Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/AxJZJZJDXQQxIDuYYFPAfDT1tIc.roa
File:                     AxJZJZJDXQQxIDuYYFPAfDT1tIc.roa (raw, json)
Hash identifier:          uhW0irGiMfcTISDl2jYvGF+2wBIavExDXe6RbS2z130=
Subject key identifier:   03:12:59:25:92:43:5D:04:31:20:3B:98:60:53:C0:7C:34:F5:B4:87
Certificate issuer:       /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial:       018EECE52D00EFFBE1CA779D3990504EC9BE
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/AxJZJZJDXQQxIDuYYFPAfDT1tIc.roa
Signing time:             Wed 17 Apr 2024 16:30:25 +0000
ROA not before:           Wed 17 Apr 2024 16:30:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51765
IP address blocks:        2a10:9681::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:ec:e5:2d:00:ef:fb:e1:ca:77:9d:39:90:50:4e:c9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
        Validity
            Not Before: Apr 17 16:30:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0312592592435d0431203b986053c07c34f5b487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2c:cc:f7:c3:14:9d:71:97:6c:a4:2f:a2:58:
                    49:ab:f9:a1:f9:84:ae:5b:b8:b5:d1:44:d0:54:5e:
                    d6:c7:b2:af:1c:0d:8c:b4:5d:0d:74:3a:12:b2:1f:
                    1d:b4:40:b9:5f:48:de:79:14:54:5a:d4:85:53:15:
                    b5:ff:14:7b:42:5c:6f:b6:92:86:fc:89:cf:1d:46:
                    14:e5:fd:8f:8d:6b:9d:30:8e:d9:03:01:55:5b:d6:
                    eb:03:3e:52:4b:bc:70:4a:7c:3a:d5:eb:8e:2b:18:
                    a5:7e:a0:37:02:76:81:0a:98:e0:88:9c:4e:8b:d6:
                    19:c2:fa:1a:1f:b0:b2:87:70:2c:32:96:2d:54:5e:
                    57:a6:87:21:42:23:e9:7f:f4:35:cd:c1:a0:78:42:
                    1d:ba:1d:14:39:62:88:03:8c:4a:34:1a:80:d8:4f:
                    bc:a1:5e:d4:5a:41:0f:87:15:ab:9f:42:86:5e:f9:
                    36:12:2e:8d:78:33:c0:f0:ad:f0:66:dd:f2:49:cc:
                    ee:a0:7a:b4:76:12:0b:8f:1e:ae:26:aa:14:a9:d1:
                    f3:d4:bd:ac:bc:cd:ac:52:0c:de:62:37:0d:2f:cd:
                    f6:2b:15:b5:25:00:9a:89:32:7d:94:b1:f1:0c:03:
                    41:c5:4a:48:0d:ec:2a:6f:6e:06:29:4a:ac:e7:3c:
                    a6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:12:59:25:92:43:5D:04:31:20:3B:98:60:53:C0:7C:34:F5:B4:87
            X509v3 Authority Key Identifier:
                keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/AxJZJZJDXQQxIDuYYFPAfDT1tIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:9681::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:95:dd:7a:3d:86:2c:06:84:f7:fb:55:85:3d:c1:c4:93:7d:
         09:89:3d:f6:13:72:ea:a3:d3:f1:74:64:31:c2:13:6d:84:28:
         21:2c:cc:7d:c9:4a:35:10:85:38:74:30:09:85:ea:a6:a5:aa:
         00:66:88:23:71:af:b3:15:ce:86:12:ff:37:a6:5d:59:a2:e7:
         22:e3:f2:08:d9:85:ad:f6:cc:7c:9c:de:ef:65:64:4e:65:4b:
         d6:14:c6:0b:8e:ca:5f:ff:51:cc:82:d9:2e:65:9f:6f:b1:ae:
         19:89:b4:dd:3d:5b:f7:b4:b1:fe:45:62:88:ce:ed:a7:53:aa:
         69:95:0f:cf:bc:88:01:f8:ce:79:75:ae:48:cf:20:3d:fc:88:
         7e:60:cb:95:7a:6a:50:4b:7e:19:aa:6e:54:2d:d1:a9:93:da:
         a3:c1:3c:12:95:f9:09:1a:bc:4e:5a:21:a7:54:39:3c:7a:3d:
         47:4d:6b:be:2b:9f:e9:64:55:7d:eb:d7:73:a7:d0:7a:fb:ff:
         e9:45:95:84:59:00:ae:60:35:42:38:c8:39:fe:95:00:c5:d3:
         da:41:f9:0c:a3:36:12:ae:46:f0:dc:58:38:ed:e6:2f:08:47:
         d1:e8:f6:48:1a:18:36:8e:ba:cd:c5:4f:b1:89:8b:95:c8:31:
         71:8d:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----