Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/SgwbKz2MC4zNFDLc3kFpZ3RG7x8.roa
File:                     SgwbKz2MC4zNFDLc3kFpZ3RG7x8.roa (raw, json)
Hash identifier:          hZS3QycupqS5d2fvMLxS2fuMIGcH5zgV8wcw4IUNaMM=
Subject key identifier:   4A:0C:1B:2B:3D:8C:0B:8C:CD:14:32:DC:DE:41:69:67:74:46:EF:1F
Certificate issuer:       /CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Certificate serial:       018CC9BC5ECB308A5AFC98813AD06B86A448
Authority key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/SgwbKz2MC4zNFDLc3kFpZ3RG7x8.roa
Signing time:             Tue 02 Jan 2024 10:33:34 +0000
ROA not before:           Tue 02 Jan 2024 10:33:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197942
IP address blocks:        2001:67c:a30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:5e:cb:30:8a:5a:fc:98:81:3a:d0:6b:86:a4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
        Validity
            Not Before: Jan  2 10:33:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4a0c1b2b3d8c0b8ccd1432dcde4169677446ef1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:65:7d:66:53:fe:1a:4e:39:5f:09:08:9e:
                    73:e2:ae:61:9f:ac:b1:c8:2c:76:55:de:77:b6:d0:
                    a2:96:b1:8c:9d:f7:7e:96:55:9f:48:19:f2:74:57:
                    e5:d3:88:07:2b:e3:4b:44:ff:fa:e0:ad:a3:ee:3a:
                    73:f9:70:21:b1:17:1e:d0:7f:10:53:b6:eb:ab:67:
                    dd:83:bf:d6:c3:1f:15:3f:20:29:ee:de:08:3b:a5:
                    9b:e5:d1:82:e1:6a:ce:7d:ff:6a:1c:84:35:9d:ef:
                    5d:bf:1f:73:f4:b7:12:a0:d2:fe:f7:61:df:94:2b:
                    91:5b:22:b1:48:fe:2e:75:ae:a4:48:bd:e5:77:1b:
                    f7:76:54:86:50:4d:93:93:e3:e2:b7:9b:53:b9:80:
                    b2:75:c6:3a:6f:cb:c2:d4:8f:68:49:10:d0:47:34:
                    61:29:63:aa:d2:43:39:3f:b4:22:6f:12:54:bf:be:
                    63:c9:3c:1d:5b:8b:b7:33:50:97:9c:49:65:cc:bc:
                    8f:45:ca:5b:cb:06:b2:87:ff:3d:e8:a7:ff:6d:c4:
                    12:8c:ce:85:a2:e8:3d:65:c6:dc:a5:3e:55:25:3e:
                    24:ab:7a:1d:c3:d4:62:ac:fb:93:58:94:8d:6c:ba:
                    d5:4c:51:d4:b3:f2:40:d1:c7:6b:2a:5b:87:d0:17:
                    44:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0C:1B:2B:3D:8C:0B:8C:CD:14:32:DC:DE:41:69:67:74:46:EF:1F
            X509v3 Authority Key Identifier:
                keyid:6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/SgwbKz2MC4zNFDLc3kFpZ3RG7x8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a30::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:d8:29:14:2d:b7:28:ad:b5:0e:a0:af:ab:d9:27:13:1e:1b:
         80:10:2f:da:cd:7d:37:c0:2f:f2:9e:75:45:3d:e6:17:40:68:
         e3:dc:8f:20:f9:99:7c:9a:e4:9d:30:b8:f1:73:59:92:21:f1:
         79:cb:19:01:70:04:5f:2b:5a:a4:c2:e1:a4:fe:ae:8e:7d:df:
         4e:13:e7:ef:c5:9f:37:b4:61:71:61:0e:54:ec:e8:e0:76:6d:
         5f:d9:88:78:76:a5:83:e5:5e:0e:82:4f:fc:bb:d3:9d:9c:41:
         2c:29:8b:a1:37:5b:5b:81:fb:0d:9a:21:82:b6:35:b3:8f:f8:
         8f:4f:14:84:9a:21:1c:27:8d:9c:b5:8a:92:ca:02:8e:38:0e:
         04:02:a4:37:b4:1f:ec:ea:f0:2a:61:7a:d2:05:ba:a3:fa:00:
         61:c8:87:36:51:0f:2c:5b:03:e8:39:03:55:7c:83:1a:87:31:
         be:e4:95:63:c3:59:a3:91:53:58:dc:ce:b6:5a:20:b5:be:c1:
         b7:6c:37:c7:64:ef:ae:a2:9b:9e:e6:32:1b:41:a0:b0:31:0b:
         60:be:82:5d:67:60:ca:85:d3:7d:2f:12:bd:af:a7:e3:1d:96:
         7a:a0:a4:a6:1a:30:f4:15:db:c4:ec:41:33:1e:af:43:3e:a9:
         d5:68:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----