Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OqoV5qpyVpr5Ko-1i4t4oSvKTL8.roa
File:                     OqoV5qpyVpr5Ko-1i4t4oSvKTL8.roa (raw, json)
Hash identifier:          AKTSITAZv/z+SdpmdiRXjJcH7YuPA12lGGfCkUmvQfA=
Subject key identifier:   3A:AA:15:E6:AA:72:56:9A:F9:2A:8F:B5:8B:8B:78:A1:2B:CA:4C:BF
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA296173A5C92F05FBCB19389019A915
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OqoV5qpyVpr5Ko-1i4t4oSvKTL8.roa
Signing time:             Tue 02 Jan 2024 12:32:38 +0000
ROA not before:           Tue 02 Jan 2024 12:32:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208223
IP address blocks:        2a0e:8f02:f03d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:61:73:a5:c9:2f:05:fb:cb:19:38:90:19:a9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3aaa15e6aa72569af92a8fb58b8b78a12bca4cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:6e:4b:64:f8:0f:47:eb:bf:8d:15:05:c2:
                    50:1c:75:a8:cc:70:07:61:a5:5a:34:a0:9f:a6:4d:
                    0b:77:c2:cf:91:37:70:6e:fc:34:51:3f:61:6c:4b:
                    a9:1c:c5:5a:f6:8d:72:8a:0c:da:71:d8:b1:7d:14:
                    fc:fa:d2:0f:83:b3:e3:b1:98:38:e2:41:72:b3:62:
                    c9:11:61:96:fc:ba:67:61:46:30:57:07:42:85:4d:
                    a0:6c:19:5b:b4:9b:5e:3c:56:5c:da:21:d7:8e:7d:
                    e9:2e:b1:e7:e2:64:97:b8:3e:e9:12:77:54:20:b9:
                    4b:5c:7f:41:03:dd:96:50:61:1c:72:e4:81:9f:55:
                    14:6f:44:df:6b:7c:a8:3d:ae:d7:00:b9:5b:11:77:
                    f8:c7:b6:c9:54:15:d5:1d:99:c7:50:cc:eb:76:ea:
                    85:2d:19:fd:03:77:91:13:ae:75:2b:e6:14:81:e2:
                    10:a7:4a:a4:9d:5b:19:b9:d3:8d:95:0d:49:9b:64:
                    a4:af:d5:9f:bf:97:17:6c:6e:62:e7:92:d9:43:0e:
                    6b:51:1d:4e:0a:e1:55:09:b7:c8:3d:0f:c8:cd:f8:
                    6c:d1:34:c3:2e:ac:cc:8f:07:b7:b1:79:f1:70:18:
                    55:05:b2:88:37:3e:49:0e:c4:64:51:18:b1:ee:20:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AA:15:E6:AA:72:56:9A:F9:2A:8F:B5:8B:8B:78:A1:2B:CA:4C:BF
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/OqoV5qpyVpr5Ko-1i4t4oSvKTL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f03d::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:86:ed:c1:6a:04:b4:66:98:01:35:d3:cd:3d:a7:c1:ac:bc:
         5b:84:53:f9:eb:e8:d8:5e:43:51:9e:fa:d0:b0:12:ee:b6:e0:
         9a:cf:6e:29:28:0a:c7:66:39:3f:5a:98:fe:c7:0f:6b:6e:00:
         43:ba:bf:8b:e6:4c:7c:bc:43:f9:c2:fa:f4:f8:d0:33:8e:77:
         e1:97:9e:02:3c:1f:2c:11:df:a2:0f:50:2c:c6:f4:a5:b6:9d:
         17:88:b6:0a:06:3b:91:30:e2:a5:bc:75:ac:46:a4:f9:f0:5d:
         91:5f:da:d9:4b:b7:5f:80:7c:2b:9f:9f:bd:63:8a:07:a0:8e:
         19:32:02:ec:3b:3d:0e:21:46:7b:8c:e6:2f:5d:e9:6e:0f:e7:
         18:ed:42:86:6a:cc:90:0d:84:0f:6c:6e:10:49:78:66:c3:8e:
         69:dd:af:94:d9:b8:a9:1e:18:2b:33:47:f1:72:a1:33:50:d9:
         94:51:d0:54:df:61:37:23:c0:38:15:17:19:ec:5d:73:3a:44:
         22:dc:ee:89:c5:84:16:af:73:ce:64:8c:70:5c:a8:29:f7:0c:
         1c:9c:48:f2:d8:e5:c8:e3:45:13:2e:94:95:ed:80:38:fd:d0:
         6f:ab:15:81:91:37:2f:1a:0a:68:90:01:d3:62:9a:f4:ef:90:
         e9:87:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----