Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/XAI2UqrMpufn-4VDS0I-zHzSApE.roa
File:                     XAI2UqrMpufn-4VDS0I-zHzSApE.roa (raw, json)
Hash identifier:          TO23SsXBjJW/ueHqPFts3VaqwklMyMCyjFHDJmUSNeU=
Subject key identifier:   5C:02:36:52:AA:CC:A6:E7:E7:FB:85:43:4B:42:3E:CC:7C:D2:02:91
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       018DB84230ABBEB2606C446E65A1927B559B
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/XAI2UqrMpufn-4VDS0I-zHzSApE.roa
Signing time:             Sat 17 Feb 2024 18:09:21 +0000
ROA not before:           Sat 17 Feb 2024 18:09:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201386
IP address blocks:        2a13:b487:5300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b8:42:30:ab:be:b2:60:6c:44:6e:65:a1:92:7b:55:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Feb 17 18:09:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5c023652aacca6e7e7fb85434b423ecc7cd20291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:34:ad:df:b9:b9:ce:29:c1:d6:76:61:74:
                    af:35:77:64:09:97:44:95:1d:9b:e0:7b:f5:69:3e:
                    7c:e5:35:a9:2a:94:a3:bc:da:52:eb:f7:59:73:8a:
                    fb:42:04:cb:61:0b:88:21:db:48:06:10:1b:93:e8:
                    d7:bd:3f:24:44:c8:56:b3:a7:8f:4b:3e:87:fc:fa:
                    81:ca:f1:6a:b0:c3:3f:9f:88:2d:72:75:9f:11:60:
                    ff:d7:e1:62:d2:b7:35:b6:e4:f8:6c:c2:1a:9b:9a:
                    a5:88:86:57:f0:cf:8f:63:79:13:ed:4e:ee:f2:0e:
                    bf:95:26:6a:33:e8:99:ae:2e:e1:87:87:ad:30:f2:
                    21:b7:5e:f6:7d:6f:84:bf:26:16:95:0e:f3:97:6e:
                    cb:d0:e0:81:ba:84:d1:76:c4:9d:39:df:aa:a5:ef:
                    ee:c3:dc:8e:b3:77:06:df:ed:35:4f:09:98:16:94:
                    19:88:52:8c:d1:c3:12:b9:63:73:83:96:48:da:3f:
                    94:fc:39:58:b5:ac:ad:8d:d7:5f:37:b8:f7:c9:43:
                    fe:f7:24:35:b3:0a:3c:b0:d4:a5:7d:41:de:b0:db:
                    c6:4f:ce:4d:53:40:7e:fc:46:47:25:7a:cb:dc:a4:
                    26:36:2d:47:5b:0b:90:b5:2b:8e:22:3c:4b:d3:ed:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:02:36:52:AA:CC:A6:E7:E7:FB:85:43:4B:42:3E:CC:7C:D2:02:91
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/XAI2UqrMpufn-4VDS0I-zHzSApE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:b487:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:3a:56:cf:ae:32:66:fb:83:71:8f:be:0a:36:f3:f6:fc:cc:
         41:f6:f4:c7:13:8b:ad:2a:e8:b1:71:b5:3f:bf:ca:53:de:a5:
         11:06:22:14:4d:db:24:c4:f9:24:d8:22:4b:b3:d3:c2:69:81:
         6b:25:36:45:a2:4a:e3:ef:84:68:d4:7f:6e:0a:10:56:06:52:
         54:5f:54:ad:ea:f1:cd:f8:3e:11:b9:05:22:ce:76:70:f5:ca:
         d9:55:98:11:00:94:08:18:0d:35:36:a5:33:6f:c5:bc:59:d3:
         63:ff:2a:41:c4:a5:27:fe:a2:34:05:79:4d:b1:5f:de:a3:0a:
         97:71:4f:d4:dc:bf:e6:34:e7:a2:7f:83:5b:34:4a:ad:87:d7:
         36:8e:6a:fe:d3:fe:20:3b:80:0c:23:34:df:c3:85:97:22:f7:
         77:02:4e:c9:22:d2:69:0c:c7:6a:43:37:6c:a5:e7:c7:26:74:
         a7:6b:7f:4c:81:9d:34:cd:25:2e:fc:42:76:9a:f1:51:6b:1c:
         f9:b1:80:e5:43:a5:e4:6d:bb:5b:14:bd:11:48:73:24:ad:72:
         9c:77:0a:17:36:95:6c:a9:16:ff:3d:cb:1a:0f:65:66:ae:ba:
         1a:4a:a2:12:0e:36:eb:0a:3d:71:a7:5f:9a:f8:eb:ac:a7:f5:
         7e:5d:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----