Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Qj1Q5Tv4Psy_F2E-VcTMgz_fWe4.roa
File:                     Qj1Q5Tv4Psy_F2E-VcTMgz_fWe4.roa (raw, json)
Hash identifier:          BTASuE/PkAGHQA9p//MeKBL4tHSB0nAsHeFI7J7z4/E=
Subject key identifier:   42:3D:50:E5:3B:F8:3E:CC:BF:17:61:3E:55:C4:CC:83:3F:DF:59:EE
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       018D9E36681101751C4EC79AD3F871D08B81
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Qj1Q5Tv4Psy_F2E-VcTMgz_fWe4.roa
Signing time:             Mon 12 Feb 2024 16:46:22 +0000
ROA not before:           Mon 12 Feb 2024 16:46:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215527
IP address blocks:        2a0c:b641:bd0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:9e:36:68:11:01:75:1c:4e:c7:9a:d3:f8:71:d0:8b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Feb 12 16:46:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=423d50e53bf83eccbf17613e55c4cc833fdf59ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:2d:f2:c2:41:3b:f6:ce:c5:e5:23:e6:dc:
                    ed:96:11:86:7a:01:10:44:e5:e8:f5:9d:96:0c:57:
                    29:2c:62:52:0b:ee:f0:e7:77:83:05:7f:7c:e3:99:
                    07:19:cd:35:4b:92:5b:ba:c7:f7:41:50:9f:87:5e:
                    5e:4d:cb:71:38:43:52:03:03:62:3e:e9:ff:99:2f:
                    d5:0f:c7:70:c9:43:7a:6d:9a:32:fd:ce:d7:c2:34:
                    da:7e:9f:24:d6:89:36:87:c2:1a:13:80:38:8c:2e:
                    59:87:2d:16:87:3f:fa:c2:96:28:32:e8:91:a9:5f:
                    e7:64:30:1c:0b:40:a1:ad:2a:75:4f:6c:66:bc:ee:
                    16:2b:73:e2:0e:03:e8:b9:0d:4e:23:ec:f8:9a:28:
                    8a:43:91:f3:ac:df:82:1c:05:92:36:39:ae:78:e6:
                    bb:a7:87:2e:43:3c:55:8b:60:1e:d0:2f:bb:73:c1:
                    eb:c6:7a:e8:81:5c:3c:13:07:79:75:0e:d0:a6:d8:
                    91:60:4a:98:c9:ee:98:9b:e9:e3:2c:77:64:bf:3f:
                    0b:fc:d7:3c:08:84:bb:da:ab:e7:dd:fe:de:02:68:
                    19:45:71:d5:c1:b5:7d:5b:76:cc:ec:c8:93:68:2d:
                    f1:99:01:67:32:a2:1b:a4:05:26:78:21:d0:80:a3:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3D:50:E5:3B:F8:3E:CC:BF:17:61:3E:55:C4:CC:83:3F:DF:59:EE
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Qj1Q5Tv4Psy_F2E-VcTMgz_fWe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:bd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:4d:ae:c9:d1:2b:b0:25:77:f3:e9:e0:b8:2e:17:2d:c0:33:
         8e:a3:6d:08:f4:2e:97:e0:aa:ed:c6:35:a0:77:3e:4c:28:30:
         3b:c1:ff:54:5f:31:4f:75:8b:1e:29:5b:b0:b2:c9:8d:d3:e2:
         8b:fb:8d:6e:58:17:1c:8d:80:d0:cc:c4:a0:60:39:68:22:c2:
         ad:fc:3f:df:8b:1a:c9:ef:6f:7e:df:9a:98:2a:06:57:d9:e3:
         55:da:91:2a:dc:3b:b7:ee:c8:03:54:47:49:81:f7:8c:bd:5d:
         9a:f7:1c:66:ee:7d:76:09:7d:fa:40:74:b2:54:75:ac:0a:69:
         3a:4b:f7:48:31:be:cc:69:4a:42:45:ad:cc:7f:ba:01:e0:de:
         e3:53:22:73:a6:93:30:c0:85:66:f8:f3:41:8f:10:26:ad:b6:
         fd:27:17:4c:3e:e3:b8:6c:43:f3:45:c1:eb:a3:76:30:03:a4:
         cd:a2:66:f8:1a:e5:f3:b9:8b:e2:d5:76:16:fe:45:a9:51:09:
         aa:61:0e:47:5f:ea:d8:39:39:a8:95:55:db:24:bc:16:47:b2:
         5d:99:95:32:7c:3c:3b:17:fa:c5:b6:40:25:6d:b4:ec:dc:6f:
         32:96:2d:4c:38:6d:f1:51:ff:6d:c6:8a:83:11:94:c7:f1:ea:
         fe:f7:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----