Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/1-AD6xrpHPVULiz97ZmC-3qVr3U0.roa
File:                     1-AD6xrpHPVULiz97ZmC-3qVr3U0.roa (raw, json)
Hash identifier:          eluDtCjAVJ+qlga7bbXVWbNhUlzIJdZUxAnTYm61MbQ=
Subject key identifier:   F8:00:FA:C6:BA:47:3D:55:0B:8B:3F:7B:66:60:BE:DE:A5:6B:DD:4D
Certificate issuer:       /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial:       019030963780AD9D8B3DCA59DE70D34F1155
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/1-AD6xrpHPVULiz97ZmC-3qVr3U0.roa
Signing time:             Wed 19 Jun 2024 13:01:09 +0000
ROA not before:           Wed 19 Jun 2024 13:01:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     47639
IP address blocks:        91.208.79.0/24 maxlen: 24
                          2001:67c:2f8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:30:96:37:80:ad:9d:8b:3d:ca:59:de:70:d3:4f:11:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
        Validity
            Not Before: Jun 19 13:01:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f800fac6ba473d550b8b3f7b6660bedea56bdd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:71:41:94:48:c6:3c:82:e9:d2:7b:43:e0:
                    d4:14:1a:64:59:7f:f1:4a:01:f1:b3:a6:f1:ed:c6:
                    85:83:89:d3:5b:3b:ee:0d:d1:11:5c:25:a4:42:10:
                    78:70:a9:3c:b5:c6:cb:8f:5c:ea:8a:87:ef:14:f9:
                    1d:e1:33:41:88:e0:61:4d:ae:01:01:21:42:c7:4b:
                    64:3b:5d:14:77:04:ef:6f:35:05:e2:b1:52:0c:cb:
                    45:35:2f:95:55:e2:ec:58:1e:bc:a3:fb:c0:d5:23:
                    b2:9a:76:b3:0d:e8:b5:86:3a:d6:f2:63:76:00:45:
                    d1:16:e5:b1:71:c1:cc:41:3e:5f:5d:9b:5a:7b:a9:
                    7b:0f:da:1c:20:66:ca:4d:95:16:bf:9e:3e:32:86:
                    25:de:81:de:43:6b:02:2f:c4:25:ab:88:28:7e:43:
                    95:3e:6e:ae:26:38:61:96:d6:81:53:ec:9e:2d:ab:
                    cd:75:04:1c:4e:b8:16:71:85:ca:63:70:7a:3a:f8:
                    d4:ac:30:83:5f:d8:fc:2f:90:d6:82:5c:68:9a:e6:
                    6f:aa:01:9a:a2:c2:c0:09:48:98:6e:78:53:4d:6d:
                    6e:39:64:2d:d6:5b:b5:0f:1a:be:0e:3c:9c:cf:88:
                    59:84:47:25:d7:fd:cc:c9:31:17:f4:59:6a:e5:67:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:00:FA:C6:BA:47:3D:55:0B:8B:3F:7B:66:60:BE:DE:A5:6B:DD:4D
            X509v3 Authority Key Identifier:
                keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/1-AD6xrpHPVULiz97ZmC-3qVr3U0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.208.79.0/24
                IPv6:
                  2001:67c:2f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:4a:85:bc:a8:93:8d:0d:1f:90:2a:cc:49:7e:db:09:cb:12:
         5e:f1:76:1c:9a:c1:57:51:ca:50:50:0c:39:7f:f5:e2:e7:bc:
         57:40:ca:2f:4c:dc:66:d4:2a:fe:5f:70:bc:f6:72:56:ec:c6:
         81:51:4f:45:de:91:67:93:6b:e7:a8:c2:11:32:97:5a:02:11:
         7b:63:d8:02:05:85:44:ab:24:64:31:30:de:d9:b0:37:e3:f7:
         cc:79:8c:fc:86:8d:8b:54:ac:3a:06:5d:7a:3b:40:3a:75:6f:
         37:04:e9:36:10:42:24:c5:76:bd:cf:3b:04:1d:6c:ea:09:57:
         47:b4:61:70:90:f6:ea:47:5b:ef:39:62:9d:f2:6e:07:f0:48:
         ed:35:5c:0d:d8:27:93:40:16:68:de:02:3a:2f:25:c0:68:5d:
         ff:76:ef:c6:e6:75:16:c3:05:14:50:bc:14:a0:65:39:79:28:
         c6:ff:6d:bf:ac:eb:83:d8:a2:8d:c1:cf:62:1d:7e:88:4b:29:
         6f:ba:a3:83:ea:c1:62:91:27:e7:37:f2:de:c1:91:3f:66:a1:
         46:97:1a:3e:c4:68:ce:f8:d1:42:33:71:8b:64:ca:dc:12:69:
         1e:61:e6:bc:8b:54:6b:94:50:90:e9:b0:24:1d:be:72:10:d4:
         57:c4:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----