Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/asYc0hSRKg_SxY4vs3O_Y5BNQkg.roa
File:                     asYc0hSRKg_SxY4vs3O_Y5BNQkg.roa (raw, json)
Hash identifier:          jF5tMEiWEkeMOBp1HKRZBFBuKlpqvo4p+/DqM7uT+0M=
Subject key identifier:   6A:C6:1C:D2:14:91:2A:0F:D2:C5:8E:2F:B3:73:BF:63:90:4D:42:48
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       018CC6B77C686AED74C7151956F2DE2714A3
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/asYc0hSRKg_SxY4vs3O_Y5BNQkg.roa
Signing time:             Mon 01 Jan 2024 20:29:22 +0000
ROA not before:           Mon 01 Jan 2024 20:29:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39020
IP address blocks:        193.30.100.0/24 maxlen: 24
                          2a07:f7c7:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:7c:68:6a:ed:74:c7:15:19:56:f2:de:27:14:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan  1 20:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6ac61cd214912a0fd2c58e2fb373bf63904d4248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cd:29:f3:a5:46:24:5e:a1:b6:cc:84:1e:fe:
                    2f:a0:ca:50:c6:a0:45:10:75:b3:6f:8d:f4:68:9c:
                    bf:23:5b:fd:77:2c:dd:7c:5b:c2:9e:2e:2c:d9:ab:
                    72:92:c0:aa:0b:50:4b:d2:ca:4f:e9:7b:a6:03:35:
                    3b:c3:5f:95:4e:46:b3:6c:ed:52:5e:0f:bd:d5:7d:
                    db:11:23:d3:32:de:7b:cd:12:5f:a8:0c:c7:4d:17:
                    e7:ec:00:ee:6f:4c:62:e4:27:11:6e:9d:df:50:43:
                    c7:1d:cd:17:22:13:03:96:a0:af:fb:48:8a:c2:27:
                    ac:df:2b:12:11:c1:9a:c3:a8:e3:ba:bd:a9:0b:53:
                    7b:fc:dd:ae:5e:9c:48:dc:f0:d7:f7:2e:28:c3:28:
                    eb:94:55:a0:a0:ef:36:95:3b:2d:87:2c:08:24:d1:
                    c1:57:e7:f4:80:4e:e1:97:b1:42:dc:f2:ff:af:5b:
                    e8:52:72:a1:c9:c6:d9:3d:e3:bf:a2:1e:0c:ba:c3:
                    e2:09:bd:0a:54:35:09:bc:6b:97:95:7d:ad:7d:b6:
                    88:76:a1:c9:40:08:07:1c:98:f3:20:80:20:47:c5:
                    4b:46:8d:94:8e:bb:29:b7:e3:81:4b:79:af:21:80:
                    4c:7d:95:c1:00:b3:36:c4:cb:fb:6c:7b:9f:6f:03:
                    ca:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C6:1C:D2:14:91:2A:0F:D2:C5:8E:2F:B3:73:BF:63:90:4D:42:48
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/asYc0hSRKg_SxY4vs3O_Y5BNQkg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.100.0/24
                IPv6:
                  2a07:f7c7:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:ac:ea:c5:ce:4d:26:54:f7:e9:31:2c:de:c3:f6:5d:db:a3:
         15:24:8e:c9:92:ad:86:81:bc:06:6e:00:f7:68:fc:b4:e6:fe:
         4f:23:06:92:c1:13:8b:75:9c:01:2b:70:f5:c3:ee:d4:1e:94:
         59:3d:d7:d6:08:be:09:a3:4d:c8:87:e9:f5:33:dd:af:a2:9d:
         5a:be:f4:a0:f9:2c:31:a0:22:7a:7f:90:35:a7:78:89:cf:66:
         8b:6e:60:f6:38:f6:88:78:f1:3a:50:54:ce:97:b5:6a:57:d2:
         7f:d4:8d:ee:0c:a3:99:a6:76:72:56:62:8b:69:30:32:36:54:
         a2:d0:a3:30:c5:1f:ab:10:8c:1f:a2:4d:86:a8:70:96:0e:d3:
         49:e7:f6:48:ee:60:52:5f:0d:a8:73:89:67:cf:d4:05:3b:4a:
         63:38:fe:f0:97:09:0d:14:2c:39:86:ff:da:23:3c:1c:30:ce:
         5d:9c:4e:63:f6:b2:a2:ab:70:84:fb:ce:35:d2:ec:a2:0e:aa:
         fa:3a:7f:c2:eb:b8:e7:6e:1b:d3:d3:95:db:fb:11:a8:56:48:
         ab:24:6f:23:c6:84:93:59:61:1d:36:32:13:5c:12:08:1b:a7:
         75:9d:4e:30:ab:39:c7:10:e7:f6:b8:0b:b3:4f:81:d0:70:4b:
         22:03:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----