Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HSCzJlli54Q3oWerCDapHNYogD0.roa
File:                     HSCzJlli54Q3oWerCDapHNYogD0.roa (raw, json)
Hash identifier:          d0uZ5e/O1hQgZVfx8WHQ/ohJpL9zk8Gnv8ew5OijHEg=
Subject key identifier:   1D:20:B3:26:59:62:E7:84:37:A1:67:AB:08:36:A9:1C:D6:28:80:3D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BD059AA3A4B8B0BD270D31B38EDB6C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HSCzJlli54Q3oWerCDapHNYogD0.roa
Signing time:             Tue 02 Jan 2024 10:34:17 +0000
ROA not before:           Tue 02 Jan 2024 10:34:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     203691
IP address blocks:        2a0e:b107:1c0::/48 maxlen: 48
                          2a0e:b107:1c1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bd:05:9a:a3:a4:b8:b0:bd:27:0d:31:b3:8e:db:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1d20b3265962e78437a167ab0836a91cd628803d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:09:cd:fc:0f:28:85:3a:35:dc:5d:2c:c8:7c:
                    a4:91:ee:00:2c:a7:05:db:7a:0c:85:ad:57:8a:a1:
                    06:f8:3b:72:a4:98:a6:10:6f:eb:84:68:86:6a:80:
                    dc:12:14:d4:71:34:0d:a3:76:80:67:85:f5:a0:5c:
                    a9:82:6f:4a:a7:a7:ce:40:fa:5e:3a:8e:8b:16:e9:
                    b5:da:c8:04:e6:b2:03:f1:0a:ff:a7:b6:a9:8e:9d:
                    c6:9d:22:07:39:63:42:a2:32:9a:a5:60:57:08:1f:
                    4c:29:08:19:bb:66:5e:85:2b:20:65:99:40:6d:4d:
                    dd:7a:95:f8:9d:67:df:6b:9a:31:d4:52:76:f6:bf:
                    4a:65:65:1a:a2:c9:6e:e5:c2:a9:fb:c4:7d:7f:ca:
                    db:ce:db:e3:c1:ad:7e:c3:2b:ed:c0:2c:d5:d3:6e:
                    22:71:c7:2a:55:af:d9:91:8f:28:25:75:c8:dd:8d:
                    9e:a9:4c:dd:68:be:2c:d6:0f:08:99:2f:f9:83:a8:
                    88:e0:65:20:2f:15:61:53:43:74:f5:18:e5:f2:82:
                    5e:04:10:d3:a8:5d:49:64:7a:c7:0c:80:30:8e:0d:
                    bf:79:2e:af:32:d9:ae:46:f8:c7:34:77:8d:06:73:
                    bf:b9:2d:9d:69:c4:ed:b0:ab:f5:97:85:62:60:af:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:20:B3:26:59:62:E7:84:37:A1:67:AB:08:36:A9:1C:D6:28:80:3D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HSCzJlli54Q3oWerCDapHNYogD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         c7:66:de:4c:f7:9a:a9:a7:0b:63:4a:8e:57:a9:62:06:9d:4d:
         70:82:f2:a0:2b:cb:c0:97:95:06:10:04:0c:7a:7a:c5:bf:c3:
         49:7b:bf:65:46:47:9e:f0:af:70:3b:00:c8:bf:2e:f6:2f:2f:
         0e:0a:3c:e9:85:89:ef:8c:2e:fa:45:6d:e2:45:37:e9:1d:88:
         54:12:c8:bd:b6:47:01:57:a6:19:a4:7d:dd:02:39:05:eb:eb:
         f2:77:65:71:3e:63:d1:25:c3:9f:34:10:14:61:78:a0:37:10:
         87:31:6e:c6:04:5c:77:52:2f:92:13:8b:b3:8e:20:9e:dc:33:
         d2:a5:ce:70:0d:04:ce:7d:31:fa:f3:9b:b5:bf:b8:3d:74:48:
         32:89:81:fe:fe:bd:c0:4a:d9:33:8c:37:9e:d1:17:7f:79:7b:
         58:b1:f0:ea:07:68:1b:72:37:dd:3e:25:de:75:84:a0:06:9a:
         da:76:ba:75:4a:a2:f3:3c:0c:36:fb:7f:75:62:de:42:5f:a3:
         dd:60:da:ed:d4:11:9f:f9:ef:70:f8:bd:06:07:ea:40:db:ce:
         73:af:72:fe:f4:f3:10:1e:aa:92:cd:d3:4f:22:69:2b:94:72:
         a0:f8:10:f4:3f:71:f2:07:50:6f:bc:93:65:8f:5c:d3:a2:eb:
         4d:10:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----