Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/oZmOKN10fNxHj-slUzle1ben-Dw.roa
File:                     oZmOKN10fNxHj-slUzle1ben-Dw.roa (raw, json)
Hash identifier:          khvhljVV6MJpmzKDRgvBWGNXzi5PvrsiPeNI0GF1hUU=
Subject key identifier:   A1:99:8E:28:DD:74:7C:DC:47:8F:EB:25:53:39:5E:D5:B7:A7:F8:3C
Certificate issuer:       /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial:       018CC6B88A2A3D01EAF4C11E1E0FE242CDC2
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/oZmOKN10fNxHj-slUzle1ben-Dw.roa
Signing time:             Mon 01 Jan 2024 20:30:31 +0000
ROA not before:           Mon 01 Jan 2024 20:30:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206566
IP address blocks:        185.183.8.0/22 maxlen: 22
                          2a0a:ff80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:8a:2a:3d:01:ea:f4:c1:1e:1e:0f:e2:42:cd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
        Validity
            Not Before: Jan  1 20:30:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a1998e28dd747cdc478feb2553395ed5b7a7f83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c5:e9:8d:c0:83:2b:d3:04:c4:aa:6d:59:f0:
                    34:24:1e:69:ae:b2:22:f2:f5:d8:17:7a:7b:c5:53:
                    72:df:06:75:48:52:76:01:92:ad:83:05:58:db:39:
                    ae:e0:98:1c:f9:b3:a0:5e:1f:09:d5:d9:86:b2:e3:
                    c7:65:27:8b:e9:cc:5e:2c:f7:c1:59:bd:dc:09:d4:
                    b2:e2:e1:78:02:84:0d:24:ca:a7:ee:e9:27:f6:39:
                    51:54:a6:bb:7b:ee:58:c8:db:57:6b:36:70:8e:ca:
                    81:f3:68:ce:b2:ea:fa:71:d5:c1:b6:10:08:0d:54:
                    69:ff:c3:b4:74:8e:ba:07:c3:6f:ac:aa:bc:09:86:
                    b8:81:64:09:5b:4e:48:fc:7d:2b:22:23:7f:4d:f3:
                    5c:4f:d5:c2:d5:a3:81:3b:8d:66:64:48:69:fd:be:
                    15:63:59:13:e9:9a:ab:15:ba:07:fc:c6:a3:f3:11:
                    2d:6e:9f:f1:59:20:ec:fe:07:39:e9:ce:da:f0:03:
                    e0:12:98:0e:9e:52:dc:ab:ee:5e:9b:7b:3f:fb:1b:
                    72:47:18:9e:dc:a5:d4:53:a8:ed:2f:04:89:9d:a3:
                    a5:2a:cf:b7:0f:4b:c0:d5:8c:2c:29:18:fc:1f:41:
                    d8:e7:fe:db:d4:80:60:e8:a0:e2:e9:3b:3f:bc:2e:
                    f6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:99:8E:28:DD:74:7C:DC:47:8F:EB:25:53:39:5E:D5:B7:A7:F8:3C
            X509v3 Authority Key Identifier:
                keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/oZmOKN10fNxHj-slUzle1ben-Dw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.8.0/22
                IPv6:
                  2a0a:ff80::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:27:68:69:17:d9:76:6b:cf:e5:23:3e:8f:07:0b:1b:11:8a:
         91:bc:b9:e2:69:02:a9:6b:cd:a0:d3:67:7f:00:bd:2d:6e:b2:
         a3:08:f9:32:33:4f:81:9d:c3:aa:09:33:be:cc:6e:0b:7b:4c:
         c9:d9:b7:c0:08:b2:da:ac:37:19:2c:e8:24:04:08:33:54:dc:
         d9:49:09:d9:85:f0:b9:fe:4d:17:d8:4b:b6:40:f8:74:ff:58:
         94:45:77:0a:f8:89:41:17:1e:4a:04:a7:6e:b7:4a:50:4c:11:
         e4:bf:ec:20:be:86:98:37:ae:78:8e:a2:2c:3d:96:77:78:f7:
         40:8f:6f:9b:fe:6a:bc:83:4e:69:71:76:b8:15:0e:a2:f9:32:
         97:91:f8:e5:57:c3:10:ce:d1:7a:b3:30:45:ea:8c:d1:3a:98:
         6e:a4:31:39:44:6a:e3:f4:a6:43:66:7e:fc:2b:a3:0b:ef:fe:
         03:bd:fd:55:92:1b:c9:5b:83:d5:4b:3a:36:2b:8c:ae:9c:b0:
         aa:17:34:41:b0:62:2c:34:9f:1e:ef:60:43:5d:e7:a3:1e:05:
         6e:95:9d:45:42:e6:e0:05:e9:8e:92:e1:d7:06:83:fe:e0:d7:
         b3:ae:88:7a:93:f4:74:82:e1:73:3b:99:16:d7:0a:e9:c4:de:
         09:46:16:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----