Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/UqhJWPa_9aozSuYKgRXVeHfk5YI.roa
File:                     UqhJWPa_9aozSuYKgRXVeHfk5YI.roa (raw, json)
Hash identifier:          hrxdhdY+brZU8EZMMdjFFdy0ctcjjHslkBKf3B4iVks=
Subject key identifier:   52:A8:49:58:F6:BF:F5:AA:33:4A:E6:0A:81:15:D5:78:77:E4:E5:82
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA2968CAA4350C14EBA4F05B908FFE69
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/UqhJWPa_9aozSuYKgRXVeHfk5YI.roa
Signing time:             Tue 02 Jan 2024 12:32:40 +0000
ROA not before:           Tue 02 Jan 2024 12:32:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211715
IP address blocks:        2a0e:8f02:f01c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:68:ca:a4:35:0c:14:eb:a4:f0:5b:90:8f:fe:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=52a84958f6bff5aa334ae60a8115d57877e4e582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:9a:50:2a:12:20:80:26:1f:f1:98:68:63:
                    15:af:a4:e9:4a:f9:0b:4b:b0:6b:f9:7f:74:69:a4:
                    4f:74:28:a2:c2:1c:b4:39:38:41:30:57:1d:90:0d:
                    2e:67:c2:04:b5:9f:2a:b7:21:71:0c:73:7a:e4:58:
                    74:87:c9:46:63:af:2e:4f:eb:6b:3a:3f:e7:cf:63:
                    35:92:91:b3:84:eb:14:59:37:43:3b:f6:a5:81:1e:
                    8f:e7:2f:55:f8:d7:30:ee:88:4e:96:21:11:90:6f:
                    5f:42:59:9a:75:ff:55:fa:43:65:6e:39:1c:03:1f:
                    2a:ed:bd:ce:45:99:78:72:ba:d5:83:50:f8:b6:63:
                    b1:d8:34:0a:4d:76:b2:c9:22:c5:90:b6:8b:96:b8:
                    05:cc:62:79:58:0d:81:87:44:d3:ae:04:99:dd:1b:
                    88:e9:28:6a:68:9d:05:d3:82:aa:31:b7:43:ee:21:
                    cf:b7:2c:6d:3c:94:4b:8b:2e:43:7a:b1:b4:c7:2f:
                    bf:48:eb:c6:3d:1f:da:ea:6a:aa:d2:36:6e:6a:70:
                    74:3d:06:9a:08:b9:08:5c:c6:b1:4a:47:df:fa:99:
                    e7:e0:39:c6:4f:7b:a7:a7:f7:58:a6:2d:e2:e2:a2:
                    3d:95:d5:37:21:a3:1d:f3:47:14:af:6a:16:bc:a4:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A8:49:58:F6:BF:F5:AA:33:4A:E6:0A:81:15:D5:78:77:E4:E5:82
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/UqhJWPa_9aozSuYKgRXVeHfk5YI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f01c::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:49:f5:42:6e:a7:7e:1c:94:88:4d:03:ef:97:77:b3:03:3c:
         36:41:68:b1:8c:90:2d:a9:2b:cd:80:f5:04:22:e3:32:b2:c2:
         de:ce:ed:df:22:cc:f1:2c:3e:90:35:2e:73:56:88:d9:18:2d:
         eb:59:39:6b:b3:65:a3:09:51:bd:97:4d:6f:a9:18:7d:e2:dc:
         bb:f8:cb:1d:09:ff:94:a7:83:d1:1c:27:96:3b:d2:3f:d9:69:
         cc:ea:c5:a7:b6:b0:f9:4d:54:90:ba:a6:37:40:6d:12:f3:1b:
         76:f9:eb:c8:2e:7a:5f:63:04:9f:2b:b5:e5:db:06:a6:7c:f4:
         96:90:73:44:86:82:01:8d:14:4c:a0:14:2a:16:0a:4e:8a:a4:
         2f:2d:32:76:3a:ad:eb:33:f2:9b:63:24:9d:76:3a:92:07:dd:
         ae:34:f1:74:eb:f4:67:2a:3c:df:6f:f4:b4:9b:26:f2:01:93:
         11:96:eb:f9:e2:87:2a:bc:dd:67:6d:af:a6:c1:4a:91:f0:12:
         b9:34:38:58:e1:db:5c:0b:c1:eb:59:e2:04:24:67:a7:1b:8b:
         b7:24:b1:05:d6:c5:dd:77:c3:75:1b:79:ad:04:ce:be:12:71:
         64:80:f5:95:88:f2:44:ee:f5:cb:f0:68:c4:3d:3b:2f:60:17:
         f6:86:0a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----