Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/DJGnmkNOgtmHx4OOtuw0m_kdqQg.roa
File:                     DJGnmkNOgtmHx4OOtuw0m_kdqQg.roa (raw, json)
Hash identifier:          z+/Rg9NzvJUMMnpZD/jbtvcA51MbsoT8t3JOPjHvCRo=
Subject key identifier:   0C:91:A7:9A:43:4E:82:D9:87:C7:83:8E:B6:EC:34:9B:F9:1D:A9:08
Certificate issuer:       /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial:       018CC86F95D45CCCBCB64D9291116893F540
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/DJGnmkNOgtmHx4OOtuw0m_kdqQg.roa
Signing time:             Tue 02 Jan 2024 04:30:05 +0000
ROA not before:           Tue 02 Jan 2024 04:30:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50868
IP address blocks:        2a0d:2406:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:95:d4:5c:cc:bc:b6:4d:92:91:11:68:93:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
        Validity
            Not Before: Jan  2 04:30:05 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0c91a79a434e82d987c7838eb6ec349bf91da908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:aa:94:b5:a3:4e:05:eb:3b:8d:01:73:a7:
                    f6:b3:56:5b:c2:49:e6:d7:1f:21:86:b9:4e:49:40:
                    b4:6b:19:dd:6c:4e:05:e1:f3:f9:13:cd:6c:3b:a5:
                    0c:35:2b:ee:7d:91:9e:24:ed:5a:28:55:9c:5c:4a:
                    4b:4f:80:7e:f9:98:c9:46:dc:d8:e1:8e:2c:ab:b1:
                    d3:31:ba:7f:a2:2c:80:db:99:ce:50:5a:d0:22:41:
                    9e:39:85:3b:0d:33:de:1f:d6:96:b8:ac:cd:44:4b:
                    bd:3e:90:16:88:f1:31:00:e0:b2:de:05:5d:1d:56:
                    a2:03:95:32:b6:df:97:8e:e3:a0:da:ef:aa:15:40:
                    b1:3c:3e:1c:dd:1e:6a:70:f2:ce:7f:3c:46:8d:f3:
                    05:9f:73:0a:62:4b:74:74:1b:c3:2e:e7:8e:00:9e:
                    c0:93:4f:99:c5:09:f1:e4:82:24:2f:8e:ec:95:4a:
                    f9:bc:68:5b:be:ba:73:ca:ec:4f:5c:85:a8:b1:49:
                    09:68:78:d6:43:0c:e0:33:eb:0f:b3:90:af:5e:bf:
                    c6:42:0a:e9:7c:73:c4:15:2e:0c:97:ab:fa:b3:54:
                    5c:c0:be:ad:35:a3:1d:fd:ae:0e:b0:ce:65:02:42:
                    32:43:36:df:31:1d:17:83:0e:55:dc:ab:d5:bb:d5:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:91:A7:9A:43:4E:82:D9:87:C7:83:8E:B6:EC:34:9B:F9:1D:A9:08
            X509v3 Authority Key Identifier:
                keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/DJGnmkNOgtmHx4OOtuw0m_kdqQg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2406:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:3b:9b:58:55:38:fe:50:eb:44:e0:d7:fa:aa:f5:97:ee:ab:
         cd:b8:eb:30:7b:7d:c0:8d:e3:aa:bc:37:66:c9:40:f5:29:c7:
         72:99:f2:2b:d7:8c:f6:f4:9d:a2:67:4c:bc:92:41:48:1b:aa:
         a9:b9:ba:2b:17:c1:f7:3d:e5:60:7a:32:a8:14:03:2c:1b:b7:
         2b:18:cc:57:a3:9c:fa:47:5d:0f:96:c2:93:43:2a:ee:2d:a3:
         aa:06:5b:bb:4e:97:51:0a:80:24:7c:11:0e:96:e4:5d:2a:54:
         58:4b:fa:41:a1:d8:c2:c4:2b:2a:dd:ec:31:42:f7:bf:53:10:
         00:ca:82:36:b6:5b:a8:4e:11:3c:01:7b:12:f1:67:26:5c:d3:
         b6:c1:75:58:10:e8:ec:a6:ec:87:d9:b8:b1:ea:fc:49:7d:23:
         d9:e4:68:ee:d9:82:15:8d:08:7a:db:87:62:c5:e6:3e:42:88:
         aa:61:84:aa:e1:7b:d5:04:3a:cb:ea:79:af:4a:13:ba:8d:0a:
         70:c4:87:55:67:d9:ab:ce:46:d1:bf:ea:b0:48:c1:e5:e4:ab:
         77:6d:4f:bb:d2:a8:37:be:64:0b:af:9d:6f:22:eb:f7:e1:12:
         d0:2c:ea:0a:58:8f:f1:6d:aa:13:97:d6:38:22:3a:22:3f:15:
         6e:43:24:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----