Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/F6L7Wi2TfTfhhwoajplIIIFbFK0.roa
File:                     F6L7Wi2TfTfhhwoajplIIIFbFK0.roa (raw, json)
Hash identifier:          ndEzf7qXTqePjcCLWZoQ+PGHS4geOQBBCxQ1Xnt8MWc=
Subject key identifier:   17:A2:FB:5A:2D:93:7D:37:E1:87:0A:1A:8E:99:48:20:81:5B:14:AD
Certificate issuer:       /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial:       018CC2DAE4C6C92E3FC5042AC3734118F3E1
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/F6L7Wi2TfTfhhwoajplIIIFbFK0.roa
Signing time:             Mon 01 Jan 2024 02:29:34 +0000
ROA not before:           Mon 01 Jan 2024 02:29:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205739
IP address blocks:        185.208.88.0/22 maxlen: 24
                          2a0b:32c0::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:e4:c6:c9:2e:3f:c5:04:2a:c3:73:41:18:f3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
        Validity
            Not Before: Jan  1 02:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=17a2fb5a2d937d37e1870a1a8e994820815b14ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:35:51:7b:3c:80:09:8a:34:d3:66:6c:2f:
                    00:43:58:5b:71:6e:44:a4:b1:a9:56:65:ca:20:d7:
                    c1:ce:77:7b:1d:95:85:a1:13:29:7f:b6:7a:17:3f:
                    5c:b0:8e:59:47:dd:53:79:53:6a:82:60:34:8b:32:
                    35:4a:0e:50:b2:41:62:4d:5e:37:d4:f1:12:45:ec:
                    6d:a5:dc:be:72:ff:08:a5:eb:7e:db:52:38:db:a5:
                    a4:27:ff:56:11:c9:53:2e:79:89:76:fe:97:5e:37:
                    a8:69:55:d8:45:29:2e:cd:43:de:7b:d9:bf:88:18:
                    50:47:24:7a:f1:59:51:4e:06:11:6b:a7:81:55:0e:
                    3f:ca:12:97:f6:6c:0a:64:5f:c1:60:df:8c:48:b5:
                    7c:b7:4a:3f:e8:75:43:82:a5:5f:ac:13:cd:14:bf:
                    4c:87:ca:6c:ff:65:de:31:2b:70:2b:50:26:3d:09:
                    b8:93:60:b8:d3:bb:0b:4b:af:e1:5f:8f:c8:aa:f7:
                    9a:de:09:4a:28:ba:e8:25:82:1f:c2:5a:0e:e3:0c:
                    b3:88:a6:c2:f4:f6:ab:c8:da:99:71:47:02:9a:1a:
                    d1:97:5d:59:24:50:b5:cf:70:94:73:b4:02:94:b5:
                    16:d3:05:c8:ba:63:a7:a3:d7:38:ab:61:28:9b:cc:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A2:FB:5A:2D:93:7D:37:E1:87:0A:1A:8E:99:48:20:81:5B:14:AD
            X509v3 Authority Key Identifier:
                keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/F6L7Wi2TfTfhhwoajplIIIFbFK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.88.0/22
                IPv6:
                  2a0b:32c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         72:fb:cf:9e:82:06:a3:df:0f:a6:bd:ef:19:46:5d:91:45:9f:
         0d:6d:e7:f2:5e:26:61:41:ed:2b:e7:e0:14:d8:ae:22:81:ef:
         33:e0:38:a4:dd:03:03:0c:3a:c2:d6:84:32:03:ab:1f:c0:c0:
         2e:0d:1d:f8:3b:22:e7:87:e1:54:93:80:f9:8a:77:0e:4e:1f:
         58:37:92:2c:1c:f8:06:d5:1f:9b:71:40:57:31:56:59:4b:9f:
         d9:6b:e8:01:d9:f1:64:02:ca:aa:7a:c4:82:ee:c2:a3:d6:ec:
         00:88:ce:49:db:59:b8:6e:95:2c:56:b7:db:a0:96:19:53:4a:
         6d:d3:f6:04:51:6f:33:1b:02:76:21:49:ed:09:ba:91:76:78:
         ae:17:3b:79:30:86:8b:8f:00:4f:3e:84:86:e3:ca:33:de:da:
         4b:8b:eb:c9:70:9c:67:cb:8f:5f:7f:16:8b:fe:4c:1f:41:c7:
         c0:5b:66:de:b8:05:76:87:c5:d5:29:bb:43:ac:de:b2:8a:26:
         83:09:29:f6:0d:10:5e:d7:b8:4b:1e:c8:a9:cf:02:b8:af:c8:
         46:dd:33:1d:c4:d6:64:cc:b9:9f:e9:fc:74:a9:97:f6:7f:7c:
         96:fa:22:ca:b8:00:cf:c6:1e:f0:a1:b2:d4:71:e6:9a:cb:fb:
         bb:ea:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----