Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/msfDoyW_bFSjrdHuJq8L6CW3NvI.roa
File:                     msfDoyW_bFSjrdHuJq8L6CW3NvI.roa (raw, json)
Hash identifier:          FLjXQb4VMp2DuIrc3fJX/hw1X3nyiyqsVxdLz2+UeyM=
Subject key identifier:   9A:C7:C3:A3:25:BF:6C:54:A3:AD:D1:EE:26:AF:0B:E8:25:B7:36:F2
Certificate issuer:       /CN=e8d672fa60aee4c273a11507f49b584dc552c472
Certificate serial:       018E1811F8D0BBF7F6E35F1EE1CEABB927C6
Authority key identifier: E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/msfDoyW_bFSjrdHuJq8L6CW3NvI.roa
Signing time:             Thu 07 Mar 2024 08:40:14 +0000
ROA not before:           Thu 07 Mar 2024 08:40:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35236
IP address blocks:        2001:67c:e2c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:18:11:f8:d0:bb:f7:f6:e3:5f:1e:e1:ce:ab:b9:27:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d672fa60aee4c273a11507f49b584dc552c472
        Validity
            Not Before: Mar  7 08:40:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9ac7c3a325bf6c54a3add1ee26af0be825b736f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a1:d7:3e:79:9c:7d:40:91:e9:22:19:00:0a:
                    16:59:2b:83:db:74:e1:0a:e5:c3:39:18:d0:23:2d:
                    64:9a:54:0f:d4:63:75:46:6d:61:55:75:4c:da:c2:
                    94:dd:27:51:36:54:84:d8:73:2d:50:7f:b7:e3:09:
                    b2:12:07:f1:2f:7c:ab:5b:ac:14:8f:c9:0e:57:e5:
                    8b:ec:78:19:8d:16:bc:ca:29:68:66:a1:aa:ad:9e:
                    7a:73:56:ba:64:64:d0:a6:f5:16:7c:b8:59:53:a4:
                    7b:9f:c8:8d:5d:9b:65:39:f8:a9:62:08:89:d7:1a:
                    fb:b8:88:e6:0c:fd:89:e7:90:25:1c:48:69:7e:f5:
                    db:ae:eb:4c:34:71:c6:eb:82:0f:2e:07:33:a3:13:
                    3c:60:84:0b:a3:6e:a5:ad:3f:8e:ef:93:53:87:ba:
                    ca:83:3c:84:0a:f6:e5:f3:54:b2:ba:c4:f7:ca:4c:
                    f7:21:0c:86:51:dc:28:fc:89:b0:ff:4f:79:e6:7b:
                    7b:18:01:4d:10:d4:68:e6:55:27:68:85:df:51:84:
                    a1:75:51:58:2d:75:f2:a5:32:2b:54:01:00:c4:81:
                    c5:7a:0a:06:9b:32:89:b1:16:a9:c6:a2:fd:ea:9c:
                    1d:c0:91:b5:0d:2b:15:ce:de:76:45:00:aa:47:6a:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C7:C3:A3:25:BF:6C:54:A3:AD:D1:EE:26:AF:0B:E8:25:B7:36:F2
            X509v3 Authority Key Identifier:
                keyid:E8:D6:72:FA:60:AE:E4:C2:73:A1:15:07:F4:9B:58:4D:C5:52:C4:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NZy-mCu5MJzoRUH9JtYTcVSxHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/msfDoyW_bFSjrdHuJq8L6CW3NvI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c4160d-772b-4567-a54e-751ac6807b04/1/6NZy-mCu5MJzoRUH9JtYTcVSxHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:e2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:44:81:17:9e:e9:aa:32:2d:0c:17:17:bd:52:31:0b:ea:4e:
         9e:dd:3e:c0:f6:22:57:00:4e:a4:c7:db:ca:9c:48:b1:22:6c:
         8d:e3:7b:8d:28:70:18:63:f0:5e:db:f3:83:b6:f0:c0:6e:7e:
         dd:2c:79:9e:0b:84:56:40:4b:b6:a8:46:1a:5d:9f:d7:57:0a:
         ea:41:b7:a8:ac:94:22:bd:6d:7d:a4:02:90:d5:6c:0a:d2:6c:
         47:f1:05:1e:6e:15:e6:cc:77:8d:63:03:b4:85:6d:63:80:ed:
         9f:0c:da:a2:dc:63:81:59:fd:2d:92:54:97:78:3e:fa:a0:f9:
         03:cc:50:8a:c5:58:30:8f:57:cf:25:67:67:97:b5:35:cc:27:
         10:5a:0a:e8:73:6c:bc:20:12:70:25:fc:bb:35:71:e3:43:55:
         39:69:88:86:3c:01:db:a1:b1:d8:19:cc:de:c5:ee:a2:df:6e:
         72:e7:8e:0d:75:cd:95:39:16:14:21:6e:5f:57:e3:ac:2f:a9:
         da:35:bb:96:21:46:76:89:08:6d:93:bb:49:fd:9d:00:5b:89:
         ff:4a:da:de:47:89:0b:99:fc:c4:ee:0b:ba:74:db:4d:7c:e3:
         45:c9:d2:6c:15:75:0b:31:a0:9d:41:47:35:c9:24:8b:43:25:
         aa:2f:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----