Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/LlwRjf77hNr3O3DXi61qwgGDLfQ.roa
File:                     LlwRjf77hNr3O3DXi61qwgGDLfQ.roa (raw, json)
Hash identifier:          m2PzaDWZrdO4oNu4mPH/U2kv3SSh+OsP0MHKqEfAYMw=
Subject key identifier:   2E:5C:11:8D:FE:FB:84:DA:F7:3B:70:D7:8B:AD:6A:C2:01:83:2D:F4
Certificate issuer:       /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial:       018CCA2A7528D8D0B31A81D99A15DB485E05
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/LlwRjf77hNr3O3DXi61qwgGDLfQ.roa
Signing time:             Tue 02 Jan 2024 12:33:49 +0000
ROA not before:           Tue 02 Jan 2024 12:33:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     906
IP address blocks:        45.88.192.0/22 maxlen: 24
                          2a07:aec0::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:75:28:d8:d0:b3:1a:81:d9:9a:15:db:48:5e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
        Validity
            Not Before: Jan  2 12:33:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2e5c118dfefb84daf73b70d78bad6ac201832df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:68:42:0a:61:da:52:a1:fb:64:5a:1e:6e:
                    69:1c:3b:e5:f0:4a:62:2a:18:62:c6:8a:0c:87:23:
                    9b:a9:39:b2:a8:7f:82:75:c5:7c:32:1f:03:66:50:
                    1c:5f:0b:20:f6:60:07:8b:52:9e:3a:7c:1e:31:04:
                    f1:73:7f:a4:47:c6:6e:5c:50:35:3f:c5:f3:02:0d:
                    0e:59:ae:e4:5e:9d:6d:8b:ae:57:49:30:b0:56:23:
                    af:55:23:9f:03:a2:78:10:32:d4:20:7b:0f:9f:b2:
                    61:ac:ce:51:c9:75:8b:ce:de:6c:22:68:5b:16:02:
                    dd:8d:f8:ca:7c:32:3f:b2:32:6b:0b:43:79:30:1a:
                    ae:b8:27:a5:73:db:68:59:d0:1a:1d:12:11:33:9b:
                    a1:12:a9:f4:d3:f4:37:f1:15:f0:b3:4e:8f:65:67:
                    e2:c8:98:ab:3c:93:16:ba:a3:62:a1:f4:29:d1:4d:
                    ac:dd:e8:76:ab:52:6d:76:7e:65:e9:d3:0c:01:32:
                    39:06:d2:5a:ab:c8:9d:3c:97:a5:4f:bb:10:32:05:
                    cf:84:f6:c5:77:88:9a:f7:5b:59:d7:c3:d3:f1:d9:
                    57:68:63:75:75:0f:e4:5d:46:66:90:ea:dc:96:84:
                    18:70:8b:5a:88:9e:15:45:24:d4:37:d4:d6:7e:9d:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5C:11:8D:FE:FB:84:DA:F7:3B:70:D7:8B:AD:6A:C2:01:83:2D:F4
            X509v3 Authority Key Identifier:
                keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/LlwRjf77hNr3O3DXi61qwgGDLfQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.192.0/22
                IPv6:
                  2a07:aec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:d9:08:b5:2d:59:92:70:10:79:39:74:d7:22:27:41:0b:53:
         7a:af:90:44:56:e8:92:df:ce:84:66:20:ca:37:96:8d:65:a6:
         64:7c:08:99:f3:d6:c4:03:a0:8c:58:4c:76:70:0f:a3:ce:0f:
         c8:f1:eb:05:7e:e6:8c:81:56:7a:d5:a1:f3:21:53:de:09:40:
         fb:e4:8a:03:8c:f2:09:a9:ba:a3:82:e3:29:7e:61:0f:80:61:
         ab:85:89:a1:1c:27:af:7f:7c:5d:07:29:0c:ba:15:26:c1:03:
         93:1f:0f:1a:fc:1f:43:a2:1e:c8:01:5d:df:d8:20:80:cc:8d:
         68:24:cb:10:bb:09:98:c8:fb:e9:26:1b:82:d8:49:3a:b2:38:
         12:20:a8:47:ce:d4:fe:e9:49:cd:46:9b:67:25:5b:e7:ba:34:
         b0:f4:12:ab:f1:b5:da:f1:04:44:fa:2b:72:39:7f:ac:85:7c:
         75:1c:f2:34:96:ec:a2:05:28:86:d3:6b:0e:0a:64:4d:47:d7:
         e7:9f:d4:cb:37:c6:f0:0b:f5:e6:b2:dd:8f:d4:71:80:4e:99:
         12:ff:f6:71:67:65:0c:c5:e2:fc:a7:b0:4d:0d:51:69:e2:7a:
         d0:a6:86:1a:d6:14:78:9e:e6:38:35:5f:0e:2e:4c:9b:58:dd:
         32:40:8a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----