Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/6qGM5zz-AcgVrO6uVnTPy_APO_Q.roa
File:                     6qGM5zz-AcgVrO6uVnTPy_APO_Q.roa (raw, json)
Hash identifier:          jCHqf17fi+l7Ulh5HMUuF33PUkYcL0W9jTH/YEFEtU0=
Subject key identifier:   EA:A1:8C:E7:3C:FE:01:C8:15:AC:EE:AE:56:74:CF:CB:F0:0F:3B:F4
Certificate issuer:       /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial:       018F88F6771A3EEAB242055A896DA6A4C64B
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/6qGM5zz-AcgVrO6uVnTPy_APO_Q.roa
Signing time:             Fri 17 May 2024 23:50:04 +0000
ROA not before:           Fri 17 May 2024 23:50:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        185.195.0.0/22 maxlen: 24
                          2a01:77c0:1619::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:f6:77:1a:3e:ea:b2:42:05:5a:89:6d:a6:a4:c6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
        Validity
            Not Before: May 17 23:50:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=eaa18ce73cfe01c815aceeae5674cfcbf00f3bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:62:76:13:e6:a2:f8:13:59:41:e0:93:92:
                    d7:14:14:1a:b7:78:9b:41:ef:c5:3c:a6:08:19:e3:
                    f4:f1:59:43:58:4f:67:ba:b2:79:22:7b:83:0f:1d:
                    00:59:a7:27:f4:36:9e:1b:eb:a8:a6:63:45:44:3c:
                    02:2c:e6:df:9e:d4:7d:f9:c8:6c:fe:74:46:74:5f:
                    70:98:cf:55:49:85:85:8d:cf:2a:cb:9b:b7:75:a6:
                    35:79:b0:5d:73:67:35:88:43:89:54:69:e4:6b:32:
                    6f:bb:6b:8d:63:bd:70:30:19:13:e9:60:78:ba:b3:
                    7e:8d:80:d6:a9:85:2c:3b:11:d4:31:3c:d1:f6:28:
                    98:4b:2b:76:b1:8d:39:66:15:b6:6f:d3:df:e9:84:
                    b3:1a:8b:35:ca:91:8d:0b:74:df:02:89:90:63:45:
                    8f:28:8b:3f:0b:87:46:35:c2:ae:ca:11:36:00:11:
                    f2:74:41:7f:45:ba:32:0a:5d:96:8c:a8:d4:92:76:
                    32:e9:80:31:e9:88:7b:82:9c:c3:80:1c:97:62:94:
                    21:56:4f:d1:49:e8:2f:96:6b:ce:b5:c3:b6:df:e7:
                    0e:1a:a1:d1:6b:d7:09:76:4e:b6:d9:ea:cb:d4:fe:
                    2e:ea:08:29:0d:ee:ab:89:e3:e3:eb:8d:dc:40:68:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A1:8C:E7:3C:FE:01:C8:15:AC:EE:AE:56:74:CF:CB:F0:0F:3B:F4
            X509v3 Authority Key Identifier:
                keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/6qGM5zz-AcgVrO6uVnTPy_APO_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.0.0/22
                IPv6:
                  2a01:77c0:1619::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:09:56:96:d9:5e:aa:43:8a:b5:cf:2f:a0:a3:59:c7:18:55:
         83:61:3f:24:33:57:e6:99:0e:8d:77:58:b6:99:aa:89:3b:7b:
         f1:5c:8f:8a:f4:a5:11:fa:0f:25:90:df:bd:46:c3:6f:03:3f:
         29:aa:f0:25:55:25:c7:76:95:12:8a:9a:04:d5:07:ce:ae:4a:
         f7:dc:e4:bc:17:ec:15:48:cd:14:36:be:91:e4:8a:09:4f:51:
         5f:aa:9a:84:20:98:9c:6e:2d:b2:10:53:e1:7b:d2:79:5c:27:
         20:66:4d:6a:0e:61:99:bd:dc:28:87:25:82:59:8b:eb:bc:80:
         1c:91:a6:1f:9a:26:62:ba:c5:6f:37:42:bf:30:bc:58:65:aa:
         c0:24:89:ab:88:e1:14:92:41:cb:99:10:62:a2:1d:89:8e:00:
         a1:15:2a:68:d2:99:a8:0a:68:7f:44:08:59:46:86:b5:ce:89:
         50:d4:e2:a2:d6:9f:b6:c5:de:f2:4b:37:19:5d:33:f8:cf:63:
         5b:63:9e:09:47:f5:bb:ba:bb:5e:5a:2c:d5:81:e4:80:6e:6e:
         71:46:b4:ed:92:54:42:b2:b2:e2:b4:73:64:f9:79:57:fc:1c:
         72:73:f2:9c:f5:7b:d5:c0:16:40:7b:15:04:2e:97:dc:67:b4:
         1e:e1:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----