Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/De-fGKJdCV5pDfFgqXdDPLnrpHM.roa
File:                     De-fGKJdCV5pDfFgqXdDPLnrpHM.roa (raw, json)
Hash identifier:          o1522iVc+j+b0TXBv23GUtJ9KBHfdHRUUUucDMoL/TM=
Subject key identifier:   0D:EF:9F:18:A2:5D:09:5E:69:0D:F1:60:A9:77:43:3C:B9:EB:A4:73
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BD3698B4F143B432E558D41EA731FB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/De-fGKJdCV5pDfFgqXdDPLnrpHM.roa
Signing time:             Tue 02 Jan 2024 10:34:29 +0000
ROA not before:           Tue 02 Jan 2024 10:34:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     211495
IP address blocks:        2a10:2f00:16c::/48 maxlen: 48
                          2a0e:b107:10c0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bd:36:98:b4:f1:43:b4:32:e5:58:d4:1e:a7:31:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0def9f18a25d095e690df160a977433cb9eba473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:e8:bc:ef:f7:01:13:f3:94:59:d6:20:0b:
                    ac:1d:4c:37:75:28:f7:7e:d1:5d:0c:e9:2f:6d:78:
                    ec:7b:8c:3f:3c:e7:fc:60:c5:3d:d4:b6:e8:3d:66:
                    c1:d3:b8:c3:c3:40:dd:4f:87:72:2c:e5:9b:0e:36:
                    09:22:8a:42:22:68:9f:bc:8d:f3:7c:0e:35:53:8f:
                    d7:60:68:79:89:16:ff:00:44:d9:ac:d3:dc:36:2d:
                    b0:ad:95:c1:90:aa:d4:b0:3d:f1:c9:0e:3f:4c:20:
                    7d:ef:6b:4c:da:60:a7:18:44:33:c9:71:47:e2:f5:
                    30:cd:b0:93:70:16:13:99:dd:95:76:7a:b6:81:a4:
                    54:c1:a1:9d:12:97:87:96:73:68:c7:a1:48:b6:a0:
                    fb:61:0c:6f:89:36:9b:b5:b2:46:1f:f8:bc:ff:b9:
                    f1:8b:1a:0b:d8:1a:79:04:67:66:d4:d2:39:a9:fe:
                    a4:4a:bc:43:a6:ea:b1:2f:10:87:56:67:b1:22:af:
                    35:34:06:77:68:9c:18:64:eb:c3:b7:fa:ab:7c:68:
                    94:7c:6b:cb:8a:66:e6:d1:27:ba:02:2c:c5:b8:6b:
                    59:17:95:70:81:11:b6:2b:67:f0:0a:49:ab:5e:fa:
                    e0:e5:75:fc:9c:d6:21:5a:93:66:22:1f:4c:c3:cf:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EF:9F:18:A2:5D:09:5E:69:0D:F1:60:A9:77:43:3C:B9:EB:A4:73
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/De-fGKJdCV5pDfFgqXdDPLnrpHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:10c0::/44
                  2a10:2f00:16c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:de:1b:80:40:89:4d:eb:9b:82:08:4e:5b:53:a8:a1:25:
         48:85:da:d9:31:33:d7:8a:0f:72:ba:42:56:6c:e2:db:44:61:
         88:83:25:b0:c0:97:5e:9a:be:ba:23:0f:a2:85:83:37:8b:7f:
         eb:79:0c:ac:d9:3b:ee:dd:e3:a5:0c:76:74:8d:2c:1a:b0:6b:
         aa:81:a8:6e:6f:04:d3:70:f6:8b:f4:a2:1d:8c:54:45:b5:a1:
         49:7c:cd:e6:01:07:40:70:32:9a:24:29:c8:cf:66:ca:30:8c:
         e0:e1:a7:7a:40:14:5c:b9:7c:0e:85:e9:ee:4a:f2:91:f7:f9:
         2f:00:e6:14:ac:80:84:b3:b6:b3:40:72:14:40:77:4c:bd:3a:
         75:bb:c4:d9:40:3b:12:37:f1:00:c8:93:5f:94:ce:0d:ba:42:
         bc:5e:e4:0e:61:80:4f:19:5d:ab:3d:b9:d3:77:5a:14:3c:cd:
         7b:8c:37:71:39:d4:79:07:38:19:3d:c4:4a:d0:98:73:ad:e3:
         88:f1:fa:33:77:ef:15:b0:8b:f6:21:b2:e1:3a:c3:03:e9:dc:
         3d:b8:9f:a3:4c:54:12:91:3d:3e:a3:54:d5:bf:0f:29:65:9b:
         eb:5a:82:da:6e:db:89:bb:13:43:a1:4f:e1:0b:ac:f0:d0:ce:
         3f:c5:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----