Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/p6MJGfujXS5z9L7L8cDr-VjDqio.roa
File:                     p6MJGfujXS5z9L7L8cDr-VjDqio.roa (raw, json)
Hash identifier:          LmPm7F0AYYR27iw9crdLiCOn1R/A8vlW5sMqPaziTnI=
Subject key identifier:   A7:A3:09:19:FB:A3:5D:2E:73:F4:BE:CB:F1:C0:EB:F9:58:C3:AA:2A
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       018F68BD709801D9C3DD9A1826ED670375B9
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/p6MJGfujXS5z9L7L8cDr-VjDqio.roa
Signing time:             Sat 11 May 2024 17:39:56 +0000
ROA not before:           Sat 11 May 2024 17:39:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198031
IP address blocks:        91.146.120.0/21 maxlen: 21
                          2a03:a780::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:68:bd:70:98:01:d9:c3:dd:9a:18:26:ed:67:03:75:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: May 11 17:39:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a7a30919fba35d2e73f4becbf1c0ebf958c3aa2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:cb:08:38:47:c7:8a:80:7e:6c:11:ab:55:
                    06:81:0c:ab:91:e7:ba:f5:1c:75:57:f2:53:7a:a2:
                    17:18:7f:8e:4d:53:b1:43:e5:8d:fd:23:32:54:b6:
                    84:2c:8a:20:d4:67:08:4a:7f:af:f5:c2:3f:a4:c3:
                    5b:3d:6a:3b:cd:14:78:aa:19:72:7e:d9:d1:b1:aa:
                    64:6f:dd:9a:33:28:59:45:b9:e1:23:96:f0:54:8e:
                    7a:43:2f:9d:79:e9:0a:a7:0c:e9:cf:b9:b1:60:c5:
                    12:ce:45:58:b2:55:aa:d1:31:00:f1:30:f5:dc:fe:
                    13:cf:de:3c:e5:fd:a7:ea:33:4f:77:1c:af:c1:9b:
                    7c:f9:b9:9b:64:c1:ec:27:96:ae:61:55:b4:90:a3:
                    1a:44:6b:28:c7:2a:c6:d5:63:16:5b:53:c9:7a:9a:
                    06:47:fe:ee:0c:eb:ff:71:d8:e7:be:fe:1b:41:9e:
                    c7:86:c9:8e:f2:e3:bf:19:60:37:f0:a5:cf:2a:06:
                    c7:57:aa:3f:f1:bb:2d:3c:bb:7b:40:2d:86:2c:3a:
                    94:5c:38:e9:36:d7:66:12:51:e6:d8:62:27:50:a7:
                    d9:6a:05:38:0b:56:d8:b3:41:aa:e5:5c:01:52:fe:
                    02:08:0a:6d:49:33:6f:71:6d:2c:c8:6e:7b:4f:f7:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A3:09:19:FB:A3:5D:2E:73:F4:BE:CB:F1:C0:EB:F9:58:C3:AA:2A
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/p6MJGfujXS5z9L7L8cDr-VjDqio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.146.120.0/21
                IPv6:
                  2a03:a780::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:23:4d:38:cd:08:f7:85:c9:cb:89:99:11:26:17:05:ee:
         f6:19:1b:9d:cd:0b:cd:e8:08:d2:28:a2:f4:87:4c:3d:27:c7:
         2b:5a:0a:6c:4a:13:59:f3:18:2b:6e:c5:02:c8:e8:72:87:ac:
         b8:81:43:02:0b:fc:6d:16:be:b4:21:b8:79:88:8a:6b:38:84:
         8f:da:46:eb:31:e2:28:3f:12:d2:3a:fe:45:19:6d:11:58:b3:
         5f:d4:89:ae:02:39:59:dc:18:a9:82:d5:97:9b:9e:ea:2b:6a:
         c0:45:63:a3:6b:8b:c0:22:dc:3b:d2:39:c6:28:10:b4:ce:4b:
         ed:a7:d1:25:64:52:29:ff:cd:d8:9d:ac:b1:25:1a:08:bb:cb:
         50:10:7a:ca:f5:c9:63:9f:dd:5e:28:30:a1:e1:59:21:5e:f4:
         13:fe:8d:c1:67:16:ec:59:a4:f0:c7:12:d1:ae:a7:6d:eb:e5:
         22:93:34:92:9d:3e:89:1e:5d:97:13:ae:6f:90:45:60:35:f6:
         09:ca:af:b5:81:07:4f:60:79:0e:5a:aa:cc:28:18:07:79:76:
         f2:d8:35:80:62:36:76:8b:56:2c:52:2c:9a:a3:19:db:f1:49:
         c2:50:c2:66:eb:ff:2e:d1:52:9d:cc:7c:65:53:d9:0d:93:c4:
         fe:24:d7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----