Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/QP7YE6rhGNkXqdMC_9ivO3mUegk.roa
File:                     QP7YE6rhGNkXqdMC_9ivO3mUegk.roa (raw, json)
Hash identifier:          SRdQsAt44OpOt6JNcqyzpDVM/8rOMP9eZQtFMYo2nKA=
Subject key identifier:   40:FE:D8:13:AA:E1:18:D9:17:A9:D3:02:FF:D8:AF:3B:79:94:7A:09
Certificate issuer:       /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial:       018CC424C9AEBA2044EA1C43ADC4E43D584C
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/QP7YE6rhGNkXqdMC_9ivO3mUegk.roa
Signing time:             Mon 01 Jan 2024 08:29:54 +0000
ROA not before:           Mon 01 Jan 2024 08:29:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207853
IP address blocks:        91.210.152.0/24 maxlen: 24
                          2a07:b1c0::/29 maxlen: 48
                          2001:678:b9c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:c9:ae:ba:20:44:ea:1c:43:ad:c4:e4:3d:58:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
        Validity
            Not Before: Jan  1 08:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=40fed813aae118d917a9d302ffd8af3b79947a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:c3:23:6d:63:59:bf:b0:1c:50:fa:2c:98:
                    4b:25:e7:e5:42:37:0e:6b:d3:61:1a:b0:8f:85:8c:
                    61:00:e0:db:9e:bd:ae:b0:8c:9f:df:97:9a:ab:66:
                    08:d5:cf:a7:b0:64:bd:62:15:cc:83:08:87:c4:d0:
                    0a:9a:9c:61:2f:db:95:5b:ea:61:6c:de:0d:78:92:
                    4c:73:70:b6:9a:cc:03:7a:1e:70:86:42:f4:ee:70:
                    8e:5a:e9:6e:0d:52:d9:a0:d3:0a:b7:41:c7:9e:3a:
                    28:f3:a9:8f:5a:7b:3a:fb:f9:91:3a:02:8c:eb:d2:
                    d1:e8:9c:a7:06:3b:df:70:12:0c:3e:64:aa:91:73:
                    8a:de:84:00:ee:76:1c:e7:c2:c8:bd:7b:34:84:4c:
                    ee:f1:d0:ec:86:dd:07:e2:71:d2:8d:47:6f:8b:66:
                    59:84:5b:a7:72:7b:d0:82:61:47:ad:9e:08:f5:63:
                    70:94:4d:83:01:bc:2e:6f:78:81:9f:d8:05:7c:31:
                    28:f2:38:56:d0:8b:cc:32:2e:af:ea:3f:2a:5f:51:
                    36:9f:ef:4b:d3:bd:87:8a:9f:cb:fd:e3:88:42:22:
                    d6:0d:8d:9f:33:3c:21:4f:16:a6:1e:59:e1:0a:84:
                    1b:6c:c9:d7:24:66:3a:2f:28:bb:c4:bb:d8:b6:4c:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FE:D8:13:AA:E1:18:D9:17:A9:D3:02:FF:D8:AF:3B:79:94:7A:09
            X509v3 Authority Key Identifier:
                keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/QP7YE6rhGNkXqdMC_9ivO3mUegk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.210.152.0/24
                IPv6:
                  2001:678:b9c::/48
                  2a07:b1c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:63:ff:be:11:6b:e3:96:83:67:1d:7f:3f:aa:b8:74:d3:
         55:44:3c:a6:e8:a8:ee:a8:b4:4d:e1:d9:13:fd:e1:a3:eb:2b:
         1f:05:83:46:fd:1c:fa:2c:d4:57:63:7d:c3:a6:29:5f:fc:eb:
         4c:79:d3:48:57:f8:65:e9:32:98:e3:60:90:7b:9f:e1:67:42:
         bb:9d:23:df:8f:fd:f6:06:30:4b:75:6f:03:ff:1f:c7:96:4f:
         97:f1:91:52:5f:54:04:8d:2e:a8:8b:c5:e7:f6:e3:5c:ef:4e:
         c2:2a:f1:62:6a:70:1d:a9:12:0c:01:f1:75:3c:23:c3:62:22:
         4c:99:40:0c:72:0b:c0:9f:5e:3d:f3:1e:0e:00:56:d8:e3:ea:
         1f:d8:18:b0:6a:5f:b8:8f:2a:39:55:c7:cd:6a:a5:41:7e:c2:
         78:7f:d4:e5:38:c2:27:3d:15:e2:bd:ff:d7:81:61:09:1e:0a:
         5d:75:f8:a1:11:4e:f4:98:34:e8:67:b1:5a:29:dd:dd:e2:49:
         f6:b1:68:56:95:08:89:53:cc:49:4f:9f:7e:24:f9:9a:cb:a7:
         d9:e1:e3:ce:6a:85:aa:ec:c2:3f:ea:42:ae:32:e5:a7:77:eb:
         1f:7f:0c:a4:a5:3a:a1:52:b8:9d:3e:a4:3b:d2:fe:68:1f:69:
         0e:13:8e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----