Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/XIsdFuE7VYcHa1tXDemyVBXQ8Do.roa
File:                     XIsdFuE7VYcHa1tXDemyVBXQ8Do.roa (raw, json)
Hash identifier:          GnqMgYwK97hxarKMd876c81WiKelw+Ih1HLEfAYdCrs=
Subject key identifier:   5C:8B:1D:16:E1:3B:55:87:07:6B:5B:57:0D:E9:B2:54:15:D0:F0:3A
Certificate issuer:       /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
Certificate serial:       018CCA2A1E9D09FA360CEF5C14651B755A73
Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/XIsdFuE7VYcHa1tXDemyVBXQ8Do.roa
Signing time:             Tue 02 Jan 2024 12:33:27 +0000
ROA not before:           Tue 02 Jan 2024 12:33:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9498
IP address blocks:        46.186.228.94/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:1e:9d:09:fa:36:0c:ef:5c:14:65:1b:75:5a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037
        Validity
            Not Before: Jan  2 12:33:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5c8b1d16e13b5587076b5b570de9b25415d0f03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:c5:1e:c9:c5:35:c5:ea:c1:0d:4e:8c:73:
                    b8:07:f8:14:45:72:64:cd:72:81:05:77:7f:54:2a:
                    3e:8c:41:48:4b:77:ac:cb:e4:46:7b:f2:9a:b3:10:
                    c1:07:a8:a5:04:87:95:ff:b7:64:ec:9d:f1:93:ca:
                    dc:55:69:09:2d:10:a4:ee:2d:4e:d4:6d:b0:9a:c5:
                    c7:3e:54:b2:47:f4:8b:a6:06:35:ed:90:d6:e4:73:
                    18:db:19:ca:d7:82:a3:b9:c3:30:05:4c:18:95:cd:
                    59:01:b1:ec:65:da:68:2b:ec:84:15:6c:c3:c0:35:
                    24:5d:0c:1f:71:87:e5:52:e5:5f:f3:32:90:c2:2f:
                    05:63:61:80:c5:f2:bd:eb:30:16:8c:d7:70:84:f1:
                    d7:64:51:56:f0:c2:6c:21:0e:d9:77:14:e0:87:d6:
                    42:b4:53:77:be:c7:bc:69:ed:49:65:2d:5d:b0:7a:
                    67:30:f2:77:d7:79:c3:27:f2:6b:72:46:d3:9d:db:
                    ad:d8:ce:71:d8:15:3b:e3:92:8b:0c:b1:4b:a2:9b:
                    41:2b:f0:72:c0:5f:b5:c9:c3:87:69:41:74:20:da:
                    8c:38:62:b9:85:a2:27:e0:c0:a1:56:24:77:6f:5a:
                    8e:de:ab:b9:6c:e8:11:2b:82:df:88:ae:8a:d5:15:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:1D:16:E1:3B:55:87:07:6B:5B:57:0D:E9:B2:54:15:D0:F0:3A
            X509v3 Authority Key Identifier:
                keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/XIsdFuE7VYcHa1tXDemyVBXQ8Do.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.186.228.94/32

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:f7:69:d3:8a:f8:32:bb:88:73:1f:ed:eb:56:46:bf:09:
         6a:1f:b6:12:0f:66:44:d8:3a:fd:11:5e:0c:89:d9:ab:28:6d:
         e0:53:b7:81:f3:24:25:cc:1b:22:86:7a:b4:63:23:33:ac:8f:
         5f:15:af:e7:49:eb:6a:cf:88:47:cc:8f:67:86:e2:0e:1b:2f:
         96:ac:bf:a4:9c:ba:2e:29:1f:e1:49:82:11:d4:d6:82:25:56:
         31:c5:53:4f:84:73:1a:1b:58:b1:3f:3f:cf:c2:9c:2e:5f:75:
         f5:20:d4:22:73:9c:e3:62:70:95:5e:26:29:63:d6:17:05:8e:
         c1:98:a6:a4:91:a9:bf:f8:4d:42:02:11:b4:3c:a3:06:b0:b4:
         8b:bb:6e:c1:44:04:de:8d:e5:2c:c4:2a:29:19:b6:78:64:31:
         9b:03:79:81:08:33:30:b1:c4:b9:53:c1:8b:34:45:86:7d:f9:
         82:11:04:2b:8a:d7:e6:99:3e:57:93:94:e3:f0:71:cb:65:28:
         c9:63:c3:c5:70:72:b5:52:47:d6:37:e2:30:dd:b8:70:57:e6:
         94:66:9c:eb:fb:81:8a:b7:6a:6d:fd:65:f6:3d:77:08:91:7b:
         68:30:7f:af:46:b4:87:12:c9:3b:fd:42:ce:32:94:df:52:07:
         c0:d8:91:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----