Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zziDkMaXBGRtnOb_y4T_mFNgZew.roa
File:                     zziDkMaXBGRtnOb_y4T_mFNgZew.roa (raw, json)
Hash identifier:          LKs1/ivZDjadSdc7464BjABkW/PVVLqZSZHy0oLnC4U=
Subject key identifier:   CF:38:83:90:C6:97:04:64:6D:9C:E6:FF:CB:84:FF:98:53:60:65:EC
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       018CCA2A5D274F2F03B4CD8E5126C6029702
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zziDkMaXBGRtnOb_y4T_mFNgZew.roa
Signing time:             Tue 02 Jan 2024 12:33:43 +0000
ROA not before:           Tue 02 Jan 2024 12:33:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213151
IP address blocks:        185.197.135.0/24 maxlen: 24
                          2a06:e881:7300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 03:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:5d:27:4f:2f:03:b4:cd:8e:51:26:c6:02:97:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Jan  2 12:33:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cf388390c69704646d9ce6ffcb84ff98536065ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:19:b2:de:f8:ba:93:99:71:2e:c8:7a:c9:
                    c4:a5:70:00:ff:08:75:e9:76:16:ed:34:eb:c3:8d:
                    71:3e:5b:39:43:9a:11:a3:f4:32:77:f3:5b:94:7e:
                    89:02:6f:c5:00:c6:b2:b8:a0:01:65:e2:b3:e1:a2:
                    07:12:53:44:95:9c:59:77:94:18:d7:68:bd:db:03:
                    af:01:48:c8:8a:72:d9:89:61:e0:99:5e:f4:59:cf:
                    62:84:74:30:d1:1b:c4:25:ba:c0:7f:2b:3d:02:90:
                    bb:38:41:08:6e:13:5d:9c:dd:dc:c4:19:e7:e2:86:
                    d9:66:b2:7c:cf:aa:b6:20:f6:70:0c:cb:b5:a4:e4:
                    37:79:ad:51:b6:24:ab:af:5f:4b:96:4e:50:ac:fa:
                    e9:0e:95:7d:61:45:fc:d4:4c:f1:6c:b2:e7:60:33:
                    21:47:df:74:60:74:22:82:f7:c0:8b:02:8b:9c:2e:
                    d0:9b:c8:38:bb:fe:2b:47:4d:20:a7:fb:75:f7:b9:
                    53:1d:cd:18:75:1a:18:05:2d:94:14:93:fe:ca:66:
                    d8:dd:66:4d:ae:f8:b2:6f:5b:1b:d5:ad:ac:31:9f:
                    5c:8b:d8:fe:ab:5d:8c:fa:b9:e1:59:63:7e:3c:b3:
                    9d:98:c9:bf:5b:2b:34:2b:31:d8:19:a4:cd:b3:1d:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:38:83:90:C6:97:04:64:6D:9C:E6:FF:CB:84:FF:98:53:60:65:EC
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/zziDkMaXBGRtnOb_y4T_mFNgZew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.197.135.0/24
                IPv6:
                  2a06:e881:7300::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:e3:ae:b1:73:96:49:8e:c2:73:b4:d0:b9:92:99:10:bd:ec:
         da:4a:ef:56:60:c0:6e:95:e9:8c:4a:43:43:63:6f:e6:b9:71:
         37:7f:4e:f6:28:17:e5:2d:06:8f:93:fa:e2:5f:7d:80:bd:2e:
         9e:5d:82:ef:98:bd:26:0b:f0:2a:ba:22:fe:cd:b0:48:a6:b3:
         01:db:bc:eb:5d:af:3f:de:78:16:8a:57:c4:83:7e:ac:09:9f:
         1a:eb:2c:99:7d:a8:9d:01:11:f8:93:46:96:b3:75:cc:0f:29:
         fd:bd:1f:d8:e5:7a:d8:0d:b9:11:c8:cd:1c:6d:12:38:ae:2e:
         92:93:f1:47:1d:97:62:14:9e:8c:24:3e:d8:82:3f:2b:a3:59:
         6e:e0:c1:02:a0:5b:e5:a8:26:24:91:4a:73:df:6d:a3:6f:c2:
         9a:6f:c4:ca:d3:99:00:3d:59:b6:92:10:eb:2c:02:81:23:a6:
         7c:ec:fb:90:23:08:24:3b:52:b9:bb:e7:4d:90:a0:82:f1:e8:
         de:20:bd:7c:5c:1b:16:33:66:92:2f:28:7c:0c:b3:02:af:6b:
         ac:7e:88:f3:d4:1d:12:1f:95:94:d1:ea:a2:de:5c:06:75:71:
         c1:6e:a8:32:17:7b:5d:d7:93:79:15:d4:b6:28:a9:70:8f:73:
         35:c1:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----