Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/bLiDi6czciTucLu2NWD18et2GK0.roa
File:                     bLiDi6czciTucLu2NWD18et2GK0.roa (raw, json)
Hash identifier:          WBWekoeQreuxysMK/ZbtP5FeElaKHXQ3XFltJiNZ7Ew=
Subject key identifier:   6C:B8:83:8B:A7:33:72:24:EE:70:BB:B6:35:60:F5:F1:EB:76:18:AD
Certificate issuer:       /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial:       018CC64B4034BA462D1E4B5134C7B836E409
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/bLiDi6czciTucLu2NWD18et2GK0.roa
Signing time:             Mon 01 Jan 2024 18:31:09 +0000
ROA not before:           Mon 01 Jan 2024 18:31:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211051
IP address blocks:        2a12:3fc2:ab50::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:40:34:ba:46:2d:1e:4b:51:34:c7:b8:36:e4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
        Validity
            Not Before: Jan  1 18:31:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6cb8838ba7337224ee70bbb63560f5f1eb7618ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:17:b1:67:5f:be:a4:79:b2:54:ed:72:0f:
                    df:62:a4:d5:e1:25:3d:80:eb:1f:b4:ac:af:58:24:
                    81:0b:71:27:fc:8b:e8:4b:f8:ef:74:46:5c:99:0a:
                    b6:a2:7a:47:32:af:91:fa:41:b6:89:2b:13:19:33:
                    82:1c:ee:9f:6d:8a:5e:01:ef:33:b2:9e:61:4e:46:
                    e0:bd:5d:2d:b0:a9:05:4e:0d:29:95:05:45:25:38:
                    2c:62:6b:fc:d0:5a:69:81:d3:e9:fa:f4:a3:09:c8:
                    11:9b:d9:5d:a3:0e:48:5b:65:5f:79:de:e0:47:74:
                    c1:fe:dd:92:9f:c2:b6:bd:7a:17:4c:ff:82:6f:e6:
                    bc:3b:1f:7c:34:c1:10:60:69:da:5d:7f:81:30:7e:
                    30:3a:0e:ec:11:f5:3a:55:84:4a:98:8e:17:03:23:
                    ad:d7:8c:92:51:1a:85:48:30:0b:01:dc:b0:69:86:
                    dc:ba:c1:6c:0c:42:ff:c7:07:de:b4:40:20:b5:57:
                    2f:02:f1:9b:f1:b5:82:7d:d7:92:44:fa:2b:8f:53:
                    34:72:95:32:13:19:c1:95:bb:d8:a2:fc:2f:8b:bb:
                    58:98:84:1e:c9:79:75:9d:39:c1:89:2a:d0:8f:1c:
                    b2:6a:b9:a6:8c:3c:52:f2:d4:4b:e2:3b:e2:37:20:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B8:83:8B:A7:33:72:24:EE:70:BB:B6:35:60:F5:F1:EB:76:18:AD
            X509v3 Authority Key Identifier:
                keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/bLiDi6czciTucLu2NWD18et2GK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:3fc2:ab50::/44

    Signature Algorithm: sha256WithRSAEncryption
         1a:96:54:12:f3:45:44:29:2b:72:ea:01:96:bc:bb:da:72:e1:
         5f:66:49:6c:65:ea:b8:21:75:ac:74:a2:ae:e3:6a:c9:a6:21:
         25:3b:aa:21:df:e7:21:fb:21:72:a3:c9:93:41:6d:f3:fb:1f:
         bd:df:44:86:b6:3b:2b:b4:72:79:a4:73:43:51:b8:e2:4a:1f:
         e9:5f:21:0f:ce:34:50:ec:0d:dd:4c:83:4e:7a:9d:d8:9a:0a:
         88:5d:8c:3a:18:83:c5:14:ae:2d:d5:e9:76:64:74:28:41:11:
         90:6f:1c:b4:26:3e:7b:4e:79:c5:f2:70:1e:4d:33:f3:7e:83:
         b4:66:d1:00:63:15:32:80:e8:44:55:ea:46:59:4e:1b:5f:e2:
         fb:11:36:aa:3a:55:dd:63:30:0e:36:80:77:c1:37:15:51:61:
         ca:a1:88:f2:70:b6:11:7a:d1:0a:1e:1c:b2:3d:b9:90:4f:53:
         9a:0c:1b:78:2b:6f:c8:11:b5:52:eb:8e:87:28:77:bc:96:51:
         f8:98:bf:f2:50:aa:f9:f2:b8:3f:ff:3d:7a:82:a1:c9:c0:e4:
         fb:00:2e:e3:be:bb:75:45:12:4d:a7:c4:7b:71:b3:2d:f6:d7:
         d1:52:52:ab:10:4f:2e:a8:64:ff:f2:da:a4:17:d7:79:f2:3d:
         5e:ed:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----