Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/awnl9XiKuu9j3tKnu9qaIIdiCnI.roa
File:                     awnl9XiKuu9j3tKnu9qaIIdiCnI.roa (raw, json)
Hash identifier:          7jjlWXHPen+OV9Ao6qJem18ucqiXa3Jz2AcxNEsWTqA=
Subject key identifier:   6B:09:E5:F5:78:8A:BA:EF:63:DE:D2:A7:BB:DA:9A:20:87:62:0A:72
Certificate issuer:       /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial:       018CCA2AFF7BA81998EDD2674B9FD4FB0E77
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/awnl9XiKuu9j3tKnu9qaIIdiCnI.roa
Signing time:             Tue 02 Jan 2024 12:34:24 +0000
ROA not before:           Tue 02 Jan 2024 12:34:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59800
IP address blocks:        185.68.196.0/23 maxlen: 24
                          2a05:19c0::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:ff:7b:a8:19:98:ed:d2:67:4b:9f:d4:fb:0e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
        Validity
            Not Before: Jan  2 12:34:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6b09e5f5788abaef63ded2a7bbda9a2087620a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:d5:96:6c:ee:ac:87:9e:86:0e:b2:e0:a5:
                    83:24:35:e7:f0:c4:a7:69:d9:46:1f:b9:b0:3d:19:
                    6d:f0:a9:95:48:7c:e4:d9:77:1c:5a:e0:3b:ff:a2:
                    a0:10:4b:95:46:98:05:6d:b4:03:fb:b8:2d:79:46:
                    64:2c:77:e2:41:a1:e4:5d:3f:b7:3f:23:37:98:73:
                    a9:22:7f:ce:71:38:05:21:6d:de:c2:ed:16:e3:7c:
                    c8:79:32:2c:a8:a4:1f:34:05:95:55:f6:9a:b8:55:
                    85:80:a2:65:28:89:9c:e5:8f:19:80:a2:17:41:67:
                    59:82:d9:99:d2:00:d4:91:8f:6a:7b:21:3c:7f:57:
                    39:ee:e5:a3:b5:05:8a:61:48:7d:8b:5b:f7:b7:2d:
                    5d:84:75:c2:c0:0b:09:80:96:25:20:e8:bf:3a:10:
                    fb:c5:0a:27:bb:e3:1a:d0:17:47:40:97:d6:e9:74:
                    75:6b:16:ba:c2:7a:81:39:23:7f:1c:e5:92:b3:f5:
                    31:2c:3f:0a:d3:e9:67:3b:9c:49:0d:67:c0:8b:35:
                    5a:ef:b3:dc:cc:3e:ba:cb:b5:43:d3:19:16:5c:07:
                    22:a4:7c:7b:44:54:56:db:fa:35:46:67:57:7b:99:
                    11:62:a2:74:31:18:27:28:67:91:d4:36:62:1a:b7:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:09:E5:F5:78:8A:BA:EF:63:DE:D2:A7:BB:DA:9A:20:87:62:0A:72
            X509v3 Authority Key Identifier:
                keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/awnl9XiKuu9j3tKnu9qaIIdiCnI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.196.0/23
                IPv6:
                  2a05:19c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         02:ca:bd:a3:c7:e2:15:70:81:75:d9:ee:18:e5:ac:19:49:54:
         95:e3:d8:b6:88:54:67:5f:f3:c9:37:5c:83:c9:52:12:c9:48:
         1b:0e:ec:6d:39:2f:6f:b1:76:ac:ec:60:53:5e:4d:05:b1:41:
         5c:68:27:c4:9e:57:47:ed:67:0d:93:c8:c1:a4:4d:73:18:8c:
         8e:f5:ae:19:93:67:95:ab:9c:2c:38:06:95:ba:fe:d7:cb:70:
         5e:8c:48:31:f0:e2:b8:dc:be:e0:cf:96:0f:94:4f:a8:9d:fb:
         70:20:2b:a9:66:b5:7e:fe:1b:36:24:b4:b2:5c:ee:00:b7:8c:
         e7:39:dd:2d:74:48:f3:95:dc:0f:08:f9:6b:60:26:b8:2e:39:
         fa:b0:db:f8:29:56:9b:2e:0b:cb:b6:05:34:75:36:4b:26:63:
         6a:42:05:f1:7c:8c:8e:6e:4e:a6:32:00:2f:be:b7:17:5b:cc:
         db:16:cf:7b:0c:74:f6:e3:8b:3e:3d:25:2a:1d:a9:0b:ab:ec:
         60:e8:3e:d8:c3:9e:64:ac:6c:bb:98:7f:21:03:32:a5:8e:c4:
         ea:66:ae:5c:d2:4d:7d:00:8b:68:96:b4:fc:92:ca:9e:5f:55:
         f4:44:08:a0:60:6a:67:35:9e:1c:cc:2e:7b:f7:2a:f4:04:4b:
         ec:af:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----