Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/cQrqr0C1Z-YpiH72k29CLlGMtz8.roa
File:                     cQrqr0C1Z-YpiH72k29CLlGMtz8.roa (raw, json)
Hash identifier:          4kel2/bKPsPvmI8Z5FZu8vl9bOIRd4CxPi9yV0WRojo=
Subject key identifier:   71:0A:EA:AF:40:B5:67:E6:29:88:7E:F6:93:6F:42:2E:51:8C:B7:3F
Certificate issuer:       /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial:       018CC79552988C7C0360065B97E7CE61DFDA
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/cQrqr0C1Z-YpiH72k29CLlGMtz8.roa
Signing time:             Tue 02 Jan 2024 00:31:41 +0000
ROA not before:           Tue 02 Jan 2024 00:31:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207163
IP address blocks:        93.96.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:52:98:8c:7c:03:60:06:5b:97:e7:ce:61:df:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
        Validity
            Not Before: Jan  2 00:31:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=710aeaaf40b567e629887ef6936f422e518cb73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:18:60:8f:f5:02:5e:0d:44:22:a5:14:53:
                    b6:df:ac:29:bb:c1:ee:58:cd:19:92:0b:73:69:3e:
                    73:60:16:57:b4:c5:d7:e1:45:56:1b:3a:a8:2b:60:
                    b7:7c:31:6c:e1:5f:c1:0d:66:ca:55:f5:09:72:69:
                    84:02:db:bf:1e:8b:7a:be:2c:d6:13:8d:6b:05:2d:
                    94:41:3e:46:3a:cf:65:86:44:d3:58:ff:48:4f:b0:
                    6d:f4:ff:84:a8:6a:80:b9:a9:4e:b4:25:54:9d:ac:
                    c2:58:b6:e2:f6:1d:f6:7e:9f:5a:6c:a9:f8:1e:e5:
                    7e:09:2a:9e:b8:96:9a:17:dd:08:1f:b2:6b:7e:00:
                    0e:d1:ed:7a:64:cc:ff:b4:81:b1:60:51:00:32:35:
                    c3:61:a5:14:cd:c5:12:d4:18:e3:6b:77:d0:d3:3b:
                    ea:d1:1c:50:f5:4c:6c:8d:a3:34:10:68:bc:a0:cd:
                    1e:82:aa:05:3a:6f:91:c3:c1:2a:e4:57:11:f7:45:
                    85:4d:32:ee:23:28:0b:b0:f4:62:ea:df:65:27:5e:
                    c8:43:ef:37:d1:36:00:c0:cf:31:7a:40:af:87:92:
                    cf:e5:b7:c5:7f:af:77:10:bd:69:6b:1c:e0:0e:e6:
                    46:44:e1:96:fd:6c:af:60:a8:da:f9:d5:87:9b:61:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0A:EA:AF:40:B5:67:E6:29:88:7E:F6:93:6F:42:2E:51:8C:B7:3F
            X509v3 Authority Key Identifier:
                keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/cQrqr0C1Z-YpiH72k29CLlGMtz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.96.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:71:8f:02:d3:df:92:e3:9f:77:62:9f:c6:4e:c2:2b:9b:ed:
         f9:2a:14:a7:ca:ea:82:83:b7:3c:bf:d9:68:31:ca:90:5c:c8:
         d7:cc:75:58:44:32:ba:cb:d5:d6:06:8c:6d:0f:6d:46:e7:c4:
         27:d3:ad:6d:8c:2b:3e:a3:fc:de:8c:a5:b4:58:04:7d:ce:26:
         ce:65:5f:42:15:6c:2b:d2:17:14:a2:70:c2:e1:db:23:b9:6b:
         4f:f1:5c:a3:5b:31:66:05:a7:68:56:86:22:0e:56:c1:ee:2b:
         4c:4f:41:a3:77:e0:8a:99:5e:bd:84:f0:1e:e6:a1:31:aa:88:
         40:1d:74:6e:2c:42:17:7a:b9:4d:39:92:67:1a:de:e5:4b:50:
         bf:e7:b0:43:e5:dc:4a:91:03:a5:8e:b2:5d:ef:f7:76:31:b8:
         07:9a:31:33:e3:bf:e8:c2:f0:b7:ca:e3:b2:f1:70:26:5a:94:
         f1:91:b6:63:94:78:75:62:81:49:9f:d9:6a:67:95:81:f7:0f:
         bf:cd:c7:9b:a8:8a:af:af:86:78:18:60:a4:0b:2c:62:d1:52:
         ec:5f:86:c0:b8:f5:f5:0e:37:ec:64:fe:67:b8:a6:34:71:9d:
         1a:da:c8:c6:fc:ee:3e:c6:6d:38:b2:d4:cf:dc:49:ed:56:13:
         e5:0f:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----