Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/YtqpsCvL1pVNcapbZ_2c2qMRzg4.roa
File:                     YtqpsCvL1pVNcapbZ_2c2qMRzg4.roa (raw, json)
Hash identifier:          mbbyfRcEmZrXue4fM9CSRdeyAKXk4D3TWtFnzFiuexE=
Subject key identifier:   62:DA:A9:B0:2B:CB:D6:95:4D:71:AA:5B:67:FD:9C:DA:A3:11:CE:0E
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       018CC56E5E4C82D3D3F1883B4C049B828965
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/YtqpsCvL1pVNcapbZ_2c2qMRzg4.roa
Signing time:             Mon 01 Jan 2024 14:29:53 +0000
ROA not before:           Mon 01 Jan 2024 14:29:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216108
IP address blocks:        91.241.15.0/24 maxlen: 24
                          2a01:9c00:c001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:5e:4c:82:d3:d3:f1:88:3b:4c:04:9b:82:89:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Jan  1 14:29:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=62daa9b02bcbd6954d71aa5b67fd9cdaa311ce0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:eb:0b:a2:b3:70:8f:15:d6:f8:14:45:82:
                    a9:15:4f:04:ed:6e:62:0a:dd:8c:1b:bd:b7:57:88:
                    71:34:06:37:5a:7d:fe:5a:67:e4:46:73:2d:64:cf:
                    4f:ef:29:3a:0f:8a:ae:ec:44:b7:73:59:ee:a6:d1:
                    d3:ca:55:83:69:8d:5d:26:c0:26:04:fc:94:11:cc:
                    41:de:ab:a6:af:b5:5c:f4:e5:2e:0b:63:00:1a:11:
                    17:63:28:66:ba:ac:cb:26:d0:6f:99:08:ef:bf:4f:
                    8f:f7:bf:c8:ff:dd:22:ee:a7:7c:6a:ba:d0:59:62:
                    a1:94:e9:d2:e6:44:8b:74:dd:3b:fe:d5:31:8d:ab:
                    7e:02:4b:f0:cd:ec:57:eb:89:70:7a:74:a4:14:2c:
                    6f:04:35:18:26:02:b7:85:42:4b:59:f3:84:f7:be:
                    83:de:9d:34:45:37:36:81:88:ab:37:f0:0f:45:fb:
                    1a:8a:10:00:d5:12:03:33:79:32:c4:12:43:32:64:
                    38:9e:ac:cb:b8:28:ee:fb:6b:1f:48:65:4c:90:d9:
                    65:29:09:30:57:ee:a4:65:79:b2:85:60:5c:40:ba:
                    55:0a:a6:79:d1:23:69:5c:ea:2d:a5:04:8e:ce:87:
                    1a:42:1e:26:06:66:68:c4:37:57:c0:6a:e4:33:8b:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DA:A9:B0:2B:CB:D6:95:4D:71:AA:5B:67:FD:9C:DA:A3:11:CE:0E
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/YtqpsCvL1pVNcapbZ_2c2qMRzg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.241.15.0/24
                IPv6:
                  2a01:9c00:c001::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:e4:c9:59:80:0e:e6:e0:77:3d:50:8d:4b:c1:ea:49:3a:f6:
         93:ba:64:d2:22:99:27:77:88:ec:86:df:53:dd:7e:6e:a3:b5:
         1d:b0:70:bc:65:a1:26:0e:fa:c9:3d:37:d0:93:a7:94:b0:4f:
         b0:db:c8:c7:ec:60:75:c6:71:c1:85:c0:22:49:6a:40:32:77:
         87:c5:3e:dd:f5:bd:37:9f:10:59:c1:f7:ca:8d:83:4d:a7:4e:
         7c:cf:64:4c:bb:e3:61:c3:9f:64:e0:87:65:a1:b9:d2:8a:9b:
         bd:94:1c:42:05:7d:3a:c8:f7:aa:5d:a0:e1:3e:27:5f:98:d2:
         bf:22:35:74:82:a7:da:4a:38:93:04:df:13:7d:eb:83:a9:28:
         16:46:21:1b:b5:92:2d:cd:23:8e:e7:3c:be:fb:a7:8a:c4:34:
         5d:03:3a:60:fb:e7:73:96:6e:b9:b3:11:d1:05:97:8c:4e:67:
         7d:4d:e1:40:63:8d:58:a8:1b:01:32:f6:62:8b:66:f5:3f:6d:
         94:5a:b2:06:dd:11:26:f4:65:5a:fe:83:71:0f:98:5d:35:0b:
         6a:d2:51:ca:16:93:87:db:54:4d:34:92:73:25:e8:fd:9f:ec:
         5f:3c:44:85:f2:18:68:2b:86:04:ad:3a:d4:ea:16:48:d7:4b:
         80:4a:cc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----