Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/K0jjPNJHQlih5ZP4rzEHuCyso4w.roa
File:                     K0jjPNJHQlih5ZP4rzEHuCyso4w.roa (raw, json)
Hash identifier:          Lwsw4OWi34GvPuK9MY4pRcrccnvm2+sMHLq1GYiD1VU=
Subject key identifier:   2B:48:E3:3C:D2:47:42:58:A1:E5:93:F8:AF:31:07:B8:2C:AC:A3:8C
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       018CC3B6B1C798679CECADD4E715A114DED7
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/K0jjPNJHQlih5ZP4rzEHuCyso4w.roa
Signing time:             Mon 01 Jan 2024 06:29:39 +0000
ROA not before:           Mon 01 Jan 2024 06:29:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35332
IP address blocks:        2001:678:880::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Jun 2024 07:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:b1:c7:98:67:9c:ec:ad:d4:e7:15:a1:14:de:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Jan  1 06:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2b48e33cd2474258a1e593f8af3107b82caca38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:f5:d1:a9:e3:93:b8:0f:e7:58:26:49:eb:
                    33:cf:0b:48:31:2e:bb:39:ac:8b:48:12:ca:08:a8:
                    f2:37:27:c2:4e:97:f9:eb:9a:b7:9d:bc:23:bc:c3:
                    4b:da:67:88:e5:aa:dc:ce:14:e7:05:77:9b:14:1a:
                    f1:35:39:ff:da:ff:94:74:47:84:34:55:76:48:d9:
                    72:81:10:c8:97:e8:cf:52:15:21:e8:a7:ab:ee:8e:
                    27:a7:3c:d8:db:b8:04:f1:af:0c:48:26:b5:4a:84:
                    c1:d9:2d:13:82:1d:75:f6:ef:19:4e:5f:bc:7f:d1:
                    5b:78:5f:69:47:01:5b:ea:61:15:d0:36:2b:9f:6b:
                    91:03:73:70:6f:34:9d:c1:1f:68:0a:69:fe:9a:80:
                    1c:c8:c6:0a:f6:5a:06:62:3d:86:5d:4d:68:f6:b5:
                    b6:b2:08:20:e6:e2:45:c4:96:96:b0:ed:c6:44:22:
                    3f:09:eb:d2:f7:dd:6d:c9:f4:ad:69:88:36:47:f1:
                    d6:5d:a4:e8:38:37:e2:a0:d9:9e:fd:e7:51:0d:67:
                    4c:97:73:ab:0d:7d:70:b9:97:90:23:7b:ea:e2:de:
                    fd:b6:b7:aa:6c:88:95:48:18:10:31:e7:02:43:21:
                    cd:c7:4c:9a:ae:96:57:6d:58:8a:4c:5f:89:26:19:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:E3:3C:D2:47:42:58:A1:E5:93:F8:AF:31:07:B8:2C:AC:A3:8C
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/K0jjPNJHQlih5ZP4rzEHuCyso4w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:880::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:99:e6:a7:b1:26:09:f9:9a:fb:0f:9f:45:bc:dc:6a:02:df:
         64:9b:b9:7e:e7:94:d7:b7:6f:88:11:dd:04:3c:d7:e9:5d:5c:
         dd:38:f5:b7:fa:bf:fc:27:19:f9:1e:ea:6a:9c:fb:2c:35:93:
         4d:2e:a4:06:95:0b:97:72:6f:bf:f0:94:8d:e4:43:32:48:60:
         7d:23:9f:73:3c:ee:31:46:12:a4:29:60:67:b0:68:46:86:54:
         f7:a4:a1:bf:20:31:8f:a3:ea:8a:b0:d7:c0:49:bc:60:1b:c0:
         82:99:24:5e:24:71:c9:41:52:3a:f5:b3:03:c5:cc:08:f3:4b:
         e3:74:ef:87:47:a8:3b:83:21:fd:c7:26:b9:16:49:50:16:55:
         f2:f7:20:75:22:75:c0:de:00:17:a0:92:54:2a:40:f8:e3:a8:
         e7:b7:e9:39:c6:83:ef:7a:3a:69:81:11:f9:2a:19:d7:70:15:
         2c:cc:2e:03:21:55:69:c5:6b:8d:27:29:3f:15:52:f7:5c:09:
         2a:fc:38:57:8e:3c:4e:3e:24:69:c4:50:8c:8f:79:6f:6e:29:
         a9:0e:85:bf:f2:b7:9c:6b:95:36:1a:d9:95:ea:11:f0:ba:48:
         ca:ec:5e:eb:85:ed:8b:53:fe:b4:57:5b:49:0f:7c:ba:5f:81:
         cf:fa:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----