Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/EuvhNO7pWOsIGl4HF620qamTRNc.roa
File:                     EuvhNO7pWOsIGl4HF620qamTRNc.roa (raw, json)
Hash identifier:          ZB3l0ZqFJjXPHrrqYucZ3qYXsvfTkaNV8by8P1MzlOY=
Subject key identifier:   12:EB:E1:34:EE:E9:58:EB:08:1A:5E:07:17:AD:B4:A9:A9:93:44:D7
Certificate issuer:       /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial:       018CC425615BFAD31903BB9091DB25886CBE
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/EuvhNO7pWOsIGl4HF620qamTRNc.roa
Signing time:             Mon 01 Jan 2024 08:30:33 +0000
ROA not before:           Mon 01 Jan 2024 08:30:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12301
IP address blocks:        5.56.35.0/24 maxlen: 24
                          5.56.34.0/24 maxlen: 24
                          2a01:47c2::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:61:5b:fa:d3:19:03:bb:90:91:db:25:88:6c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
        Validity
            Not Before: Jan  1 08:30:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=12ebe134eee958eb081a5e0717adb4a9a99344d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:92:67:58:71:e4:8b:38:c7:4e:78:83:5c:
                    1e:66:18:25:e9:d5:0b:50:cc:f9:08:cb:48:a8:bf:
                    2d:39:ec:2f:4c:40:78:df:a1:26:eb:7d:e6:36:a0:
                    ff:fa:8b:b7:e4:37:24:a3:a0:be:0d:42:72:9e:03:
                    c6:27:5b:cf:f4:11:9b:2b:2b:89:9b:ea:0a:15:43:
                    b6:6a:3f:0e:0f:68:b8:8f:f4:88:47:c2:8b:e2:52:
                    aa:4d:3e:cf:cd:33:51:b7:b5:1d:cc:1c:9b:b7:44:
                    99:ec:82:05:e1:7e:96:1f:e6:94:72:68:91:9d:57:
                    98:c2:a3:e3:83:1c:9b:65:32:d7:0c:41:c3:db:4a:
                    6f:ef:77:cc:33:1e:b4:94:cc:ed:e7:c6:0a:ea:a3:
                    a2:84:a0:91:5b:f5:64:b5:3d:30:91:97:e2:f8:20:
                    4b:a9:fa:ba:87:49:f2:bb:ce:8e:8a:61:2b:30:5a:
                    69:6b:33:e2:3c:c0:35:d3:f3:0f:c0:4a:e6:91:1c:
                    3f:45:35:4c:b6:63:5d:c9:ad:a1:e2:b5:3e:71:62:
                    4b:ee:f7:58:ef:a3:91:7b:85:1f:d0:65:bd:09:71:
                    61:95:7b:9f:a3:34:1b:19:23:cd:d2:81:a6:67:ea:
                    e8:d2:fe:6b:a3:d1:9b:83:3d:fc:a7:64:58:a4:f3:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EB:E1:34:EE:E9:58:EB:08:1A:5E:07:17:AD:B4:A9:A9:93:44:D7
            X509v3 Authority Key Identifier:
                keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/EuvhNO7pWOsIGl4HF620qamTRNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.56.34.0/23
                IPv6:
                  2a01:47c2::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:47:8a:d2:db:12:08:9b:87:a5:a1:d7:4b:a3:02:ca:c2:a8:
         25:81:ba:89:7f:31:26:98:17:92:43:4c:10:d7:ef:b1:3d:f3:
         d5:30:26:e8:82:40:19:43:fd:17:ba:20:6e:9d:ac:cf:21:14:
         f6:26:2c:94:0e:90:39:31:46:4f:eb:7c:0c:21:54:3e:c5:e4:
         13:ff:08:4c:7d:fb:29:02:1e:6d:16:89:63:31:41:df:63:5c:
         43:89:37:10:5d:71:92:8b:61:d1:d5:43:26:8a:77:f2:6b:cb:
         4a:5f:66:34:70:58:d5:11:c9:e8:10:1e:59:40:26:9f:87:27:
         61:d7:a3:20:53:a5:47:12:31:2e:90:9c:2e:f4:a7:72:1a:cf:
         85:7d:d0:94:bb:05:de:64:77:f5:a4:d3:44:f2:a7:9b:01:b0:
         1e:16:c4:30:dd:46:1a:81:cc:94:6f:df:4c:4a:82:08:2c:cd:
         55:43:c1:33:ae:b2:81:0c:4e:3d:c5:01:8b:ac:d2:73:2e:94:
         93:55:06:a5:11:69:5c:90:e8:5e:88:e1:0e:97:13:65:13:b8:
         22:1a:79:01:35:1b:76:ab:12:bd:a0:23:d7:41:85:56:d3:ba:
         79:bf:57:9d:e2:a6:41:1f:fe:93:7f:be:47:44:a8:ea:1d:57:
         60:61:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----