Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/9K7EpGA0Gxi4DaJwrPbkclvPXXc.roa
File:                     9K7EpGA0Gxi4DaJwrPbkclvPXXc.roa (raw, json)
Hash identifier:          pjl0QNQvGwL7Q0288U5htiT+OODw4NelIaUAquM2uw8=
Subject key identifier:   F4:AE:C4:A4:60:34:1B:18:B8:0D:A2:70:AC:F6:E4:72:5B:CF:5D:77
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA2972D4A0BC508FC9D370A04B7ABA71
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/9K7EpGA0Gxi4DaJwrPbkclvPXXc.roa
Signing time:             Tue 02 Jan 2024 12:32:43 +0000
ROA not before:           Tue 02 Jan 2024 12:32:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212577
IP address blocks:        2a0e:8f02:f02a::/48 maxlen: 48
                          2a0e:8f02:2070::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:72:d4:a0:bc:50:8f:c9:d3:70:a0:4b:7a:ba:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f4aec4a460341b18b80da270acf6e4725bcf5d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:f6:ef:e1:77:36:54:d5:33:3c:72:c1:2e:
                    73:b1:3a:54:ea:92:9e:ec:62:c8:4b:aa:a7:d6:89:
                    be:14:ab:5e:96:f8:20:78:16:55:65:26:4b:47:ea:
                    62:fc:ae:d4:98:59:9b:ee:dd:c3:e9:05:30:c9:62:
                    1d:c1:ee:84:fc:06:09:24:20:82:ff:fa:7d:52:bc:
                    37:8f:07:0b:db:aa:17:21:09:a7:9e:7b:ce:c4:f4:
                    f6:89:db:31:12:b2:7d:6f:24:be:67:2b:33:db:bb:
                    dd:9c:3e:a5:e0:17:6a:7c:5d:5f:d4:74:8b:35:bf:
                    8f:23:50:69:97:e6:dd:76:d1:42:f8:2d:bb:6d:c2:
                    c3:4d:4b:dc:89:93:2e:92:36:6e:30:ad:2a:ea:30:
                    9e:da:10:05:fb:c8:72:4d:80:8d:bb:5a:47:57:85:
                    9b:1f:35:93:dd:e5:f5:ef:2d:ef:9a:2a:8a:97:89:
                    ba:e9:5d:1e:70:0c:6b:ea:a9:9d:8d:b8:8f:3f:d7:
                    75:a2:a3:29:42:2e:af:1b:cb:46:08:2f:09:b7:a5:
                    8c:fa:fd:38:df:9b:a7:d7:b7:72:1b:2f:14:04:30:
                    a8:0a:8a:cf:ab:de:c2:42:b9:38:91:a9:4b:0a:a3:
                    f9:a2:1d:3e:f2:48:99:c5:4c:59:a4:b5:b5:27:13:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AE:C4:A4:60:34:1B:18:B8:0D:A2:70:AC:F6:E4:72:5B:CF:5D:77
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/9K7EpGA0Gxi4DaJwrPbkclvPXXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:2070::/44
                  2a0e:8f02:f02a::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:ec:91:53:34:64:63:05:0f:66:02:17:b7:35:9c:4c:5b:ce:
         c0:2e:38:04:5e:ef:e8:1c:a2:0c:97:b9:be:3f:c3:0f:09:e8:
         88:d0:14:d8:24:7d:f1:f5:35:76:c9:55:17:b4:f4:fe:ce:a3:
         24:b0:82:8b:3e:01:f9:90:c2:c6:62:cc:7d:92:cf:2d:30:b7:
         2b:1c:f6:41:b4:ec:a3:80:75:bd:6c:f0:e1:9c:d4:cb:fb:9b:
         f4:df:56:7d:eb:0f:10:7c:9b:3c:48:a3:3f:c7:4c:3b:5f:26:
         d3:7d:c0:76:e1:28:e5:7c:d0:40:39:08:65:ee:35:da:37:84:
         d8:e0:c3:59:cf:d0:be:6c:2d:d9:3d:9f:44:26:4c:8c:1d:79:
         d7:8e:3f:b0:19:3b:cb:66:14:3c:1c:57:3e:cc:b9:1d:f3:44:
         ba:9e:d4:c4:dd:bb:c8:67:e6:ae:14:81:b1:58:b3:1f:cf:68:
         e8:f6:f7:fc:74:f8:22:00:98:b4:bf:99:83:25:36:eb:43:45:
         a4:6e:65:b6:54:b4:a5:b4:c6:82:62:5b:f6:4a:dc:b0:85:3e:
         e9:0f:f2:ac:01:0b:c8:67:a9:aa:8a:90:11:53:a6:44:4d:2b:
         8d:ad:e0:e5:3d:df:44:64:30:ba:6a:b2:a1:f9:30:7f:70:8e:
         f9:5d:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----