Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cT8UEm-WPXxQy9ObH_k-VjTUQD0.roa
File:                     cT8UEm-WPXxQy9ObH_k-VjTUQD0.roa (raw, json)
Hash identifier:          u/+Gm9y4XhDqa2VseneC7PmaIWI0Dd9n7boEuZAsR5o=
Subject key identifier:   71:3F:14:12:6F:96:3D:7C:50:CB:D3:9B:1F:F9:3E:56:34:D4:40:3D
Certificate issuer:       /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial:       018CC4936C7BEC98478F6D3E13C3D354433F
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cT8UEm-WPXxQy9ObH_k-VjTUQD0.roa
Signing time:             Mon 01 Jan 2024 10:30:45 +0000
ROA not before:           Mon 01 Jan 2024 10:30:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207708
IP address blocks:        2a10:4646:160::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:6c:7b:ec:98:47:8f:6d:3e:13:c3:d3:54:43:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
        Validity
            Not Before: Jan  1 10:30:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=713f14126f963d7c50cbd39b1ff93e5634d4403d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:1d:ce:1b:97:5f:06:7b:82:7e:6a:60:5c:
                    5e:6b:47:5d:d1:e6:53:af:f2:4f:05:02:1b:05:84:
                    a0:3b:a1:0e:89:ca:8a:8a:4d:3e:57:60:ce:80:ef:
                    d5:b9:10:78:b6:ae:f6:5c:d5:7d:58:02:66:ef:a0:
                    04:a0:7c:89:53:59:9d:a1:be:d8:94:58:45:35:83:
                    85:53:08:23:ef:4c:cb:29:6c:15:86:06:7f:e1:a0:
                    23:c1:d4:a3:6a:c5:4c:ca:5e:7a:92:31:a1:3e:de:
                    26:86:ff:b5:4a:5d:37:73:08:a7:08:df:10:d0:a0:
                    07:92:82:c2:04:24:c9:c7:2f:7f:61:76:d2:7e:77:
                    54:1b:a1:30:99:9b:13:6f:db:1c:ad:1f:d5:74:d1:
                    60:72:18:50:9e:5d:e0:13:d7:12:b1:21:0d:ee:9e:
                    fb:4f:42:19:80:75:9b:bd:0b:d9:ee:54:84:48:21:
                    8c:6f:44:be:12:2d:e6:d1:09:bc:07:00:18:61:0d:
                    6b:83:db:dc:b8:c3:a6:a7:be:02:a7:d2:e7:4b:b0:
                    db:91:a9:86:55:c4:cb:84:a3:4a:b6:cc:eb:20:e2:
                    ce:7b:15:fd:94:f8:f1:6d:1a:fc:50:d4:dd:f3:b8:
                    26:83:89:66:37:39:1b:64:25:cb:8e:e4:73:eb:95:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3F:14:12:6F:96:3D:7C:50:CB:D3:9B:1F:F9:3E:56:34:D4:40:3D
            X509v3 Authority Key Identifier:
                keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/cT8UEm-WPXxQy9ObH_k-VjTUQD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:160::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:2f:3d:84:23:a6:71:83:15:48:b0:54:41:38:da:b4:05:fb:
         e1:7a:7d:26:2e:a1:b9:23:0f:a8:19:51:1b:e6:0a:e1:07:a2:
         8a:69:07:00:78:12:42:2b:1f:8d:b8:9f:e7:a0:ea:30:47:eb:
         2e:b0:ed:f9:c6:40:66:4d:5c:c7:b1:a8:45:09:34:41:1a:a8:
         e6:f2:ea:5b:bf:1e:77:e1:49:13:ef:a1:fd:4f:42:35:6a:b0:
         0a:38:66:c2:91:54:37:dd:e1:cc:d0:9c:35:d7:0a:08:70:31:
         fe:de:cc:51:e4:ef:c9:d8:ae:6e:e8:51:87:2c:55:c9:53:ad:
         ed:bf:38:16:84:30:4d:c3:c3:92:77:fa:e9:01:93:e0:8e:ce:
         7f:a9:24:d0:e3:81:3d:13:ce:c9:a9:6f:e6:cc:8c:99:7e:a3:
         50:47:e2:93:37:55:6d:47:c6:00:25:93:dd:9e:5a:f6:44:e4:
         f1:5e:28:32:28:0f:83:e3:32:74:b6:ed:2a:29:2f:ff:5a:e3:
         ae:d6:f6:e7:bf:2e:55:2a:f3:64:58:0a:f1:11:29:ff:49:10:
         b8:b3:1c:2f:2b:7f:97:4a:71:66:53:b6:e6:3d:3c:17:d1:38:
         4a:b0:82:85:c0:70:cd:fb:e5:a6:33:44:bf:c4:ff:ed:dd:4a:
         f6:a1:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----