Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/kkp3rnfpI5tiwhug2G7B4N2KPAw.roa
File:                     kkp3rnfpI5tiwhug2G7B4N2KPAw.roa (raw, json)
Hash identifier:          LTXjMrq/XnoEjFG9BXM0BLUt+mssSOXU/IW/Nz3Guv4=
Subject key identifier:   92:4A:77:AE:77:E9:23:9B:62:C2:1B:A0:D8:6E:C1:E0:DD:8A:3C:0C
Certificate issuer:       /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial:       018CC4928BCBF22FE1D81BD49B1E709CD2CE
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/kkp3rnfpI5tiwhug2G7B4N2KPAw.roa
Signing time:             Mon 01 Jan 2024 10:29:47 +0000
ROA not before:           Mon 01 Jan 2024 10:29:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197595
IP address blocks:        5.133.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:8b:cb:f2:2f:e1:d8:1b:d4:9b:1e:70:9c:d2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
        Validity
            Not Before: Jan  1 10:29:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=924a77ae77e9239b62c21ba0d86ec1e0dd8a3c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:69:a2:ae:37:a7:7f:97:c0:b3:4a:8f:7c:
                    f9:84:dd:97:39:ec:fc:f1:34:c5:d3:b6:3a:77:4b:
                    0c:c0:8f:19:d8:f5:68:c0:3c:e6:f8:ef:22:87:c5:
                    bd:b8:b8:c0:da:3d:d6:02:70:71:2b:5b:94:cf:57:
                    20:83:14:15:c0:ac:d4:69:2e:98:30:3e:c1:36:a7:
                    22:c6:46:35:da:62:93:24:db:5b:f9:b2:1d:40:bf:
                    a5:99:09:c0:36:20:78:04:92:27:64:e3:c0:ee:ce:
                    55:72:90:6b:74:59:31:eb:35:b2:a1:23:39:f1:3e:
                    67:b7:60:69:6c:de:ab:0d:b3:47:e9:31:98:f2:9a:
                    bf:da:07:89:fe:36:4f:92:7f:67:0e:f7:08:8e:75:
                    29:25:48:da:83:96:81:8c:75:e2:30:ad:c4:36:e2:
                    1b:cf:63:05:46:68:4a:dc:bc:9e:11:99:05:cd:14:
                    90:db:db:a7:85:13:cf:14:e5:b0:02:14:37:48:28:
                    a3:56:4f:e6:5e:16:bf:ad:7f:e0:04:1f:51:63:89:
                    a9:e5:e8:bc:a6:92:f7:d7:6b:af:81:0e:17:14:0f:
                    45:e4:b3:41:89:b8:1e:2d:22:ea:91:3b:b3:78:f7:
                    f0:0b:f2:ef:fa:9b:47:31:a6:d0:b6:9b:e1:a0:e3:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4A:77:AE:77:E9:23:9B:62:C2:1B:A0:D8:6E:C1:E0:DD:8A:3C:0C
            X509v3 Authority Key Identifier:
                keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/kkp3rnfpI5tiwhug2G7B4N2KPAw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cf:79:c3:fa:59:1b:a7:f7:65:c6:ce:2d:f4:5b:b3:d2:9e:6a:
         e0:e7:ce:15:b0:86:63:be:ff:49:92:ce:21:dc:37:72:2a:0a:
         a9:92:ae:94:59:53:65:9d:7d:0e:ec:d0:1f:a0:81:4b:59:0e:
         40:90:84:43:1c:22:a8:80:80:12:26:58:4a:ea:ce:4f:3c:68:
         7e:15:04:67:88:0c:80:c1:ed:01:31:e6:60:cd:66:7a:b7:53:
         59:4e:b2:c3:1c:77:5c:00:a0:b0:a8:fe:7c:f8:e1:4d:66:ed:
         a0:83:28:5b:07:db:e6:52:95:44:a8:52:db:08:a8:a4:92:73:
         97:18:92:9c:df:d3:20:e2:8f:80:cd:e6:20:5e:e6:25:0a:b3:
         2e:03:8e:e9:33:20:ba:10:5a:9f:62:fc:e9:93:71:fd:59:88:
         82:47:e2:4a:11:20:d7:a3:5b:04:5c:c3:09:6b:72:ad:94:13:
         95:bb:2d:69:eb:83:64:42:a2:da:04:3e:d3:bf:9b:e5:c5:62:
         52:b1:b6:83:bf:04:bd:23:27:03:ca:4c:93:d7:db:4a:3e:07:
         7a:43:8e:3a:bb:b1:24:df:c7:92:97:81:7d:93:e1:8a:08:b8:
         9a:52:d5:06:2b:0d:bd:94:df:ba:b8:27:c7:a6:fa:46:cb:0e:
         6b:f5:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----