Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/wnkYu_SbMvm3PG7V5ugXdjvh27c.roa
File:                     wnkYu_SbMvm3PG7V5ugXdjvh27c.roa (raw, json)
Hash identifier:          +8kP0jGNwaPxl9stOakysmwPWC8a5U2o27eeJkCj298=
Subject key identifier:   C2:79:18:BB:F4:9B:32:F9:B7:3C:6E:D5:E6:E8:17:76:3B:E1:DB:B7
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       018CCA295F525F6FB1457DE7DEBAF8FFCDE8
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/wnkYu_SbMvm3PG7V5ugXdjvh27c.roa
Signing time:             Tue 02 Jan 2024 12:32:38 +0000
ROA not before:           Tue 02 Jan 2024 12:32:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207212
IP address blocks:        2a0e:8f02:f040::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:5f:52:5f:6f:b1:45:7d:e7:de:ba:f8:ff:cd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  2 12:32:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c27918bbf49b32f9b73c6ed5e6e817763be1dbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:ca:19:c4:ec:34:30:ac:23:36:05:9c:94:
                    a9:99:60:a0:11:b0:e4:6b:5d:82:a7:fd:ac:87:12:
                    a0:91:10:c8:71:f8:39:2a:10:a5:31:9d:dc:2c:80:
                    e1:f3:03:b5:83:7e:77:cb:0a:18:2d:78:69:c0:ce:
                    99:bb:82:b9:a3:31:7d:1c:c4:9b:bc:96:fb:09:fc:
                    c0:18:ac:48:cc:2e:61:e7:84:b0:54:b1:d8:4c:b2:
                    6e:7b:11:53:52:8e:ec:68:c6:08:32:62:6b:db:2f:
                    a8:09:e0:ac:8b:98:a2:b8:92:e6:88:ca:77:fa:81:
                    b8:a3:4b:4d:c2:5d:76:f6:a5:cf:b2:19:82:14:e5:
                    d2:2d:1a:b5:61:e1:1d:93:fa:06:4c:2c:82:47:48:
                    e2:c8:7d:54:85:60:97:58:77:20:38:67:8a:2b:6c:
                    c8:d9:e3:42:dd:1c:b8:c6:b4:53:dd:fc:82:87:30:
                    7c:92:2c:5a:c0:ac:81:1b:b8:d5:30:27:03:5b:4f:
                    01:d0:76:94:c7:ec:9e:53:df:8d:b2:7f:b6:21:e4:
                    a8:86:06:50:cf:e2:89:ea:bb:3f:39:d1:56:27:ca:
                    55:da:8f:ee:01:f1:68:52:04:02:c8:23:fe:46:c4:
                    ef:9b:e4:99:c7:2e:b4:07:82:24:1c:91:b5:66:ce:
                    f5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:18:BB:F4:9B:32:F9:B7:3C:6E:D5:E6:E8:17:76:3B:E1:DB:B7
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/wnkYu_SbMvm3PG7V5ugXdjvh27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f040::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:51:67:89:ad:2b:e1:45:72:12:79:a4:6b:96:59:b1:70:
         4e:e1:b0:57:93:06:a8:7d:83:01:48:9b:bb:b6:02:93:49:ff:
         18:f1:41:b7:41:82:d6:eb:87:de:5e:46:2e:b7:45:c6:40:10:
         4a:d2:a8:57:34:08:b8:eb:8a:21:66:8f:b6:54:7d:f4:92:8c:
         9a:b6:33:ec:c3:5c:e6:b9:46:8a:6e:4f:a5:a3:05:84:92:6e:
         45:24:4a:a4:b0:ff:ac:89:14:8f:90:3e:42:dc:69:1a:94:63:
         a6:26:50:d8:be:b6:e6:df:30:bf:cf:03:1f:06:6e:fb:46:b8:
         5d:15:7d:44:28:7d:f7:ae:d9:7b:37:25:af:6d:8c:5a:46:65:
         0a:ad:87:f6:3e:03:a2:50:de:d5:d6:0a:28:4f:b6:9e:e8:2b:
         71:c8:32:b0:a4:97:a9:3a:6d:10:b6:9e:41:6a:3e:f5:e8:d7:
         90:c0:9b:c6:d0:a8:44:e4:fa:56:58:91:a0:3e:1a:97:72:da:
         5e:5e:d1:de:42:d0:a7:d0:cb:35:21:47:55:48:eb:0a:01:cd:
         f9:9a:43:f9:59:0a:be:c7:33:8d:40:1a:f0:a8:e0:24:8f:2f:
         ed:97:fb:d3:c2:b3:a9:3e:7d:7b:b5:e3:f6:a7:a0:99:97:e9:
         f8:99:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----