Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kSlzpJ51NKEgyAxQ81nNruH7ius.roa
File:                     kSlzpJ51NKEgyAxQ81nNruH7ius.roa (raw, json)
Hash identifier:          BUTKjjqSu7s+tPPjYo63lTIyjVNrQMGCD1zfIWV5HaM=
Subject key identifier:   91:29:73:A4:9E:75:34:A1:20:C8:0C:50:F3:59:CD:AE:E1:FB:8A:EB
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       018D6BBE40CA00A30652E0A8A486C96A10DB
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kSlzpJ51NKEgyAxQ81nNruH7ius.roa
Signing time:             Fri 02 Feb 2024 21:34:07 +0000
ROA not before:           Fri 02 Feb 2024 21:34:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     400696
IP address blocks:        45.152.148.0/24 maxlen: 24
                          2a11:f880::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:6b:be:40:ca:00:a3:06:52:e0:a8:a4:86:c9:6a:10:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Feb  2 21:34:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=912973a49e7534a120c80c50f359cdaee1fb8aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:14:73:ec:75:72:df:2b:13:29:41:a8:4b:
                    3c:d3:12:c3:2b:0a:47:eb:55:30:7b:c2:ee:e8:5e:
                    63:2b:36:fb:5a:be:d5:4d:2d:9a:d4:b9:93:05:41:
                    34:d3:5f:88:69:f7:a0:e4:e7:d2:c6:8c:5a:75:6f:
                    d6:00:c2:d3:6c:9f:40:71:e1:de:c2:1a:49:b1:04:
                    62:51:b5:9e:91:ff:6f:d7:81:15:0f:27:a4:10:88:
                    a3:95:7c:2d:cd:4c:b3:0c:74:a8:f0:e2:c1:85:bf:
                    ff:04:ab:e0:81:d8:bc:9d:38:32:b5:79:ae:f5:e4:
                    bb:e7:bf:0c:41:58:06:cc:26:bb:95:61:9d:d4:ce:
                    4c:ad:08:b2:fa:36:d0:54:2a:6a:ae:1f:11:a5:ca:
                    c1:04:66:1b:0a:b1:c1:d3:37:fc:4a:89:8e:44:bb:
                    6c:c8:fe:c4:f4:18:c7:bc:d4:37:da:99:5a:39:fc:
                    c0:da:b1:53:ed:22:b9:6b:6c:0b:e5:11:fc:75:28:
                    ad:41:0f:4d:ad:60:53:64:57:75:f5:11:e4:9c:a9:
                    1f:34:91:11:dd:1a:5f:03:b0:ec:38:42:bd:f2:8a:
                    92:16:00:b8:47:b2:4d:77:e1:b4:ec:95:c8:3b:cf:
                    f0:39:e0:57:8d:9b:40:e4:59:05:64:4a:1a:fe:5a:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:73:A4:9E:75:34:A1:20:C8:0C:50:F3:59:CD:AE:E1:FB:8A:EB
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/kSlzpJ51NKEgyAxQ81nNruH7ius.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.148.0/24
                IPv6:
                  2a11:f880::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:5f:fb:d6:8e:f0:b8:eb:57:b6:c3:e7:e2:51:ac:02:61:a2:
         59:21:f1:43:6d:56:a8:2d:71:35:69:83:3c:1d:01:21:f2:8a:
         97:40:57:23:2e:48:56:4f:d1:a4:59:07:a3:77:00:4b:18:a1:
         8f:f9:c6:67:4b:8f:ba:35:7f:27:a9:01:1b:16:7f:ea:14:5e:
         1b:21:33:3d:86:58:cc:e9:a1:26:a5:ad:45:0c:ba:cb:5f:f1:
         69:9c:c4:f1:87:72:48:fb:fe:d1:54:0c:bc:76:8b:f5:ec:ee:
         57:dc:25:d2:84:cb:85:cb:94:29:73:03:9e:ab:d3:12:0d:b2:
         69:a0:6b:96:bc:85:f2:45:a3:e5:38:09:2f:46:3c:b8:f2:f6:
         89:00:66:70:55:c8:89:07:d9:20:ae:74:68:2c:c0:45:f6:40:
         85:83:df:6a:1f:86:1d:d2:71:a4:a9:6e:d0:c1:a7:95:65:14:
         85:80:a3:64:b6:26:05:ad:b4:22:30:6b:ad:1c:4b:fb:f8:76:
         1e:a3:e7:55:a5:a7:69:88:c3:68:87:d4:e5:5d:b9:31:59:1b:
         ea:d3:1b:c4:ed:ca:89:f3:a2:cf:ec:03:6e:a0:aa:24:6e:93:
         59:45:81:59:fc:71:ea:e6:55:d6:cb:a2:dc:7d:11:99:b8:e5:
         95:69:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----