Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa
File:                     TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa (raw, json)
Hash identifier:          w+XCCT06YsgjpDolNno8LnRxzdvXMfW6wcI2e+xABDk=
Subject key identifier:   4E:AC:13:4A:B0:73:AD:36:26:37:2A:3C:4F:5B:7C:04:39:53:D5:FE
Certificate issuer:       /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial:       018CC94C2C73F785EE0BF2C627A034752D9E
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa
Signing time:             Tue 02 Jan 2024 08:31:01 +0000
ROA not before:           Tue 02 Jan 2024 08:31:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41960
IP address blocks:        2a00:d220::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4c:2c:73:f7:85:ee:0b:f2:c6:27:a0:34:75:2d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
        Validity
            Not Before: Jan  2 08:31:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4eac134ab073ad3626372a3c4f5b7c043953d5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:9e:e1:0d:2f:60:ad:40:f5:bc:dd:b8:22:
                    42:13:76:9e:12:7a:26:28:44:d4:8d:1f:17:ed:34:
                    7c:1d:cf:e4:af:b7:b0:60:87:87:88:9a:2f:46:0b:
                    84:28:4e:b1:7a:2d:e9:a8:8c:a5:55:47:92:45:b6:
                    d8:04:2f:38:8f:aa:41:b8:0c:d3:8d:de:76:db:54:
                    9f:a9:89:60:e8:50:a0:2b:94:1e:12:b4:cf:24:e1:
                    b6:b0:84:2a:2c:dc:5b:ae:49:4d:e3:c9:4d:1e:7a:
                    fc:d1:7d:24:b4:d1:4e:fe:5c:6a:37:4e:ad:82:c3:
                    db:71:cc:da:f2:b4:ef:58:30:d2:2e:d9:64:a5:4f:
                    76:40:09:fa:e7:c9:d4:ff:e8:dd:b9:c8:6d:83:ec:
                    ac:fe:8a:9d:2d:9d:f8:d8:7c:45:e9:90:6f:9e:fa:
                    36:78:83:1f:49:b3:b4:f7:95:08:ec:5d:1f:ff:d8:
                    16:a2:fa:04:26:21:c9:17:d3:cb:95:7b:c2:27:d7:
                    f8:b3:ee:42:2e:2f:93:99:67:ab:21:bf:c0:3b:02:
                    ec:fd:79:f9:94:a5:49:9f:b1:2b:b6:3b:40:96:b0:
                    ac:6d:6e:30:d6:da:9e:38:91:cc:94:53:18:2d:2a:
                    0f:d2:9d:cb:17:e7:8f:ae:7a:ad:31:41:68:b8:6c:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AC:13:4A:B0:73:AD:36:26:37:2A:3C:4F:5B:7C:04:39:53:D5:FE
            X509v3 Authority Key Identifier:
                keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:d220::/36

    Signature Algorithm: sha256WithRSAEncryption
         72:55:c6:23:e2:a6:4c:0c:0b:be:e6:9d:24:15:46:07:63:f0:
         e7:0b:64:96:f3:9e:0c:86:53:0b:51:0a:30:4f:66:d7:3c:7d:
         fa:e9:c7:e2:0c:d7:f9:64:a0:98:c6:81:0d:e1:9f:2e:97:1a:
         bb:a4:a7:61:ab:9c:2a:5d:fb:52:92:45:8e:35:20:40:92:bf:
         72:11:af:71:6d:7b:ff:e6:52:8c:85:d6:e6:a7:43:66:69:d1:
         c1:86:b3:2f:b0:c6:f1:14:6e:4b:29:c8:e8:6d:ef:1f:ba:1a:
         fd:58:19:4f:fb:64:e9:ae:80:13:c4:9e:9e:0e:a1:c6:7b:2e:
         6c:c2:a3:61:12:1a:04:c8:40:a9:12:8a:8a:e4:9a:10:4a:1c:
         d7:a1:22:4e:51:f1:72:61:ac:12:f8:b2:91:35:77:2a:32:22:
         30:d3:b1:96:31:35:e5:bd:8d:71:d4:5d:92:47:42:c6:4d:1a:
         da:2e:01:08:23:74:fa:d5:3d:cd:9c:00:14:fc:ef:d3:75:f8:
         46:58:43:4d:83:4b:9f:da:12:0e:82:e4:c5:bd:b2:3e:7f:da:
         13:42:0a:53:83:7d:d6:d3:0f:cd:05:cb:9e:77:5a:d1:ae:46:
         b7:62:63:85:b5:c3:53:72:c7:be:70:11:8a:de:03:d1:4b:d9:
         f5:96:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----