Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/GGAU57LTitGI9A7gjbLUGASTB24.roa
File:                     GGAU57LTitGI9A7gjbLUGASTB24.roa (raw, json)
Hash identifier:          HxdlL0OAQADhS2DgGYE/AzCfz4XkYTegxTmQqhDQ5L8=
Subject key identifier:   18:60:14:E7:B2:D3:8A:D1:88:F4:0E:E0:8D:B2:D4:18:04:93:07:6E
Certificate issuer:       /CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
Certificate serial:       018CC9BCB363C91F98DF824AAD3620452C3F
Authority key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/GGAU57LTitGI9A7gjbLUGASTB24.roa
Signing time:             Tue 02 Jan 2024 10:33:56 +0000
ROA not before:           Tue 02 Jan 2024 10:33:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     1299
IP address blocks:        164.138.248.0/21 maxlen: 24
                          2a0a:7d40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 May 2024 14:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:b3:63:c9:1f:98:df:82:4a:ad:36:20:45:2c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2
        Validity
            Not Before: Jan  2 10:33:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=186014e7b2d38ad188f40ee08db2d4180493076e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:ce:24:84:50:c5:ec:fb:80:e7:df:fc:7d:
                    56:dd:7d:0c:e5:82:3c:a8:9a:53:b5:73:dd:99:5e:
                    6d:67:d0:3d:12:7a:8b:9f:c4:9d:96:9c:ee:ba:cb:
                    1b:dc:71:e4:bf:52:dd:ce:25:e9:d6:82:80:db:34:
                    cf:ac:6b:86:69:0c:bc:9a:74:05:b5:a5:74:81:a8:
                    15:e7:d6:05:86:6d:36:ee:49:ec:cf:f5:49:5b:77:
                    34:69:52:01:44:b0:dc:eb:f0:fb:63:a5:ed:90:f2:
                    84:21:e9:50:6e:45:60:11:e6:88:bc:36:ae:5b:9b:
                    c6:08:4f:b7:c9:95:68:e7:66:e0:1a:cc:1b:41:c6:
                    e4:70:10:4f:3c:2b:bf:58:86:82:36:af:04:ff:21:
                    01:67:07:20:8d:10:82:ed:4d:31:3f:9e:2d:c9:18:
                    62:19:dc:c6:8f:c3:f5:52:fc:2c:9f:fe:67:49:10:
                    3c:f5:d2:b2:88:00:bf:73:6f:93:a0:db:ee:37:8d:
                    e0:d8:ea:b7:07:6e:1a:85:a8:b3:38:3c:5b:22:44:
                    9e:37:72:e7:94:6a:a3:4a:ff:7e:70:d0:75:35:05:
                    71:25:1c:a3:84:18:bd:77:83:5e:54:9c:89:df:a7:
                    7f:0d:84:f9:80:2d:73:89:c9:4d:ff:00:84:c8:66:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:60:14:E7:B2:D3:8A:D1:88:F4:0E:E0:8D:B2:D4:18:04:93:07:6E
            X509v3 Authority Key Identifier:
                keyid:EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/GGAU57LTitGI9A7gjbLUGASTB24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.138.248.0/21
                IPv6:
                  2a0a:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:70:92:f9:74:c9:63:99:e2:3c:3c:08:e8:51:c6:74:1f:7b:
         4f:fd:33:dd:f8:56:fb:ad:1e:24:6a:f8:f3:d5:0c:6b:0a:a6:
         44:c5:8d:f5:54:f3:72:1b:7b:65:3e:0d:94:b8:b9:f0:76:6d:
         7a:cd:03:f1:63:4f:ac:08:73:a3:a1:53:fd:f9:e8:b9:d6:68:
         1e:5c:42:27:42:5a:31:9b:65:df:52:66:a4:fb:0b:b6:44:94:
         7a:5b:1d:27:0f:5f:8b:4a:cc:da:71:b9:06:49:74:13:02:bb:
         29:c0:81:20:fe:58:1c:47:bd:e8:2d:ce:5f:47:03:84:19:37:
         fb:54:e6:e5:31:6e:62:d7:46:e0:6f:64:98:43:17:2c:97:16:
         31:b2:f3:31:0b:76:ea:a5:75:53:10:39:9b:19:b4:c2:52:07:
         d7:4e:5b:70:fa:0b:31:ca:83:39:11:57:e3:37:f9:e7:d3:f4:
         0e:27:b7:46:b2:80:60:f8:19:74:68:3f:65:b7:84:56:bd:9a:
         db:94:59:28:fd:7a:0e:14:2a:83:71:f7:0c:13:60:1b:df:96:
         f4:9b:17:ef:62:f4:ca:15:c2:78:c7:a4:d4:5c:3c:b7:b4:55:
         8f:9d:60:42:d1:05:cd:45:e4:aa:3e:d7:1c:5a:ce:0e:c1:b0:
         46:8c:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----