Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/MJYeW4r5N_SerXfKtv7zvd9Gook.roa
File:                     MJYeW4r5N_SerXfKtv7zvd9Gook.roa (raw, json)
Hash identifier:          1EfC1ZIRkLvuTWnjOuAjkdwWb+SZf8SrVQ9/U/01qXg=
Subject key identifier:   30:96:1E:5B:8A:F9:37:F4:9E:AD:77:CA:B6:FE:F3:BD:DF:46:A2:89
Certificate issuer:       /CN=28035893a257a654f3f85495c4169ebe86de18d1
Certificate serial:       018CC795118500A27531322A8F205045AE05
Authority key identifier: 28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/MJYeW4r5N_SerXfKtv7zvd9Gook.roa
Signing time:             Tue 02 Jan 2024 00:31:24 +0000
ROA not before:           Tue 02 Jan 2024 00:31:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15815
IP address blocks:        217.14.96.0/20 maxlen: 22
                          2a00:7da0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:11:85:00:a2:75:31:32:2a:8f:20:50:45:ae:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28035893a257a654f3f85495c4169ebe86de18d1
        Validity
            Not Before: Jan  2 00:31:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=30961e5b8af937f49ead77cab6fef3bddf46a289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:b3:05:37:49:6b:df:08:5b:16:54:9a:9f:
                    62:24:96:e7:6e:98:b8:e1:c8:a0:1f:47:9e:17:4f:
                    0a:4f:17:8a:62:37:eb:d6:e7:de:d1:03:05:57:69:
                    a9:d7:85:a4:14:7c:f3:c5:d1:93:e4:d9:ed:7f:c9:
                    17:d1:33:ef:1b:ee:2f:8a:1d:ee:4e:d9:3a:fc:88:
                    6c:cb:64:4f:50:d9:86:59:ad:80:30:24:ce:8b:19:
                    63:b2:98:d2:2f:c6:0b:71:5b:f0:5a:37:14:91:4d:
                    fa:01:dd:0e:7c:10:6f:4e:8b:f9:9f:f9:a8:74:29:
                    a7:65:fa:b4:82:25:87:28:49:a4:7a:e3:23:f2:3a:
                    2d:61:ac:07:00:7d:3f:af:62:07:88:bb:b6:43:e1:
                    f7:7f:f1:41:72:2c:4a:2f:5d:ff:5a:d7:bb:b2:ee:
                    15:7d:be:52:23:8f:e7:f7:8c:38:e6:21:e8:88:5d:
                    90:e0:77:bc:27:94:cc:4d:9f:b1:38:16:66:cd:4b:
                    b1:5c:4b:70:b5:6b:15:81:58:5a:a4:16:ee:6b:b8:
                    7b:4d:9b:d6:39:96:47:7b:b2:80:7e:ea:58:27:85:
                    99:3a:47:8b:7c:f4:d6:f4:70:94:56:00:33:43:cb:
                    c5:ea:25:e7:17:8c:9f:52:37:a0:07:b2:8a:e4:36:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:96:1E:5B:8A:F9:37:F4:9E:AD:77:CA:B6:FE:F3:BD:DF:46:A2:89
            X509v3 Authority Key Identifier:
                keyid:28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/MJYeW4r5N_SerXfKtv7zvd9Gook.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.14.96.0/20
                IPv6:
                  2a00:7da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:a6:cc:d8:62:ea:87:62:df:2d:21:bb:d8:76:88:78:9f:6c:
         16:9f:1a:36:f4:96:7f:f1:3f:d0:48:3c:4a:44:b3:37:a3:44:
         e2:65:24:ce:0c:bc:96:5a:13:3d:1c:09:d5:9b:6a:aa:c7:0c:
         e3:5f:8a:b6:75:f8:c5:18:a6:4b:7a:8e:1c:18:46:88:f1:67:
         5a:f1:e4:b2:2a:33:97:37:e4:77:20:cd:19:45:ad:1c:f8:80:
         e2:69:48:ef:31:3d:06:66:28:24:74:d7:3a:68:ae:9c:07:9c:
         c7:0a:13:4c:b0:4a:74:62:fe:27:6c:cb:08:ba:7d:26:e6:68:
         df:9c:15:48:0d:7f:5c:7c:52:57:73:44:e0:6d:d4:80:21:09:
         fd:f0:88:e9:ed:23:7f:05:7c:60:07:0f:bf:62:f4:2f:a4:ed:
         de:4d:d7:2a:7a:e6:ce:83:58:aa:7e:9c:7e:e1:d9:46:9e:80:
         f2:ea:f3:a8:6f:fb:48:12:db:27:ac:5a:8d:7c:fc:f4:d9:49:
         05:ab:45:ca:87:e3:66:65:b8:a8:fb:88:c6:a3:ae:30:a2:74:
         6a:60:07:b5:5b:05:c8:16:c0:83:2c:34:a3:82:cd:1b:7a:79:
         21:82:94:7b:af:d3:25:ad:e6:17:14:b5:f8:ed:95:0c:3c:29:
         c6:b1:21:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----