Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/tDVrfQp6VV_tjzCZyrNzk56tNqc.roa
File:                     tDVrfQp6VV_tjzCZyrNzk56tNqc.roa (raw, json)
Hash identifier:          NuY4fISNY7xis3tAo6EGPiE58A/Q+ley/fRDn14pPOQ=
Subject key identifier:   B4:35:6B:7D:0A:7A:55:5F:ED:8F:30:99:CA:B3:73:93:9E:AD:36:A7
Certificate issuer:       /CN=119a4d4c503a88f364e4c40d701c44c4437a1a0b
Certificate serial:       018CC26D100AE61C70357F535F5728FA5AF9
Authority key identifier: 11:9A:4D:4C:50:3A:88:F3:64:E4:C4:0D:70:1C:44:C4:43:7A:1A:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EZpNTFA6iPNk5MQNcBxExEN6Ggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/tDVrfQp6VV_tjzCZyrNzk56tNqc.roa
Signing time:             Mon 01 Jan 2024 00:29:36 +0000
ROA not before:           Mon 01 Jan 2024 00:29:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209693
IP address blocks:        2001:67c:910::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/EZpNTFA6iPNk5MQNcBxExEN6Ggs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/EZpNTFA6iPNk5MQNcBxExEN6Ggs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EZpNTFA6iPNk5MQNcBxExEN6Ggs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:10:0a:e6:1c:70:35:7f:53:5f:57:28:fa:5a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119a4d4c503a88f364e4c40d701c44c4437a1a0b
        Validity
            Not Before: Jan  1 00:29:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b4356b7d0a7a555fed8f3099cab373939ead36a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:8a:ea:dd:27:16:11:be:b1:56:86:8e:72:
                    bf:8b:6a:b8:1e:ac:89:62:bb:c0:2b:04:73:94:65:
                    47:64:cb:98:f6:55:99:3c:85:2d:06:94:59:3f:c9:
                    23:ca:6c:71:f6:f7:65:59:b4:d0:71:87:89:9e:f4:
                    1d:0e:94:1f:79:7e:6a:72:dc:de:fd:6f:28:b1:7c:
                    b0:55:51:a1:d8:2e:e5:e5:95:9e:bf:c0:d5:a8:a8:
                    d3:5a:eb:36:6c:af:e3:5a:7b:93:4a:65:4b:60:82:
                    51:90:ea:9c:0b:e8:fb:a0:d0:d6:45:8d:92:b3:1b:
                    be:4f:12:2c:64:9b:76:a3:c6:4b:63:f8:e6:fa:0b:
                    20:5c:63:98:be:4f:23:63:e3:9d:13:e4:00:b3:2a:
                    4b:ed:86:f7:5b:16:33:0d:30:a1:33:e7:a7:37:3c:
                    bc:0d:7c:bd:75:3c:1b:1c:19:97:15:bc:60:ed:08:
                    07:59:df:3b:49:85:2f:6a:53:23:f9:45:c0:6b:4a:
                    86:cc:4d:af:f7:b2:54:a1:a1:30:43:69:2d:8c:9c:
                    d8:e0:df:75:4a:e2:f7:dd:bb:ea:5f:62:0b:c4:9b:
                    0e:bc:54:07:3a:3e:12:90:71:d2:d3:97:8e:af:08:
                    50:b5:12:3a:bc:51:db:6a:2f:49:ec:4e:04:92:f6:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:35:6B:7D:0A:7A:55:5F:ED:8F:30:99:CA:B3:73:93:9E:AD:36:A7
            X509v3 Authority Key Identifier:
                keyid:11:9A:4D:4C:50:3A:88:F3:64:E4:C4:0D:70:1C:44:C4:43:7A:1A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZpNTFA6iPNk5MQNcBxExEN6Ggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/tDVrfQp6VV_tjzCZyrNzk56tNqc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/72dc55-6ac5-47d7-8e09-91fa61f7326c/1/EZpNTFA6iPNk5MQNcBxExEN6Ggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:910::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:59:35:41:0a:5c:ea:38:56:71:6f:dd:4b:3f:b4:22:a3:c0:
         9e:85:c7:c3:af:e4:4a:12:d7:55:61:09:85:b9:4d:19:5c:c4:
         6b:75:fe:ed:14:04:19:aa:fb:48:35:43:a1:16:eb:c9:dd:30:
         03:69:fd:ec:2a:07:29:e8:81:e8:c6:3f:51:0f:da:79:e4:11:
         25:9e:d8:0c:13:6a:b6:bb:4b:95:a8:35:3e:0e:ac:2a:3d:86:
         9e:37:c8:18:61:69:ce:10:c7:d9:e4:98:ed:08:3e:3f:72:ad:
         3d:5e:db:ab:ef:38:c4:29:8c:5d:2d:4f:80:dc:f9:05:bb:bc:
         81:dc:c3:af:9c:dc:a6:d2:f8:3d:2e:48:37:b6:46:9d:a3:ec:
         86:a0:f5:4a:98:a0:cf:f8:5c:fd:b3:0b:77:20:90:6a:07:82:
         3c:84:ab:fc:11:22:dc:df:f5:bc:17:40:79:cc:21:a7:fa:0a:
         db:26:88:0c:61:e0:94:58:6a:63:b8:91:c9:af:ea:39:9d:1a:
         ed:b2:ff:8f:68:2c:a3:53:fa:9a:f2:cf:7a:95:38:25:ff:74:
         5d:30:76:d4:c2:75:5a:29:38:e2:c7:d1:6a:b2:34:d9:7a:6c:
         b1:68:5b:16:66:cc:03:78:a7:0e:2d:7e:ea:20:3b:a8:32:6a:
         81:ef:0b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----