Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PRUhZ1c0qtpvF4tzSnNuHPsFqms.roa
File:                     PRUhZ1c0qtpvF4tzSnNuHPsFqms.roa (raw, json)
Hash identifier:          LZxpU1rH7z18ygmgz1DUhjYQlGWtIXbG1GNusPDHNWY=
Subject key identifier:   3D:15:21:67:57:34:AA:DA:6F:17:8B:73:4A:73:6E:1C:FB:05:AA:6B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018E3D7CB0DB73738FFFA9D4AFB28BC3AD15
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PRUhZ1c0qtpvF4tzSnNuHPsFqms.roa
Signing time:             Thu 14 Mar 2024 15:02:45 +0000
ROA not before:           Thu 14 Mar 2024 15:02:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34927
IP address blocks:        2a10:ccc3:ccc0::/46 maxlen: 48
                          2a10:ccc3:ccc6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:3d:7c:b0:db:73:73:8f:ff:a9:d4:af:b2:8b:c3:ad:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 14 15:02:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3d1521675734aada6f178b734a736e1cfb05aa6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:2f:23:05:ee:9c:f4:64:d4:18:6f:2a:92:
                    8a:f4:6b:89:15:5d:ea:7e:7b:ce:6e:0d:a8:56:90:
                    bb:8b:6f:c3:91:83:42:2d:bb:b6:b7:9f:cf:5a:68:
                    4f:f0:5e:1f:b7:a8:21:02:1a:82:6f:f8:7d:d6:97:
                    59:5f:9a:77:51:ec:80:d1:7d:d0:97:4d:9a:0f:3c:
                    63:ec:ec:7d:d2:45:c1:c7:fb:9e:06:7d:01:ab:a1:
                    d3:02:de:c8:9d:db:2c:7f:08:c1:fa:f7:c0:d7:1d:
                    73:f2:2a:1f:3d:89:45:83:56:63:c2:3d:3f:15:a7:
                    f3:f2:12:0f:ec:7f:4b:1e:c4:03:44:99:eb:8a:6a:
                    61:68:a6:d8:67:2e:7d:04:9c:87:d1:27:1f:ee:ba:
                    3d:ad:e9:f5:5b:e9:73:6d:db:d5:c1:2b:f9:74:fb:
                    50:c4:6a:be:21:aa:94:b3:2f:f5:ac:af:dd:af:5a:
                    8a:a7:83:a0:1b:38:af:54:27:37:34:e5:47:19:4a:
                    50:80:e6:dd:67:4f:5f:46:bb:0c:d4:bc:ec:81:84:
                    57:66:52:4f:8c:ac:3e:7a:a7:e8:4f:ab:e5:b3:68:
                    71:3e:2f:27:a8:1f:d9:b2:ca:86:5e:3f:48:fe:96:
                    c7:f6:97:9d:dc:c3:65:4f:54:5d:fb:0a:8b:91:b9:
                    ef:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:15:21:67:57:34:AA:DA:6F:17:8B:73:4A:73:6E:1C:FB:05:AA:6B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PRUhZ1c0qtpvF4tzSnNuHPsFqms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:ccc3:ccc0::/46
                  2a10:ccc3:ccc6::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:eb:3f:67:65:b7:16:75:e5:16:7f:13:4f:cc:2d:07:75:20:
         22:6b:2c:d2:c3:f2:df:4a:ed:ec:41:82:24:83:85:97:f9:f8:
         06:e8:a4:8e:5e:a6:b9:6d:69:ce:54:c0:c3:b3:be:20:b8:72:
         48:c8:94:9b:ab:aa:23:b9:3f:7c:91:64:fe:c6:c9:74:ab:26:
         b6:16:47:4f:3b:66:ed:e3:34:ad:0e:46:43:10:a7:61:3e:35:
         14:3d:1f:3e:89:95:e6:a6:bf:19:f9:98:34:ec:16:bf:f4:ec:
         18:4d:8e:d8:c2:1b:95:26:7f:85:39:5e:54:86:39:62:18:a2:
         c9:ad:6a:3d:a6:c7:4e:67:66:ca:f8:bc:8a:3f:27:b5:cd:aa:
         18:3d:7d:50:50:f2:fb:a9:e2:f9:80:da:85:78:98:a3:fa:0c:
         b1:50:36:59:b3:bf:ac:24:d3:a9:87:3e:98:f7:e1:a3:d4:5a:
         3a:3f:4a:f7:23:95:c7:87:05:ab:c5:ca:fd:04:b8:2c:f4:65:
         50:13:21:70:69:ab:ed:12:8d:1e:5b:b8:7f:9e:d7:d9:ac:45:
         3a:a5:24:f2:73:e6:36:ef:24:c4:04:b9:a3:77:32:a7:d6:db:
         9f:ae:29:37:c1:04:45:90:1d:94:02:e5:db:c0:f0:93:53:47:
         ef:1f:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----