Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/4ghE65CEMKj3xyBF4B_L2zXtIFU.roa
File:                     4ghE65CEMKj3xyBF4B_L2zXtIFU.roa (raw, json)
Hash identifier:          wi4GiSUg1nIXaoJU/tgynxvbumWRtGfZ+plZPVwycU8=
Subject key identifier:   E2:08:44:EB:90:84:30:A8:F7:C7:20:45:E0:1F:CB:DB:35:ED:20:55
Certificate issuer:       /CN=56bfb0ccb5d9bcb3974ab939e20c895d21f46c71
Certificate serial:       018CC8DF33E852304E13CB8A40A1DF144F40
Authority key identifier: 56:BF:B0:CC:B5:D9:BC:B3:97:4A:B9:39:E2:0C:89:5D:21:F4:6C:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vr-wzLXZvLOXSrk54gyJXSH0bHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/4ghE65CEMKj3xyBF4B_L2zXtIFU.roa
Signing time:             Tue 02 Jan 2024 06:32:00 +0000
ROA not before:           Tue 02 Jan 2024 06:32:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204671
IP address blocks:        2001:678:5e0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vr-wzLXZvLOXSrk54gyJXSH0bHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:33:e8:52:30:4e:13:cb:8a:40:a1:df:14:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bfb0ccb5d9bcb3974ab939e20c895d21f46c71
        Validity
            Not Before: Jan  2 06:32:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e20844eb908430a8f7c72045e01fcbdb35ed2055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:39:f5:c9:ec:87:48:d4:bc:04:62:cd:99:
                    d7:6f:1b:48:49:ef:bb:90:f1:d8:8c:e0:64:0d:88:
                    89:e7:1b:3c:df:56:3f:f9:33:0a:1c:1f:a0:b1:37:
                    ae:92:0e:26:61:c9:51:e1:89:00:ad:69:81:2e:68:
                    80:ab:fe:bb:e9:e4:c8:ce:3b:f2:03:c5:8f:f8:9a:
                    a7:73:f0:f9:1d:3a:1f:83:19:d4:94:c1:1e:4c:82:
                    4b:8f:39:69:0f:95:26:52:2e:c8:da:29:f1:fa:8e:
                    af:41:bf:88:34:f3:e4:b8:2b:66:30:5b:2d:fa:85:
                    ad:b8:db:36:b0:b5:f0:dd:ca:85:67:af:5b:a3:b5:
                    47:ab:89:46:87:3c:44:6c:4a:b3:cf:ac:81:61:5c:
                    89:53:83:45:c7:f6:a5:91:e7:56:d2:4b:8d:de:b9:
                    c2:5a:1a:ab:1f:39:a8:60:7a:4d:11:5a:52:0f:ad:
                    34:ae:49:47:c0:2c:f4:40:f6:48:21:6c:1a:2b:26:
                    92:ae:6e:e7:9a:f3:e2:b3:9e:a8:59:3d:50:11:07:
                    60:fc:db:bd:f8:68:4e:24:17:9d:78:d0:36:b6:22:
                    6e:15:1b:2d:fb:ec:5b:23:4c:a0:49:51:1c:da:b1:
                    02:20:89:f6:55:16:23:5e:f7:52:f9:ad:19:8c:24:
                    b3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:08:44:EB:90:84:30:A8:F7:C7:20:45:E0:1F:CB:DB:35:ED:20:55
            X509v3 Authority Key Identifier:
                keyid:56:BF:B0:CC:B5:D9:BC:B3:97:4A:B9:39:E2:0C:89:5D:21:F4:6C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr-wzLXZvLOXSrk54gyJXSH0bHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/4ghE65CEMKj3xyBF4B_L2zXtIFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/5e6720-0f51-4014-ba1f-bda0bb885544/1/Vr-wzLXZvLOXSrk54gyJXSH0bHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:5e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:ea:2b:c8:f9:c7:cc:51:e6:0e:dc:9e:a6:8d:22:15:22:9b:
         6e:1e:1e:0f:58:f3:07:c3:f5:da:3b:03:d0:91:73:53:e2:35:
         93:34:f7:dd:07:a0:da:b0:c2:80:24:3c:d9:7d:70:07:37:70:
         e2:6f:19:4e:29:36:f0:26:2b:c3:14:fd:55:46:88:d2:a3:43:
         73:5e:6c:b6:5e:57:a4:5a:e5:2d:5d:5d:8b:dd:31:1a:56:08:
         1d:59:16:86:0a:40:9e:74:e2:14:8c:af:09:e7:57:10:e2:d3:
         9c:d4:6a:ab:49:e1:a4:a5:bc:c3:47:63:23:17:3b:95:3e:ca:
         ff:45:ce:c3:7a:0e:57:30:0b:6b:06:ce:97:91:87:f9:bd:52:
         8b:f4:75:4c:ff:79:63:ee:88:70:63:01:3a:28:c8:7a:f7:09:
         e1:11:14:32:6c:cc:78:86:a0:05:b5:36:a5:fb:d6:c7:69:df:
         40:ec:ef:ed:52:8f:e6:b4:2e:8e:ee:d4:72:ec:3b:ff:64:9d:
         c3:16:64:a7:a0:ff:d1:f2:e0:77:36:32:3e:60:db:b8:c3:a1:
         00:67:ec:43:67:12:83:d4:13:f6:26:25:95:59:dc:5a:0a:9f:
         8f:31:08:ed:75:9b:21:3f:ea:62:d7:e6:59:91:52:6c:15:89:
         b6:b9:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----