Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/0mrrwDjiwNALsZW_JZ0iUydHkHM.roa
File:                     0mrrwDjiwNALsZW_JZ0iUydHkHM.roa (raw, json)
Hash identifier:          CY0sGiuBgZmvv2z21hzC6XWqHyED6i6s5RwNleOQquk=
Subject key identifier:   D2:6A:EB:C0:38:E2:C0:D0:0B:B1:95:BF:25:9D:22:53:27:47:90:73
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       018CC492CCDC2647E14922E0CC7A8D8E3C57
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/0mrrwDjiwNALsZW_JZ0iUydHkHM.roa
Signing time:             Mon 01 Jan 2024 10:30:04 +0000
ROA not before:           Mon 01 Jan 2024 10:30:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200393
IP address blocks:        185.186.223.0/24 maxlen: 24
                          2a11:1e40:5aa5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:cc:dc:26:47:e1:49:22:e0:cc:7a:8d:8e:3c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Jan  1 10:30:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d26aebc038e2c0d00bb195bf259d225327479073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:46:33:fa:55:63:fe:af:5b:24:eb:a0:41:14:
                    8b:36:bf:43:81:95:af:2d:9f:57:67:9c:42:5d:4a:
                    f9:a3:43:e3:5f:92:e8:4a:a2:d1:d7:30:32:c3:c5:
                    18:e0:9d:b7:68:58:a2:f2:6b:e4:e4:f3:53:2e:6d:
                    87:8f:b5:a7:be:3d:a2:83:3c:cc:af:bc:f1:d1:7f:
                    28:8e:b0:0d:0a:dd:02:8d:0b:4b:89:fe:b4:6e:72:
                    02:c9:d4:a1:9f:36:ce:20:18:35:4f:07:7f:e1:a3:
                    57:2f:63:25:5b:b0:c8:42:f9:cf:17:01:e1:21:38:
                    74:9b:d2:b9:19:14:4e:50:67:01:97:0c:e8:b9:4b:
                    5a:c1:5a:25:21:b8:f2:07:88:e5:51:94:72:ba:48:
                    bc:b6:f9:d4:4c:13:41:94:80:a0:8e:f8:f7:f9:5a:
                    d5:9c:04:59:04:88:bf:21:b7:1e:b0:0c:da:f5:60:
                    72:6b:bc:92:80:de:e6:3c:91:ac:cf:4f:44:e6:00:
                    b0:54:ec:6b:2f:2b:7f:b9:4d:54:fe:45:cf:e4:bf:
                    e1:b2:4a:4c:ff:0b:46:97:ab:d5:92:af:57:58:80:
                    3b:39:64:a3:da:f1:6a:ba:a7:b3:7e:2d:32:1f:ec:
                    16:ec:a5:36:cb:f3:ad:73:e2:b9:12:78:4f:22:31:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6A:EB:C0:38:E2:C0:D0:0B:B1:95:BF:25:9D:22:53:27:47:90:73
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/0mrrwDjiwNALsZW_JZ0iUydHkHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.223.0/24
                IPv6:
                  2a11:1e40:5aa5::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:d1:8f:c9:da:40:9e:8b:52:8f:6e:99:a2:6a:01:cf:04:
         d9:9b:5c:88:cb:63:73:a3:c9:3c:30:69:31:b7:07:81:38:58:
         a2:a5:35:da:6d:64:79:e5:46:d6:1e:ec:4e:5b:64:63:ee:89:
         b3:b6:71:44:83:9d:2b:1b:95:40:29:aa:46:29:2e:6e:1c:59:
         49:98:8f:1d:07:58:bf:8b:11:1e:32:5b:1b:26:3f:04:32:cb:
         60:fe:86:0f:d1:12:84:11:ec:3f:f7:18:78:ea:81:fc:bc:19:
         d6:ae:16:9f:f9:0f:60:9f:35:c5:79:d7:a5:19:02:71:50:85:
         2e:e2:e2:b4:17:ba:38:e1:a1:c9:b9:01:66:60:40:6f:3c:40:
         f0:1f:73:88:35:be:68:bd:ba:15:3e:0b:e9:67:02:cb:b8:0f:
         06:19:e8:a6:ab:63:15:62:fa:3e:58:43:23:f3:dd:37:f0:96:
         ac:c2:3f:6e:6e:4d:de:3e:bf:f4:f7:15:f4:49:49:64:17:cc:
         f8:d2:c5:44:f9:07:9b:7d:0e:6e:79:57:fd:ee:6f:34:43:66:
         e8:98:f2:b5:35:d6:64:8f:6a:25:71:5b:2f:b3:08:8b:d9:57:
         82:ed:f8:b8:18:ef:66:7b:f2:01:8d:3c:37:10:ed:3a:ff:22:
         ef:64:60:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----