Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/kQbb-sqiprt4AMrQekJlimjEy8U.roa
File:                     kQbb-sqiprt4AMrQekJlimjEy8U.roa (raw, json)
Hash identifier:          DjYKXTesR5HtE1PAPwuasivejcg92eWCvwS/yEIsxJA=
Subject key identifier:   91:06:DB:FA:CA:A2:A6:BB:78:00:CA:D0:7A:42:65:8A:68:C4:CB:C5
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       018CC94E0B3809C5C0DD5DD98398B27B026D
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/kQbb-sqiprt4AMrQekJlimjEy8U.roa
Signing time:             Tue 02 Jan 2024 08:33:04 +0000
ROA not before:           Tue 02 Jan 2024 08:33:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211155
IP address blocks:        193.59.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:0b:38:09:c5:c0:dd:5d:d9:83:98:b2:7b:02:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  2 08:33:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9106dbfacaa2a6bb7800cad07a42658a68c4cbc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bc:ec:96:53:ff:b9:d7:80:20:68:a1:6f:c9:
                    0b:c4:20:26:2f:c6:ab:84:54:6d:f1:49:87:23:5f:
                    b7:52:4f:fa:2d:89:83:de:3e:e2:0f:19:c1:6c:98:
                    7a:e3:3f:15:65:71:74:95:8d:04:66:bc:49:70:2c:
                    8d:3d:9c:dc:e6:e1:93:37:01:01:f1:b6:0d:b7:65:
                    d5:f8:bc:eb:c5:a7:63:7c:71:ea:1f:5d:26:42:b0:
                    5f:63:11:53:4f:57:3f:b2:ae:bf:21:87:48:d0:93:
                    a1:3f:ff:f8:2e:00:46:7d:25:b6:ca:57:26:4e:df:
                    f0:8a:ef:5a:39:f4:91:11:b0:c0:0c:d5:7d:5f:be:
                    7a:64:ff:b6:6f:ef:f0:41:e3:77:0c:56:18:01:24:
                    cf:20:81:33:d3:0c:98:1f:33:09:39:a7:4d:1f:26:
                    65:ef:d8:42:2d:7d:b3:84:69:bd:bd:f2:bb:ee:a0:
                    cb:7d:40:66:be:38:37:bb:ae:b7:43:5a:a1:a5:5f:
                    b5:c5:73:db:ea:99:d3:d5:35:f1:c5:a9:3d:95:95:
                    0c:d3:d6:73:ba:47:ee:5d:b2:cc:04:b7:94:77:66:
                    0a:d7:ad:8f:99:06:be:78:d6:85:2f:89:0f:13:49:
                    a2:a1:9e:21:19:af:c8:53:eb:07:dc:be:9e:d1:d2:
                    13:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:06:DB:FA:CA:A2:A6:BB:78:00:CA:D0:7A:42:65:8A:68:C4:CB:C5
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/kQbb-sqiprt4AMrQekJlimjEy8U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.59.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:1f:ff:5c:20:6f:ff:9e:73:fd:2d:4a:a8:1a:52:30:a1:02:
         15:24:57:6c:a2:9c:26:b0:ef:c9:1d:00:9b:78:87:18:9d:6d:
         77:ab:6e:c6:a4:30:6b:45:0b:0c:8b:80:02:66:ec:ff:5a:d8:
         c9:16:68:3f:27:c9:29:6c:74:f9:09:76:4b:4c:0b:9d:9c:ef:
         c8:61:f6:92:5a:5a:03:ee:d1:2f:8a:ff:f2:2b:53:06:c8:78:
         5c:e9:41:16:96:f2:2e:30:72:68:08:45:62:dc:85:f6:55:29:
         f2:a2:5e:71:1a:d2:16:3e:13:2e:4f:70:dd:c1:03:bd:17:46:
         a2:54:cf:61:51:8c:4d:fc:5a:76:7f:80:51:96:c9:7a:42:1e:
         67:8f:c9:a8:e3:8a:8d:26:c1:71:e8:85:81:49:74:06:2c:ae:
         86:65:1b:db:b1:d9:d7:db:77:11:93:0d:17:bf:6e:12:d6:5b:
         ba:3e:5a:ae:8e:2e:83:80:f4:1c:63:fd:2b:df:3b:04:08:9f:
         fe:e4:4d:de:6f:11:15:8f:f0:35:50:3e:11:58:c9:af:64:8a:
         93:aa:66:bf:db:b7:94:eb:bc:51:9e:29:61:54:99:65:89:92:
         d7:30:18:98:2b:1c:95:cd:fe:1a:ce:50:c4:e3:2c:33:d0:85:
         32:ed:2e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----