Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/gMQBazrq2hpVxtuJQbiSNFHVmSg.roa
File:                     gMQBazrq2hpVxtuJQbiSNFHVmSg.roa (raw, json)
Hash identifier:          nqowFGjIzyoPbh7fkeW93Yxq31SOfb5tPVrdcs+w4H0=
Subject key identifier:   80:C4:01:6B:3A:EA:DA:1A:55:C6:DB:89:41:B8:92:34:51:D5:99:28
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       018CC34959B1CCB837AC6A2C6EDF705909F7
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/gMQBazrq2hpVxtuJQbiSNFHVmSg.roa
Signing time:             Mon 01 Jan 2024 04:30:13 +0000
ROA not before:           Mon 01 Jan 2024 04:30:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        2a13:5242::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:59:b1:cc:b8:37:ac:6a:2c:6e:df:70:59:09:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Jan  1 04:30:13 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=80c4016b3aeada1a55c6db8941b8923451d59928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b6:41:c3:30:d7:67:d4:13:3f:08:18:fd:46:
                    e6:22:f3:99:12:63:88:ef:3c:da:f2:f8:fa:8e:22:
                    18:08:81:b5:5b:d0:62:1c:fc:3d:db:84:83:cf:ea:
                    51:41:4b:0d:1b:f9:2e:9e:6f:ee:62:ec:02:83:d6:
                    32:18:81:ca:2e:93:ee:45:14:4a:51:c7:03:29:64:
                    65:81:e7:fe:35:70:65:27:85:e2:f7:38:e1:db:c8:
                    fb:e4:01:aa:ba:96:7d:fe:d7:61:df:be:7a:06:fc:
                    5e:0b:0e:5e:de:42:89:54:70:75:59:4b:d4:ab:8d:
                    4c:bd:23:41:78:82:16:85:aa:15:1a:3b:ee:bd:0d:
                    82:d5:bc:4d:72:14:af:f3:d0:16:3d:09:83:16:ac:
                    c7:6e:98:7d:d5:f0:fd:35:5d:49:3b:d5:46:80:f8:
                    8f:67:61:d0:5f:60:f4:45:51:6a:e0:76:bf:93:68:
                    7e:4a:b3:a0:1e:a7:c9:ce:a4:bd:d0:57:17:f7:71:
                    f9:de:ad:69:59:a3:52:ee:75:0f:c2:9f:d7:17:3e:
                    7f:f7:2c:2b:06:9f:f5:2d:8b:74:84:85:a0:7d:9b:
                    c1:06:8f:3c:66:12:d6:b2:b8:e1:2c:09:ff:b3:b8:
                    c7:f7:90:a4:58:2a:94:14:10:52:63:8a:81:79:33:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C4:01:6B:3A:EA:DA:1A:55:C6:DB:89:41:B8:92:34:51:D5:99:28
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/gMQBazrq2hpVxtuJQbiSNFHVmSg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5242::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:96:ec:71:9c:41:9c:76:f2:2c:07:61:6f:df:63:a3:e3:
         6e:6c:c7:51:24:3e:6f:6b:10:79:d2:0b:9f:59:6a:fa:dd:ff:
         72:83:24:a3:75:e2:5a:e1:6d:8e:39:5d:73:37:ac:bb:32:92:
         70:cd:ce:f5:a6:07:0b:b5:b4:46:e0:55:09:4c:3e:21:ed:8e:
         89:ae:9e:5e:21:b1:f6:1b:96:10:6b:8f:e6:b4:b6:c6:17:88:
         97:09:97:8a:8f:1b:f4:51:bb:5a:ba:6f:60:47:38:fa:9d:37:
         11:1f:4f:1d:ce:f3:8d:a9:77:74:18:07:6b:f7:a8:43:e8:07:
         c6:cc:00:b9:74:2d:b7:ad:85:4b:42:5f:3a:ca:4e:bb:2b:34:
         cc:65:01:9e:16:b1:b7:32:3e:b9:d1:44:cd:27:5e:b5:01:d6:
         2f:8f:0f:db:d4:1d:cd:c6:03:5f:1c:73:05:f2:9e:d1:22:a2:
         25:47:cb:62:d1:70:12:23:a3:0f:8a:a5:50:19:2d:42:76:5f:
         f0:62:78:3f:f6:e1:22:ed:06:e6:35:28:cc:dd:33:a3:b0:3a:
         13:43:74:f0:9a:36:2a:4c:3e:9b:ce:6d:ac:c2:19:37:69:db:
         b1:f1:16:b7:6b:a0:85:d7:89:9a:68:90:7e:75:88:2b:ad:8f:
         9a:55:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----