Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/QpMzFh0gn4RHReTb8ororG1uI6c.roa
File:                     QpMzFh0gn4RHReTb8ororG1uI6c.roa (raw, json)
Hash identifier:          sjbI6Qt0UEe3pauc56qiAivAfS8eY+7PQWVsVGzc1yA=
Subject key identifier:   42:93:33:16:1D:20:9F:84:47:45:E4:DB:F2:8A:E8:AC:6D:6E:23:A7
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       018CC2DB689F6519624B05B50A07411C80CA
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/QpMzFh0gn4RHReTb8ororG1uI6c.roa
Signing time:             Mon 01 Jan 2024 02:30:07 +0000
ROA not before:           Mon 01 Jan 2024 02:30:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210392
IP address blocks:        185.180.128.0/22 maxlen: 24
                          2a0a:a480::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:68:9f:65:19:62:4b:05:b5:0a:07:41:1c:80:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: Jan  1 02:30:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=429333161d209f844745e4dbf28ae8ac6d6e23a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:e4:59:85:4c:65:3f:b4:f5:97:2c:d4:c4:
                    91:08:3c:23:8e:2f:cb:3b:93:be:5b:56:ae:08:c3:
                    a7:0f:96:b0:8e:1d:26:02:54:5e:78:4a:b8:f4:2c:
                    b4:13:6d:1c:fb:ce:99:1d:76:23:7c:a8:aa:81:25:
                    34:0b:a7:b7:68:6b:2f:a5:b0:8e:c9:2e:cf:af:5b:
                    e1:3e:39:b2:fa:45:26:41:3d:66:51:d1:e8:7b:08:
                    4d:d7:ba:0f:77:0c:26:10:5a:2d:f6:f8:33:9d:63:
                    65:26:8d:d9:18:3b:08:1a:09:d7:cc:d3:97:03:db:
                    dd:0f:c0:a9:f9:13:95:a4:ee:13:45:3e:16:df:86:
                    26:d1:4a:46:4c:35:88:ac:35:10:63:73:24:00:61:
                    ab:d4:50:64:28:99:66:3c:a6:6a:71:f8:b7:6f:91:
                    b8:11:c5:26:8f:e5:40:61:4a:e5:0c:b7:27:ed:e9:
                    12:ae:1e:a0:09:6f:7c:64:a1:be:57:a6:21:a6:49:
                    12:f7:4d:5d:cd:8f:f5:4f:a2:96:9c:0a:5e:a5:c3:
                    b8:cc:3e:53:82:49:4c:04:e2:c2:7c:7b:05:69:12:
                    d1:16:25:8b:9d:3e:c1:a7:0e:73:89:67:39:a8:fb:
                    d2:4d:c9:1b:a6:37:32:b2:c1:8c:41:96:e6:5e:53:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:93:33:16:1D:20:9F:84:47:45:E4:DB:F2:8A:E8:AC:6D:6E:23:A7
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/QpMzFh0gn4RHReTb8ororG1uI6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.128.0/22
                IPv6:
                  2a0a:a480::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:92:a1:b9:18:9f:44:9f:23:6f:07:d5:fa:8e:d4:ff:b5:b4:
         1c:67:ac:ed:fb:4d:b1:4e:6e:08:12:e9:f4:32:6b:63:77:d8:
         e0:4e:ed:59:c4:70:2c:1d:32:54:45:9b:66:fb:88:e5:de:21:
         c4:55:4b:c0:55:7b:19:50:80:ae:cd:21:f4:cd:d1:68:df:d2:
         16:42:7c:a5:c1:cb:24:60:e8:dc:d2:b5:0e:04:9b:31:1f:c4:
         8f:6d:fd:c5:ff:c9:92:d1:a5:62:91:e4:f9:b5:0f:98:bd:56:
         75:c9:82:51:87:fd:33:15:bf:34:ef:63:12:6f:e6:da:2c:ce:
         90:09:6f:06:a4:09:bc:7e:25:ee:4c:c2:15:6e:a7:b3:04:b7:
         9b:3f:97:94:b8:2b:d5:de:82:d5:cc:73:c4:d2:9f:9b:f4:8f:
         96:11:a2:e5:33:85:c0:08:03:99:fd:13:0d:4f:75:bb:c2:47:
         28:10:f3:d0:6d:3a:e2:82:22:da:3a:ba:98:03:45:e4:2d:a3:
         91:24:98:cb:a0:7f:a7:29:61:49:f4:2a:84:bd:17:cb:c8:41:
         9c:39:ef:42:92:77:8e:0d:59:68:6b:55:31:18:e5:da:68:6f:
         e3:4a:5b:71:b8:22:2f:9f:02:ca:0b:84:65:d3:e8:e9:df:00:
         51:1b:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----