Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/5DqNO1OVGRepRS2dBn9FBOBTKe8.roa
File:                     5DqNO1OVGRepRS2dBn9FBOBTKe8.roa (raw, json)
Hash identifier:          azLvpRUWt8Rz7gODxXwoUmfnUyReR+CDNrfQWoY+0B4=
Subject key identifier:   E4:3A:8D:3B:53:95:19:17:A9:45:2D:9D:06:7F:45:04:E0:53:29:EF
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       018CC4936A02FD1480BD460C8EFB712027F1
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/5DqNO1OVGRepRS2dBn9FBOBTKe8.roa
Signing time:             Mon 01 Jan 2024 10:30:44 +0000
ROA not before:           Mon 01 Jan 2024 10:30:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198825
IP address blocks:        2a10:4646:2e0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Jun 2024 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:6a:02:fd:14:80:bd:46:0c:8e:fb:71:20:27:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jan  1 10:30:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e43a8d3b53951917a9452d9d067f4504e05329ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:1b:be:96:51:9f:a9:6c:22:a5:da:3d:65:
                    0b:51:e1:13:54:10:72:36:62:61:f4:83:e0:f8:5b:
                    47:c3:ea:22:cb:2c:b9:8d:21:b7:a8:fb:94:8a:63:
                    4b:da:b4:b5:71:2b:ad:56:d6:e9:7e:cc:2e:3f:c0:
                    4a:15:8f:b0:d9:13:4f:56:8d:a5:b8:8b:48:3f:24:
                    5a:f2:66:94:81:9f:18:7c:c5:e8:6c:e9:19:03:74:
                    5f:6f:10:db:bc:98:9e:be:e6:51:78:f8:af:48:b3:
                    42:f7:b8:c0:fe:eb:14:01:17:f7:db:10:13:ed:d4:
                    0f:57:d9:3b:00:0b:46:86:ba:39:7e:8e:6d:34:30:
                    25:cc:f2:b9:7a:e1:39:c1:62:4e:6e:99:ed:94:4c:
                    b6:a2:3f:66:ed:1f:41:92:41:f5:e9:a3:74:62:a4:
                    59:4a:23:05:db:35:93:3d:dc:a7:96:e8:61:ac:52:
                    8a:18:23:e8:c1:f3:f0:26:78:8c:c2:00:19:6f:96:
                    4f:c5:e0:f8:a8:bc:e1:89:91:08:3f:40:12:40:bc:
                    e8:17:2c:9f:47:b5:d6:63:ff:31:dc:31:79:c2:d1:
                    fe:77:da:87:b0:35:07:1b:6f:b0:83:b6:0d:97:1e:
                    36:38:e4:1f:6a:10:16:66:11:2f:cf:92:fb:c9:c0:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:8D:3B:53:95:19:17:A9:45:2D:9D:06:7F:45:04:E0:53:29:EF
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/5DqNO1OVGRepRS2dBn9FBOBTKe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:2e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:58:c0:08:b9:be:94:7d:2a:e8:7e:5e:eb:16:b9:fd:e9:13:
         16:20:92:49:50:63:57:44:53:b9:20:10:a3:20:5a:74:ea:6c:
         a2:92:f2:f8:e1:39:9b:e9:d0:c5:12:c3:77:2d:b7:7a:04:e7:
         ab:cc:33:f7:72:48:07:fc:d4:9e:57:92:7f:39:dc:3c:77:a2:
         37:58:3c:e3:01:96:d7:b1:22:08:4b:43:8a:f8:cd:a8:fd:19:
         f6:e7:10:a2:4f:8e:b8:5d:4b:1e:53:49:9d:54:18:f3:71:ad:
         eb:1c:f7:2c:62:ad:cf:0a:ce:d1:7b:20:09:31:0a:4c:29:6e:
         9c:f4:7f:2a:2d:51:f9:82:26:5d:1e:e0:0b:e7:2b:98:33:a7:
         85:0d:ea:37:26:82:e6:cc:72:bf:57:58:55:8f:8f:1d:7e:b8:
         f5:1b:ea:ff:be:e1:c8:8e:f3:1f:33:15:79:ca:0a:aa:6a:a6:
         66:dc:4b:90:99:f1:69:4a:ef:fd:88:3f:dd:87:6d:06:59:1e:
         20:a9:1f:76:67:cd:db:98:65:f6:02:01:d8:81:6b:8a:a1:8c:
         8f:78:84:62:38:ef:09:8c:51:11:09:d9:5d:1a:90:f5:30:31:
         95:67:a1:2f:7a:58:e4:5f:02:99:74:b2:e0:1b:e6:70:d6:44:
         9a:c0:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----