Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/7kx6oks1l596plr9wgbkw_rM9y8.roa
File:                     7kx6oks1l596plr9wgbkw_rM9y8.roa (raw, json)
Hash identifier:          t7JjmUXYnb1XENR7Euyav6tGsDts96ATQniaZJDa/pI=
Subject key identifier:   EE:4C:7A:A2:4B:35:97:9F:7A:A6:5A:FD:C2:06:E4:C3:FA:CC:F7:2F
Certificate issuer:       /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial:       018CC6B8364192BE83900A03DD62C712ED9D
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/7kx6oks1l596plr9wgbkw_rM9y8.roa
Signing time:             Mon 01 Jan 2024 20:30:10 +0000
ROA not before:           Mon 01 Jan 2024 20:30:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201330
IP address blocks:        185.78.96.0/22 maxlen: 22
                          2a03:58a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:36:41:92:be:83:90:0a:03:dd:62:c7:12:ed:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
        Validity
            Not Before: Jan  1 20:30:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ee4c7aa24b35979f7aa65afdc206e4c3faccf72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9e:ac:2d:17:48:68:d5:cc:64:6e:7c:05:f2:
                    68:3a:d1:14:39:b7:f7:cb:1a:51:c5:16:c1:14:b4:
                    e6:dd:41:f0:63:9d:4c:75:06:34:5b:1d:ea:45:15:
                    46:b1:52:6e:5e:b9:46:17:e3:20:b9:2d:00:4e:3c:
                    c4:1e:77:b8:a6:a3:02:73:38:29:b7:ef:1f:65:19:
                    6a:0c:93:d0:fe:bc:f9:44:fc:73:cc:19:cc:0c:c5:
                    26:97:51:98:63:df:53:fa:25:19:53:56:19:f6:b8:
                    80:a4:08:54:92:f8:97:41:49:cb:d9:9c:2f:ca:f9:
                    4a:8d:bc:24:8c:94:c9:1f:e1:08:a4:58:59:61:40:
                    a4:0d:89:e0:3b:f9:d4:02:df:ff:ed:4b:a7:4c:03:
                    aa:4c:9f:8f:e7:73:b8:5f:fd:da:4e:19:f5:98:d6:
                    7b:9e:1a:ab:31:2f:b4:8a:9d:3f:96:98:4e:c8:50:
                    a2:4c:bd:cc:93:a3:e3:5a:fa:40:73:87:0b:9b:d4:
                    0c:2e:46:e4:43:5b:36:28:ec:93:ee:01:d7:9f:3e:
                    2c:ad:1f:98:95:9b:71:10:aa:29:6b:27:58:97:5c:
                    8f:e7:94:e7:83:bb:3d:46:b2:c9:07:ff:7b:5a:25:
                    26:7c:07:67:21:f4:86:76:c2:08:2b:b9:2a:66:e0:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4C:7A:A2:4B:35:97:9F:7A:A6:5A:FD:C2:06:E4:C3:FA:CC:F7:2F
            X509v3 Authority Key Identifier:
                keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/7kx6oks1l596plr9wgbkw_rM9y8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.78.96.0/22
                IPv6:
                  2a03:58a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:e3:71:87:a7:d9:91:bc:01:01:1e:9a:cb:b0:7a:61:09:0a:
         da:d8:0b:19:98:7c:93:8c:95:cd:82:af:e6:c3:fe:5d:4a:ec:
         a7:1b:4f:7b:af:8c:b7:23:99:25:5e:7d:48:dc:0f:10:8a:14:
         39:ea:e5:c0:30:c2:1a:a3:e5:7f:1a:15:71:27:08:b0:58:3c:
         15:b0:f7:23:a2:e5:31:a0:14:a5:e7:4e:50:56:de:41:67:4f:
         a0:ef:fb:55:f0:67:cf:b6:38:fb:df:c9:98:39:c0:94:c3:2b:
         a3:6a:c7:7c:fb:92:a8:8d:2f:77:34:fa:46:4b:6a:c5:4b:e3:
         d0:eb:93:92:55:c5:45:51:ad:d1:9a:81:36:dd:66:bb:d2:d1:
         66:dd:20:2f:ea:b3:d1:1a:c8:58:bf:ff:4f:37:d6:93:b5:68:
         21:99:ff:e2:ba:8e:23:46:02:00:41:50:f0:26:a4:a7:37:2b:
         13:42:fb:1d:af:d0:aa:eb:b5:bb:89:b1:45:e6:c7:d9:24:cf:
         22:76:b1:21:69:8f:74:66:fe:6c:85:ad:f1:6e:03:d5:7a:07:
         61:e8:3a:20:dc:df:c8:24:34:cb:2a:38:c9:46:a6:57:2a:76:
         78:43:53:80:5b:cd:42:8b:f4:84:52:9b:d1:56:20:d5:f6:eb:
         d1:e3:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----