Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/OVKBWV16_NBIPbJej92zSWhTmPA.roa
File:                     OVKBWV16_NBIPbJej92zSWhTmPA.roa (raw, json)
Hash identifier:          DvTU5B2Tjh5JMOYMJGHQrO4WQcZIW8WTb0aHltmacqI=
Subject key identifier:   39:52:81:59:5D:7A:FC:D0:48:3D:B2:5E:8F:DD:B3:49:68:53:98:F0
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018CC425632B7FEDB35841B1618126AF0B83
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/OVKBWV16_NBIPbJej92zSWhTmPA.roa
Signing time:             Mon 01 Jan 2024 08:30:33 +0000
ROA not before:           Mon 01 Jan 2024 08:30:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63023
IP address blocks:        2a0e:c7c0::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:63:2b:7f:ed:b3:58:41:b1:61:81:26:af:0b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 08:30:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=395281595d7afcd0483db25e8fddb349685398f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:64:2f:7a:85:28:91:9b:2c:6b:c1:a2:56:
                    f9:7e:3d:fd:e4:0d:44:c5:f0:aa:73:04:d8:a9:45:
                    f9:e8:dc:71:91:61:e0:c4:32:1f:71:31:bb:f1:4f:
                    95:ad:3a:53:e9:6d:b1:b0:dc:cd:05:a8:8f:2f:85:
                    bf:f5:87:41:ba:e7:3c:e2:ba:71:ab:b3:01:68:3e:
                    2f:80:9e:6d:31:22:e9:14:3b:54:9e:39:ef:43:62:
                    b7:49:d3:4c:61:53:e1:00:b6:09:f7:d8:de:97:af:
                    30:ac:60:c7:e6:e6:13:b6:d1:ef:77:3f:b6:5b:ed:
                    8d:fc:d7:38:78:48:d6:dd:ee:cf:50:46:a5:85:f8:
                    ff:89:73:01:b1:47:b7:de:1c:b8:ed:95:02:83:be:
                    e4:d7:82:e2:4e:22:8d:7e:1c:66:37:4d:63:16:b5:
                    d8:e1:18:ef:6c:b6:47:d2:0e:25:a2:71:1e:f7:4f:
                    98:03:a6:af:4a:4a:d0:27:a6:28:e7:a6:1c:c0:8d:
                    08:2a:e4:4a:f5:15:07:08:43:23:48:13:1a:1a:4e:
                    32:3a:fc:90:19:8b:78:8b:2a:ad:58:b1:76:58:aa:
                    26:d9:db:a8:c0:72:69:13:fd:b4:e2:cf:72:37:b0:
                    e2:fc:39:2d:75:06:25:57:f8:d5:66:30:b0:e0:93:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:52:81:59:5D:7A:FC:D0:48:3D:B2:5E:8F:DD:B3:49:68:53:98:F0
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/OVKBWV16_NBIPbJej92zSWhTmPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:c7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         9c:cf:55:2a:2f:15:87:a2:55:3c:1b:14:42:7d:93:0a:c4:29:
         e7:19:da:08:12:54:e2:fe:d5:73:eb:16:38:a3:6f:76:71:ef:
         fb:60:9b:45:8f:af:1d:39:40:6a:0c:6f:a8:5c:a7:99:df:0a:
         cf:c5:06:1f:39:b7:26:11:77:3f:f5:ae:59:0d:ce:72:9a:b5:
         a7:51:6b:6b:4f:61:e3:bf:7f:91:bd:2f:b6:10:f5:a1:82:3c:
         5f:fc:1f:f8:8a:b7:70:c7:0a:96:db:db:12:29:3a:67:ae:d3:
         e2:ff:a4:f9:16:76:dc:cd:29:a2:d5:73:7d:a7:66:86:68:df:
         de:f2:7e:ba:24:13:65:59:cb:b3:6e:b5:c9:06:9e:be:4a:78:
         8f:50:3a:30:f2:99:d8:d4:c5:25:e9:18:68:a1:db:54:54:9f:
         6d:bd:03:cd:2a:c1:cf:9d:1a:52:c6:7c:9b:ba:e2:fd:a4:8f:
         4b:9a:56:87:8c:59:6e:71:89:0a:52:d9:d2:63:aa:9e:e7:e7:
         73:0c:73:2b:c7:aa:29:07:ed:cb:88:41:0a:a8:68:fa:62:37:
         43:cd:46:ed:f2:4a:7a:7d:fd:be:ea:79:ca:8b:f7:e7:2b:ed:
         c5:f0:fb:cd:30:76:14:ee:21:ae:c1:f5:bb:a2:b1:da:0c:16:
         bb:c1:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----