Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/g5CgRvkMNsAIfSPRrZKAoc83dmw.roa
File:                     g5CgRvkMNsAIfSPRrZKAoc83dmw.roa (raw, json)
Hash identifier:          b0+iYHkrYY5itcVPcmWicFjHpyM0J9I80oQX1hAfiIQ=
Subject key identifier:   83:90:A0:46:F9:0C:36:C0:08:7D:23:D1:AD:92:80:A1:CF:37:76:6C
Certificate issuer:       /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial:       018CC2DB3A81B91E1AE64B3906F3A918B1D9
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/g5CgRvkMNsAIfSPRrZKAoc83dmw.roa
Signing time:             Mon 01 Jan 2024 02:29:56 +0000
ROA not before:           Mon 01 Jan 2024 02:29:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212224
IP address blocks:        91.245.20.0/22 maxlen: 24
                          2a01:5f6::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:3a:81:b9:1e:1a:e6:4b:39:06:f3:a9:18:b1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
        Validity
            Not Before: Jan  1 02:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8390a046f90c36c0087d23d1ad9280a1cf37766c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:b6:0f:28:01:eb:f7:08:f4:25:05:72:87:
                    1e:22:85:9c:fc:7e:33:36:3b:58:d3:d0:f5:b1:74:
                    97:2c:1b:f9:12:f5:d7:db:72:1f:8a:20:c5:db:8b:
                    58:d6:b4:9c:23:f5:71:93:a1:2a:7d:1c:0f:a9:57:
                    c8:c8:ac:13:e4:eb:ab:70:dc:d7:03:b1:a8:09:0f:
                    24:8e:5f:40:03:d5:ed:7c:54:4e:40:ba:38:1a:64:
                    9b:b9:a4:a6:f2:34:8c:33:7d:64:b3:f1:e1:59:5f:
                    be:4e:b1:ac:63:51:83:45:03:18:69:84:8d:28:b7:
                    72:6e:92:6a:45:55:76:e2:11:c5:6d:c2:86:bd:35:
                    9d:14:d3:02:3f:c6:65:29:f4:37:00:2c:00:64:92:
                    51:6e:0e:5d:c6:c4:97:23:22:37:be:50:f0:ed:b1:
                    75:fe:3f:5e:b3:86:13:f6:3e:82:52:80:00:1c:fe:
                    cd:e2:5f:0e:a0:9f:16:b6:d1:70:88:7f:0c:62:ec:
                    fb:b4:54:b1:fd:39:50:5a:91:d6:5c:74:21:9c:4d:
                    b6:bd:f0:c7:67:c2:07:31:d6:1f:3b:56:04:93:58:
                    f7:e8:7c:d2:73:97:50:fc:eb:39:ed:5b:d5:89:44:
                    1e:16:55:6e:49:11:81:3d:60:e9:7e:ab:df:7c:89:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:A0:46:F9:0C:36:C0:08:7D:23:D1:AD:92:80:A1:CF:37:76:6C
            X509v3 Authority Key Identifier:
                keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/g5CgRvkMNsAIfSPRrZKAoc83dmw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.245.20.0/22
                IPv6:
                  2a01:5f6::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:25:fa:00:6e:60:e9:16:ce:e7:6c:11:a7:43:70:cf:56:31:
         7f:8b:c8:31:0c:00:4c:9d:84:50:07:bf:6b:49:80:86:4c:d0:
         28:b0:29:f3:a6:a5:0b:c5:94:4d:52:bd:11:c2:82:8a:17:69:
         26:b6:ad:32:fc:c3:7c:a9:99:66:ee:53:a4:a1:14:a8:ca:e5:
         08:4b:3d:f0:4b:db:ce:03:02:29:8d:f8:48:df:a1:6f:c8:1c:
         ce:04:bd:23:57:f3:f0:8d:9d:8e:0f:f7:05:42:42:1a:23:30:
         14:9f:d6:55:2d:4a:44:3c:dd:99:8e:7e:15:e7:56:8f:5c:15:
         d7:2f:a0:ee:14:99:2b:cf:19:d8:12:9c:f4:95:5c:de:bb:75:
         13:77:1f:1d:c4:f0:35:a3:7b:25:55:1e:12:b2:d7:a4:6c:01:
         d6:40:7a:06:1a:4f:56:01:17:64:21:aa:f1:7b:40:6c:00:1e:
         3f:49:23:ae:b2:79:64:84:84:fa:9c:92:86:00:33:bb:46:42:
         72:80:2a:8c:6a:30:33:18:52:02:29:a8:39:80:16:1f:87:1b:
         0b:68:21:d8:3f:a7:0a:4b:86:fd:39:25:2b:dc:43:2b:40:a9:
         1e:40:6e:a4:df:42:76:e7:78:c0:a9:73:3f:33:8e:0e:e2:f9:
         e4:bf:3a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----