Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/u_GkTVMjpM9IWmvK2G4ajtpVi1M.roa
File:                     u_GkTVMjpM9IWmvK2G4ajtpVi1M.roa (raw, json)
Hash identifier:          DEozJloZDIWjTjcarj4kcqR9O6q0jCgSIFBzitRiSPY=
Subject key identifier:   BB:F1:A4:4D:53:23:A4:CF:48:5A:6B:CA:D8:6E:1A:8E:DA:55:8B:53
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA29661CC9C45F9C171F2497CB011F83
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/u_GkTVMjpM9IWmvK2G4ajtpVi1M.roa
Signing time:             Tue 02 Jan 2024 12:32:39 +0000
ROA not before:           Tue 02 Jan 2024 12:32:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211498
IP address blocks:        2a0e:8f02:f021::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:66:1c:c9:c4:5f:9c:17:1f:24:97:cb:01:1f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bbf1a44d5323a4cf485a6bcad86e1a8eda558b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:77:a7:f4:18:c6:23:bf:34:99:87:47:a9:14:
                    c4:25:bb:0f:84:1a:ba:cd:1e:e1:e8:a6:7d:87:3c:
                    b0:b4:f0:16:9a:54:af:ed:43:15:f8:c9:d5:ba:31:
                    02:7c:f9:45:b4:62:c4:ca:af:a9:43:0c:96:57:f8:
                    76:e1:3a:e9:6d:52:da:01:3e:2a:45:95:8c:8f:61:
                    fb:d2:64:0d:da:a0:21:80:1e:ca:4a:3f:e0:db:54:
                    18:a7:75:fb:de:59:19:11:fe:83:6a:d8:31:fa:aa:
                    ef:17:54:52:8d:08:39:4c:00:83:cf:5f:75:64:4a:
                    7a:9c:54:6d:ef:57:45:95:e8:e1:9c:32:13:35:5b:
                    ca:f9:97:c7:4d:73:22:a9:48:82:98:d6:2b:cc:2f:
                    b6:cf:61:09:7c:6f:1f:78:75:cc:cd:ab:da:b5:12:
                    0b:8f:5c:ba:4c:66:3e:63:57:08:84:76:0f:65:70:
                    0a:f4:2b:e5:40:c1:c8:fe:18:99:ae:d2:87:67:34:
                    a0:82:14:dd:d0:f5:b1:21:ce:bd:07:42:3f:bd:0c:
                    fc:b6:9c:1a:f9:44:fa:f7:d6:68:11:44:1a:9a:4c:
                    41:ec:19:bf:70:d5:8d:2a:22:56:f1:c4:c9:fb:a7:
                    88:c6:f2:3a:b9:15:01:2f:aa:39:75:60:47:9e:c8:
                    55:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F1:A4:4D:53:23:A4:CF:48:5A:6B:CA:D8:6E:1A:8E:DA:55:8B:53
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/u_GkTVMjpM9IWmvK2G4ajtpVi1M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f021::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:49:c3:e0:6b:b3:6a:27:fc:93:d0:89:2d:81:66:52:ff:b3:
         26:53:b6:a6:f4:f9:3b:d0:39:06:21:92:a0:94:ed:9d:08:6c:
         6b:d2:2e:6f:32:a8:ec:cb:05:32:fb:17:34:78:73:49:52:8b:
         b5:f7:ee:1b:7a:bf:bd:43:c5:a7:d4:e6:80:38:b7:43:19:9a:
         14:54:51:f4:91:8f:80:04:8c:8c:83:72:fa:32:e7:24:0d:c7:
         2d:7d:03:4b:c0:da:76:3b:a8:be:54:b3:99:f1:c9:1b:13:e8:
         bc:82:7c:12:02:b7:f1:73:59:74:ba:14:37:eb:1b:ac:2b:13:
         2a:38:3d:5a:6b:30:3d:8f:fe:63:a0:45:5a:cd:a8:b8:89:37:
         03:62:e6:05:89:c3:8b:6c:95:69:67:9b:d0:bf:b0:fa:c6:e3:
         6d:2e:c8:64:0a:06:6b:d7:9c:b1:1d:78:00:10:a4:5b:d6:22:
         3e:fe:79:80:73:d0:c5:32:86:23:7f:db:5a:7c:04:f5:83:c9:
         a8:a4:15:b9:12:8b:1e:e1:3a:55:a8:1d:ed:5c:d6:dd:d6:fc:
         e5:9e:69:ac:3f:1c:40:3c:6a:d2:b8:48:bc:9a:09:3a:2d:86:
         65:6c:03:f1:4c:70:cf:5f:bb:57:e0:d7:6a:2d:83:75:b0:02:
         5f:4e:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----