Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/75oj5bBZvDA-miye1NlkVBccMpI.roa
File:                     75oj5bBZvDA-miye1NlkVBccMpI.roa (raw, json)
Hash identifier:          5LBiXMbyk3Ad7DNNI9KELPNIdmFLKFJZwa0i5yAnetM=
Subject key identifier:   EF:9A:23:E5:B0:59:BC:30:3E:9A:2C:9E:D4:D9:64:54:17:1C:32:92
Certificate issuer:       /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial:       018CC80190F0EF3C3826BD1F889DA8DD09C6
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/75oj5bBZvDA-miye1NlkVBccMpI.roa
Signing time:             Tue 02 Jan 2024 02:29:54 +0000
ROA not before:           Tue 02 Jan 2024 02:29:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     15879
IP address blocks:        45.80.232.0/22 maxlen: 24
                          2a0e:4980::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:90:f0:ef:3c:38:26:bd:1f:88:9d:a8:dd:09:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
        Validity
            Not Before: Jan  2 02:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ef9a23e5b059bc303e9a2c9ed4d96454171c3292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:44:e7:ed:dd:af:b2:03:b9:3c:16:03:b3:84:
                    00:36:36:ba:a6:01:b9:10:3b:d6:ed:c5:30:ee:ac:
                    42:00:a8:b3:0e:81:99:3e:d3:cb:c1:1f:b1:34:c4:
                    9e:89:d9:d4:db:9b:ba:dc:81:b0:2f:90:d5:ca:cd:
                    03:12:6e:d9:45:25:d2:d4:a4:8d:1b:2b:71:9f:2c:
                    31:f5:4b:37:0e:d0:30:26:8f:17:69:52:52:3c:58:
                    5e:07:40:60:cd:d9:c5:82:ee:16:52:f0:d5:26:b6:
                    aa:d8:10:ca:ce:18:ad:e3:54:10:21:cd:6c:f6:99:
                    78:91:ad:1e:74:32:bd:62:20:61:fa:f8:c5:29:31:
                    69:3b:5b:8c:c2:24:91:ad:d4:0f:21:2b:72:84:12:
                    c4:f7:82:55:a6:d0:6b:f5:93:e3:31:3a:4b:19:5b:
                    4b:28:e6:4b:e5:0c:41:d3:99:9f:11:0d:6b:d1:36:
                    d2:0e:99:2d:64:55:7d:6e:fa:82:a2:01:1e:59:c2:
                    bd:68:ff:6c:cf:37:29:9a:b1:2e:b2:b4:70:a6:a0:
                    7f:c3:5a:1c:39:01:9f:52:90:75:e6:51:1e:87:e7:
                    ea:3d:9c:0c:e5:b8:a1:f1:8c:1a:dc:5e:67:03:f7:
                    98:ee:3b:f3:e0:62:19:f3:e8:6d:06:52:7e:06:f5:
                    31:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9A:23:E5:B0:59:BC:30:3E:9A:2C:9E:D4:D9:64:54:17:1C:32:92
            X509v3 Authority Key Identifier:
                keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/75oj5bBZvDA-miye1NlkVBccMpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.232.0/22
                IPv6:
                  2a0e:4980::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:5a:3f:42:45:ba:6e:2a:ef:64:fa:f9:74:7f:f7:45:f3:c7:
         9d:b9:44:29:b5:8c:3a:4c:d4:fb:d2:ea:0b:bc:dd:38:bb:a9:
         4b:64:59:ae:43:b5:35:74:a4:4d:45:91:59:fb:95:c7:40:a6:
         b5:51:98:a7:83:c8:45:e2:16:0e:3a:f8:1d:69:68:01:e6:23:
         54:0f:5d:ff:7e:3c:9c:74:37:0f:e2:23:fb:ae:6b:8d:a1:48:
         89:c9:b0:bd:6e:c0:e4:d4:f9:f2:eb:27:ae:d5:9b:2d:4a:85:
         ad:30:0a:09:27:e4:53:20:3b:93:18:25:8b:fc:83:db:2c:bb:
         ab:72:8c:14:7d:70:89:5f:2c:06:9d:f6:1b:a5:f9:9f:12:97:
         9b:a7:26:eb:e2:b1:ca:9c:e3:63:55:a7:f8:9b:41:db:e3:bd:
         51:6a:45:65:72:67:1d:63:61:d6:eb:aa:de:f0:63:09:b5:43:
         2f:82:89:9f:a4:46:53:53:aa:8e:8e:53:bc:1e:4b:19:5c:a1:
         86:ff:bb:28:06:49:e7:41:e0:c0:78:43:76:eb:73:91:1b:71:
         39:10:13:f7:73:e7:ea:f8:6b:94:b4:19:2b:9a:41:dd:59:44:
         62:25:69:21:7c:e3:c5:8e:6a:8e:bf:55:dc:b6:c9:a3:28:9e:
         74:ae:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----