Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/cd5VJMtoq6FnrI2-ahBgc7dpgo4.roa
File:                     cd5VJMtoq6FnrI2-ahBgc7dpgo4.roa (raw, json)
Hash identifier:          SxKn16Xi8KP+QQCqPTNxFWgBx56Jc9IC8rDflnyMECw=
Subject key identifier:   71:DE:55:24:CB:68:AB:A1:67:AC:8D:BE:6A:10:60:73:B7:69:82:8E
Certificate issuer:       /CN=b2c5f74df4520d341da348a700a03b97caf07735
Certificate serial:       018CC86F31744F82856BAC87AD6DEEB3DD2B
Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/cd5VJMtoq6FnrI2-ahBgc7dpgo4.roa
Signing time:             Tue 02 Jan 2024 04:29:39 +0000
ROA not before:           Tue 02 Jan 2024 04:29:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     28727
IP address blocks:        2001:67c:628::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:31:74:4f:82:85:6b:ac:87:ad:6d:ee:b3:dd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735
        Validity
            Not Before: Jan  2 04:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=71de5524cb68aba167ac8dbe6a106073b769828e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:27:87:81:64:97:4c:6b:3d:7c:e7:2b:34:
                    24:4c:30:54:a0:f3:e2:2c:fb:da:3d:af:64:bf:d4:
                    3a:d8:3c:39:47:f7:69:d2:53:23:81:3b:1c:cf:8d:
                    53:e9:0a:40:e8:61:d6:ce:d9:ad:f4:39:7c:31:53:
                    b1:56:09:14:69:3e:96:7f:b4:94:eb:a9:88:d2:7b:
                    d9:10:e8:e5:7a:d0:cf:2f:10:55:e2:91:6c:67:8b:
                    7c:f7:ba:10:86:19:0c:8b:85:c2:13:40:67:4b:a6:
                    be:c7:ad:78:45:96:90:8e:5a:d3:e8:79:17:92:75:
                    70:6a:2d:7c:41:31:28:d2:68:0f:9e:f2:5b:00:65:
                    f7:5e:9c:d4:13:10:79:24:23:68:a0:26:df:f4:5a:
                    02:24:32:27:2b:9a:0a:0f:81:10:e6:1e:c6:dc:68:
                    14:61:d7:21:48:2e:d5:f6:83:15:5e:7f:5b:c0:fd:
                    10:4d:8d:50:be:37:6f:e1:2b:66:d2:76:ba:9d:ed:
                    27:f7:7a:77:40:c1:71:9c:0d:5e:7f:a7:ee:37:8d:
                    39:f0:13:ea:eb:b1:88:d1:df:ca:e8:ca:55:62:23:
                    59:ee:0c:58:d7:0f:c9:f6:1a:09:44:42:89:37:5e:
                    28:c6:8a:af:fc:5d:b6:6c:d8:f9:01:71:a4:3a:ee:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DE:55:24:CB:68:AB:A1:67:AC:8D:BE:6A:10:60:73:B7:69:82:8E
            X509v3 Authority Key Identifier:
                keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/cd5VJMtoq6FnrI2-ahBgc7dpgo4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:628::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:33:87:3a:32:85:c5:21:75:8e:c2:73:b0:a2:ab:13:4a:af:
         1c:48:94:71:18:29:4e:e0:27:bb:9b:f1:1f:b5:9a:69:fb:56:
         ea:ad:57:2e:80:db:1a:56:11:b6:dc:26:62:f1:ac:ce:d1:d6:
         1f:e6:a1:43:89:57:92:a3:77:83:a8:a8:4e:28:be:5c:e5:d2:
         06:ce:77:96:59:4d:a7:42:ec:e4:57:1f:00:2c:5e:e4:af:df:
         9d:3e:97:f9:13:e8:fd:b5:94:63:be:b7:55:17:73:5b:da:41:
         8a:81:85:93:0c:5a:0d:10:0d:14:0c:e8:ba:f1:ff:33:19:2e:
         cd:11:3f:97:ce:05:7d:0a:97:77:a4:3d:7a:a9:84:05:ea:df:
         8d:67:5b:8b:1f:c8:e6:20:c5:44:a4:70:61:a0:8d:49:99:5f:
         98:32:fe:37:57:b2:b3:7b:b1:52:f6:82:f6:0d:bb:04:f3:57:
         f6:68:0e:a9:df:3e:a4:35:f4:54:c6:46:52:38:d0:d7:70:b0:
         57:e8:22:a3:3f:52:ec:93:2d:70:45:77:44:75:dd:36:bc:5f:
         27:62:8d:5e:e7:0f:da:4b:e2:43:26:5e:85:f8:90:22:6a:c8:
         87:9b:da:28:a2:36:30:66:ba:eb:cc:c4:ee:7b:b0:05:1b:42:
         a6:37:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----