Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/6FdImWMlo3G4O8w6v8vR0uwOfk0.roa
File:                     6FdImWMlo3G4O8w6v8vR0uwOfk0.roa (raw, json)
Hash identifier:          wx5U4py4aLl0/FBlq6cRbRre6KByVJ8saNG91154s1A=
Subject key identifier:   E8:57:48:99:63:25:A3:71:B8:3B:CC:3A:BF:CB:D1:D2:EC:0E:7E:4D
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA2961FCEAA07667AB8B4DF2093D110B
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/6FdImWMlo3G4O8w6v8vR0uwOfk0.roa
Signing time:             Tue 02 Jan 2024 12:32:38 +0000
ROA not before:           Tue 02 Jan 2024 12:32:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208809
IP address blocks:        2a0e:8f02:f05d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:61:fc:ea:a0:76:67:ab:8b:4d:f2:09:3d:11:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e85748996325a371b83bcc3abfcbd1d2ec0e7e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ce:f1:f2:a4:53:88:42:60:d2:76:ad:48:57:
                    37:06:8c:50:b4:63:2c:e3:82:e0:d4:61:b2:7b:f6:
                    b4:d5:70:06:8f:74:94:2f:90:db:dd:3a:b0:78:11:
                    cc:53:c9:69:7a:73:f3:06:da:d6:ae:39:5f:89:23:
                    eb:43:3d:41:b9:8c:90:69:f0:81:00:90:73:a8:93:
                    37:02:70:5d:ac:28:ee:56:e8:fb:87:79:46:26:af:
                    bc:68:b6:c3:ad:9f:74:50:c7:29:50:8b:59:60:47:
                    4c:ff:c4:50:74:b6:7c:d0:ea:60:58:b5:b7:a7:6c:
                    72:d8:cd:c9:55:26:9a:2e:76:23:72:4d:58:24:3b:
                    3b:db:5f:f6:94:0b:84:b7:65:59:01:d1:dd:a4:96:
                    5e:c7:40:95:39:71:5d:f2:55:fa:31:ac:41:62:9a:
                    bb:5c:04:18:90:c6:e4:88:0d:ab:97:46:b8:b5:02:
                    08:70:77:ea:fe:c7:48:4d:53:56:bf:15:d7:20:84:
                    26:8e:9e:9e:19:06:f0:ec:93:74:00:2f:55:73:54:
                    a6:e0:c2:73:fe:24:63:4c:98:cb:e3:c7:95:2a:7d:
                    1c:74:9a:8f:32:b6:eb:07:ea:42:5c:92:f3:d7:cc:
                    20:54:d3:cb:f4:54:c1:a7:a8:57:1a:f3:ff:e3:2e:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:57:48:99:63:25:A3:71:B8:3B:CC:3A:BF:CB:D1:D2:EC:0E:7E:4D
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/6FdImWMlo3G4O8w6v8vR0uwOfk0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f05d::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:dc:83:4c:b5:50:8a:db:90:2f:b2:9e:4c:b3:ef:38:8c:ed:
         41:a6:22:6b:ee:a2:44:60:7a:97:6e:7e:40:25:64:93:59:32:
         ed:f7:8c:fd:69:1e:9f:76:67:ea:62:6f:5d:1f:1f:52:ae:9e:
         96:9a:ac:d9:91:6f:32:66:2e:57:14:91:76:7a:75:b9:f3:e1:
         2f:2e:cc:a9:ff:a9:04:12:9c:70:1d:51:c7:96:71:2f:08:f6:
         d7:3b:48:ac:61:cd:75:8f:36:c7:05:fc:d5:b0:b4:fb:79:48:
         d5:94:12:bf:eb:17:32:9c:2b:d0:a8:b8:50:53:51:21:69:1b:
         11:63:2e:14:c3:f4:86:6a:a0:d0:4e:8a:f1:e9:5a:71:53:c7:
         45:40:4c:2d:9a:11:33:20:dc:c0:00:1d:43:f8:12:8e:7b:a1:
         55:58:f7:20:93:ba:d9:f1:46:fa:28:0c:96:ef:bd:35:fb:12:
         f2:75:2b:19:98:13:c6:0b:77:91:25:91:fd:03:91:ce:03:46:
         c6:b9:f5:3c:df:a4:54:6d:41:95:af:23:b0:db:3f:ca:5f:c7:
         e5:d0:0c:48:39:a0:c5:09:e5:b8:cc:b9:f5:7d:9b:f5:22:22:
         b8:d7:d5:1c:dc:5f:95:65:74:f6:7e:8c:60:45:41:56:14:45:
         8b:62:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----