Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/gEnFmIXvlrpK8E-tz87UL6XL0WQ.roa
File:                     gEnFmIXvlrpK8E-tz87UL6XL0WQ.roa (raw, json)
Hash identifier:          DpqsFl38wbbIZn9CwolHPkiKQNdGqyXYfFjBSqBkLrM=
Subject key identifier:   80:49:C5:98:85:EF:96:BA:4A:F0:4F:AD:CF:CE:D4:2F:A5:CB:D1:64
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       018CC94D07EE4B4E54EA0C7929A49DDD475E
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/gEnFmIXvlrpK8E-tz87UL6XL0WQ.roa
Signing time:             Tue 02 Jan 2024 08:31:57 +0000
ROA not before:           Tue 02 Jan 2024 08:31:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201217
IP address blocks:        2a0a:280:1700::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:07:ee:4b:4e:54:ea:0c:79:29:a4:9d:dd:47:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Jan  2 08:31:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8049c59885ef96ba4af04fadcfced42fa5cbd164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:98:26:26:fd:e0:f2:a3:90:60:82:70:6b:
                    7c:74:b8:c8:f0:f3:e4:fe:f6:dd:12:b7:1c:15:d6:
                    f5:01:26:96:dc:da:e9:c9:b7:b0:21:1f:4e:de:c6:
                    e0:77:f9:17:45:c0:b9:5a:6f:ae:5a:f7:02:f4:5f:
                    30:79:bd:44:0c:56:36:99:12:12:88:9b:4d:fb:59:
                    2b:5d:74:3b:90:a8:41:d8:ad:9b:b7:90:9b:9a:27:
                    d1:ea:06:f0:7e:29:80:a9:9c:e4:2f:c8:10:4b:4a:
                    c6:bb:fc:03:66:20:cd:87:60:9a:df:56:ba:59:57:
                    89:69:1b:27:0e:47:9d:2e:54:96:11:b3:4c:8e:13:
                    a7:76:d1:6e:dc:06:b1:47:d6:d7:0b:76:74:36:2e:
                    22:0f:2d:bb:f5:5e:7c:21:91:c7:86:2d:61:69:41:
                    3a:6f:ef:a1:40:2f:cf:f1:77:79:61:18:74:b4:26:
                    41:aa:63:b3:a4:e7:49:40:1f:99:c1:b4:1e:2d:33:
                    d2:2e:71:5a:0a:a8:06:b1:04:5b:e0:38:e8:7b:e5:
                    fb:7d:26:83:75:16:4a:ee:d9:6e:8b:69:a6:8d:1b:
                    ef:57:8b:eb:7c:56:5a:8a:b1:f5:04:5b:27:f9:4e:
                    af:07:5f:b1:5f:0d:5b:13:00:0c:a4:84:48:2f:20:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:49:C5:98:85:EF:96:BA:4A:F0:4F:AD:CF:CE:D4:2F:A5:CB:D1:64
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/gEnFmIXvlrpK8E-tz87UL6XL0WQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:280:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:5c:4e:34:a3:ad:d0:0c:51:88:82:8d:8c:7a:72:49:51:d1:
         79:ac:71:89:47:9c:85:d8:20:26:0e:84:38:9e:f8:81:30:b9:
         0e:54:75:2a:76:c3:ec:ae:67:f7:62:51:33:cf:11:0e:93:f7:
         8e:7c:1e:1c:1f:79:34:da:24:44:0b:fc:0c:30:ed:62:83:e2:
         22:d1:7e:3c:b5:fa:fe:26:25:63:60:0d:f5:58:be:c8:b6:dc:
         aa:61:9e:17:14:a7:94:56:a0:81:59:cd:ad:ec:d8:f5:e5:fb:
         15:e9:36:8c:b9:d6:26:19:03:26:0d:76:76:41:cf:ce:10:7d:
         f0:79:46:54:93:97:b6:64:2d:43:de:cd:ef:49:9c:ad:61:de:
         6d:65:7e:0c:81:f1:74:04:be:b6:f2:ee:62:a5:fe:b6:59:38:
         d1:6e:d9:18:1f:2e:ce:97:2e:cf:9a:e5:d8:3f:ae:12:53:32:
         c5:44:0a:67:a7:50:2e:56:7b:58:5c:a0:fa:de:05:5a:b2:5b:
         b6:59:19:7b:fb:82:55:f6:56:14:53:02:30:a7:9c:cb:b1:76:
         90:18:51:9c:ad:03:44:37:4a:de:0d:ca:e4:95:c0:26:14:2a:
         2e:07:a1:59:72:4a:e7:72:64:81:ec:47:43:6d:47:01:2d:b3:
         da:69:2e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----