:04:b3:16:00:df:87:94:38:a5:49:53:e4:0c:12:
         80:0a:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----