Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Jx_SFtqWBYRX3uv3HS0iFuZlzc4.roa
File:                     Jx_SFtqWBYRX3uv3HS0iFuZlzc4.roa (raw, json)
Hash identifier:          1OgQVCIczcocjRHO9R9u4fY7aOMYtZQDDYbkz+suT1M=
Subject key identifier:   27:1F:D2:16:DA:96:05:84:57:DE:EB:F7:1D:2D:22:16:E6:65:CD:CE
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA296680EA335A60CA966DE72D3C0A39
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Jx_SFtqWBYRX3uv3HS0iFuZlzc4.roa
Signing time:             Tue 02 Jan 2024 12:32:39 +0000
ROA not before:           Tue 02 Jan 2024 12:32:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211517
IP address blocks:        2a0e:8f02:f03f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:66:80:ea:33:5a:60:ca:96:6d:e7:2d:3c:0a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=271fd216da96058457deebf71d2d2216e665cdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:cc:1a:02:0c:9e:b9:53:2c:b7:5a:9d:3a:
                    2d:d2:28:ae:04:0c:3c:1b:e6:f1:0a:4e:ca:4d:f8:
                    d4:c5:bf:23:93:c9:4f:0e:b8:f8:7f:99:a4:07:26:
                    e6:92:66:00:65:59:e0:36:b7:45:bb:77:c4:f2:a9:
                    ae:42:a7:03:76:0e:53:e8:10:43:f6:4c:84:04:f6:
                    5c:a7:99:d7:2c:dc:e8:79:62:11:1f:c2:65:e2:58:
                    93:a2:40:28:12:3d:20:b9:f4:71:40:b1:d0:30:bc:
                    51:c3:cd:dc:ce:6e:bd:c8:8c:7a:20:80:64:c7:7a:
                    17:62:34:d9:2e:bd:57:48:e7:57:33:bc:3b:97:34:
                    a2:2c:e7:58:94:cd:42:76:d3:9b:f5:2d:42:8e:b9:
                    00:bc:1d:09:87:af:c8:c4:b4:36:4e:f0:05:af:ac:
                    c0:a2:d6:f6:f8:6a:83:c3:e6:90:01:df:74:ae:bc:
                    e1:7f:62:6f:2d:0f:59:10:1a:cb:5a:c2:3b:38:f5:
                    4a:5b:4d:ec:f0:50:2d:87:4c:42:cd:4d:78:46:66:
                    09:b9:ed:c0:cb:ef:62:20:0f:33:15:47:79:3a:c8:
                    b7:57:1d:45:83:de:a7:87:72:62:b4:5e:b3:b6:c5:
                    37:01:e2:9c:6a:46:a3:7c:0f:b6:3f:42:9d:c9:25:
                    d4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1F:D2:16:DA:96:05:84:57:DE:EB:F7:1D:2D:22:16:E6:65:CD:CE
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Jx_SFtqWBYRX3uv3HS0iFuZlzc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f03f::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:7b:78:e7:da:76:94:2e:81:3f:b8:fb:2c:17:0e:14:b7:
         6a:9b:82:62:f5:41:08:17:28:d2:78:ec:44:02:cd:be:98:dd:
         58:e7:14:e5:cf:ac:a0:d6:c6:c1:5c:69:69:a8:05:87:2a:b0:
         ed:a4:66:0c:3d:ba:2b:cf:e8:88:3d:e9:37:99:50:b4:47:82:
         e8:05:09:c1:6b:b8:45:a7:67:a9:b1:70:08:c6:53:e0:5d:a3:
         73:f7:55:2d:1a:01:03:aa:f2:f0:e1:8a:52:c2:b5:60:65:fd:
         1c:fb:44:8b:7a:b1:5c:ec:d0:35:c9:93:52:d7:00:c7:b9:f8:
         5b:44:3d:9d:4c:e8:d6:43:ef:06:45:4a:d1:91:b8:39:72:61:
         83:59:38:e0:c9:dd:7e:b5:b2:ab:af:9e:d0:1b:92:4d:93:cb:
         b1:f1:bd:6f:6b:82:a0:4f:6c:72:46:de:c1:5f:8e:33:04:1d:
         ce:97:46:85:b8:a0:90:5e:48:7e:ae:fa:8d:f0:e2:b7:0a:49:
         3d:f3:fb:79:39:25:5c:88:21:74:24:67:5f:b9:58:1f:89:83:
         aa:0a:97:c8:15:d5:65:d4:5e:1b:a4:20:66:e2:ff:07:e9:05:
         30:98:33:6a:e7:14:fa:81:5a:cb:9a:2b:8e:09:62:f1:27:42:
         f9:5d:bc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----