Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/B1cQLLROQr3Ft5yoLLTHzifKPMY.roa
File:                     B1cQLLROQr3Ft5yoLLTHzifKPMY.roa (raw, json)
Hash identifier:          oKrYoY5FzbNcm+xJPzzbHPqwHmIMejL+yGEtFOjGoEg=
Subject key identifier:   07:57:10:2C:B4:4E:42:BD:C5:B7:9C:A8:2C:B4:C7:CE:27:CA:3C:C6
Certificate issuer:       /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
Certificate serial:       018CC80126F405BC4719F656396699D74469
Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/B1cQLLROQr3Ft5yoLLTHzifKPMY.roa
Signing time:             Tue 02 Jan 2024 02:29:27 +0000
ROA not before:           Tue 02 Jan 2024 02:29:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        2a13:141:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:26:f4:05:bc:47:19:f6:56:39:66:99:d7:44:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e
        Validity
            Not Before: Jan  2 02:29:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0757102cb44e42bdc5b79ca82cb4c7ce27ca3cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:e0:48:67:60:7e:ee:85:3f:b2:f7:a7:81:
                    e6:0e:9c:e3:f2:3b:9e:fe:38:04:ed:f0:dd:8a:d3:
                    31:14:bb:5d:7a:4b:07:26:62:5d:84:48:61:e0:a1:
                    fc:1b:fa:05:5e:41:70:06:3b:ac:ad:92:d2:55:29:
                    05:28:d4:cc:27:84:7e:30:f5:5d:71:8b:19:df:11:
                    86:91:4f:bc:6c:18:8a:3d:47:67:7c:1f:f2:a4:ec:
                    73:55:9d:33:c3:37:43:f6:14:c8:d2:67:b7:d4:c6:
                    7c:a5:b7:7c:93:d1:05:22:6c:b5:a1:e2:58:5d:8c:
                    f5:f6:e9:3b:6b:62:95:9a:5d:bb:c9:fc:87:b9:ca:
                    f4:41:fe:64:bd:fe:4b:48:c3:06:5e:61:f0:bd:50:
                    ba:39:08:7f:41:e6:58:ba:0b:41:ba:c5:a9:c0:33:
                    b3:4a:02:45:6e:b4:25:ce:ac:39:a1:ff:c1:64:12:
                    bf:c2:50:e1:fb:91:4f:0a:0a:75:55:c4:55:aa:2a:
                    1d:da:6f:46:4d:1f:cd:40:db:91:91:a8:a8:20:4a:
                    97:99:36:65:36:36:78:f1:f1:e7:bb:c0:94:12:03:
                    47:4e:8e:65:2e:dc:e9:7a:ed:a3:6c:2c:16:f1:24:
                    fa:17:fb:4c:d0:f4:b6:27:d3:aa:4b:25:d1:7c:e0:
                    9c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:57:10:2C:B4:4E:42:BD:C5:B7:9C:A8:2C:B4:C7:CE:27:CA:3C:C6
            X509v3 Authority Key Identifier:
                keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/B1cQLLROQr3Ft5yoLLTHzifKPMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:141:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:a2:3b:a2:86:2f:d1:2d:17:79:a4:f4:64:9a:28:00:8a:
         3f:7c:d5:b3:48:1e:27:ef:3c:82:ef:ca:a0:d4:a1:7f:f3:16:
         a9:19:91:a5:32:3d:e7:49:46:4b:9e:10:ff:a1:f0:4c:85:43:
         16:1a:f1:7e:07:d9:9a:0a:6f:85:ef:3a:ff:c2:0f:d8:ab:bf:
         26:5d:8e:dd:bf:62:3e:d9:d1:74:fc:92:1a:35:d5:a8:d4:a0:
         bc:28:b0:00:b2:fe:b7:06:3a:1e:83:9a:69:f6:36:7f:cb:60:
         f2:44:c8:d8:77:1c:ef:99:1b:d9:1f:67:5a:ac:b2:f5:96:ae:
         42:11:94:f7:75:b7:8e:96:14:d1:46:4d:6c:5b:c5:ed:e3:18:
         1d:57:f1:eb:b6:6a:8e:4e:70:29:2c:be:53:05:cc:a6:0c:e3:
         13:13:4d:49:6d:cf:7f:d3:d6:6f:53:ce:5b:43:dd:94:b2:a2:
         da:91:b9:b2:c5:2e:2b:99:48:42:b4:bb:ae:c9:ee:53:95:13:
         77:a6:c0:f1:dc:41:85:23:77:fe:a0:f7:44:51:ca:e9:44:81:
         51:93:b4:0b:1b:fe:0f:28:5f:c0:0b:94:f0:46:c8:0e:cf:33:
         ab:a1:14:ac:81:33:bb:b6:0e:eb:fe:b6:93:02:f0:d2:60:e4:
         3f:0d:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----