Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T3Wu_72qtO3eH39bRMGZLtCB-2s.roa
File:                     T3Wu_72qtO3eH39bRMGZLtCB-2s.roa (raw, json)
Hash identifier:          3xFdnz1JW46diUrwT1Z1/hYXNWFbptTPCnd1NLyknKE=
Subject key identifier:   4F:75:AE:FF:BD:AA:B4:ED:DE:1F:7F:5B:44:C1:99:2E:D0:81:FB:6B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BCE1D560C88F5ED90055FF439BEE0A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T3Wu_72qtO3eH39bRMGZLtCB-2s.roa
Signing time:             Tue 02 Jan 2024 10:34:08 +0000
ROA not before:           Tue 02 Jan 2024 10:34:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     147016
IP address blocks:        2a0e:b107:b17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:e1:d5:60:c8:8f:5e:d9:00:55:ff:43:9b:ee:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4f75aeffbdaab4edde1f7f5b44c1992ed081fb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:7c:6e:c6:93:09:ba:59:77:ca:90:9c:6b:
                    7e:f4:56:a0:36:f5:b8:00:48:22:cd:71:7a:fe:f3:
                    9f:60:36:ab:23:79:04:cf:76:a9:15:36:98:c0:f0:
                    ce:9a:d6:6e:5f:b3:48:d0:f1:ca:4c:2e:09:9c:58:
                    9c:0a:74:01:3a:7e:a1:b7:0c:91:18:d0:4b:87:7c:
                    43:75:cf:06:6a:3d:f8:e4:67:86:71:de:1a:11:7a:
                    21:f3:1d:6a:c8:52:4f:95:06:16:a3:5c:fd:b2:9c:
                    85:9f:f9:52:72:dc:57:2f:65:31:9e:a8:5d:53:9a:
                    7f:6f:39:a4:66:13:39:45:b1:e2:b3:43:62:0f:15:
                    3f:6b:42:6a:6d:a5:8f:17:8b:71:c7:48:7c:cd:0a:
                    dd:11:01:8d:26:89:77:58:1c:09:01:6d:47:36:3e:
                    03:ea:20:4e:33:92:df:8e:49:ca:c1:e5:f2:5c:24:
                    73:42:e3:0e:05:fe:46:13:b8:d3:33:1a:a0:a1:2e:
                    a2:f5:96:f9:25:7a:73:27:07:3d:5c:81:44:a3:b4:
                    79:26:29:b3:d4:e5:b1:f2:71:68:bd:ed:d2:58:cc:
                    cc:61:cf:ee:a2:c6:2d:0a:bd:0d:35:0d:df:8a:da:
                    8e:77:ce:f5:55:27:8f:c8:9f:56:f5:03:b5:af:aa:
                    66:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:75:AE:FF:BD:AA:B4:ED:DE:1F:7F:5B:44:C1:99:2E:D0:81:FB:6B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T3Wu_72qtO3eH39bRMGZLtCB-2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:b17::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:a2:f1:5d:76:bb:4e:34:6d:02:e2:78:5c:27:37:d6:c0:39:
         c4:b7:aa:11:68:63:2c:0b:58:2c:8d:76:16:df:ef:4c:14:e1:
         40:a4:87:b2:aa:29:f9:c6:8f:b3:8b:68:c1:29:15:19:df:43:
         e5:1d:ac:ab:9e:be:eb:19:4b:30:ef:e7:b1:8d:ea:a3:ee:fb:
         72:9a:23:23:2b:59:f8:a6:66:4e:ef:27:e0:96:31:73:ee:cb:
         1e:3a:b4:a0:1b:70:10:be:70:65:fc:ba:e5:a2:4d:f7:16:c6:
         d2:b7:f3:77:65:08:a4:37:29:2b:e9:10:8c:88:b0:87:42:1e:
         95:67:d8:ba:da:01:11:35:7d:b8:95:b8:a1:a6:e4:a2:68:f2:
         62:43:2e:55:d4:73:54:69:ab:51:f7:ef:44:c2:0d:ed:5b:d8:
         01:d0:a1:49:f0:88:8c:82:fe:62:0a:6d:c8:35:7c:3c:02:c0:
         2d:1c:a6:31:e5:cd:2b:4c:90:f1:a9:d6:93:da:e2:12:09:5b:
         2b:3c:34:ec:fb:2d:53:53:1d:c6:23:eb:a2:69:b6:9f:7b:7a:
         3d:18:4c:b7:14:61:d7:62:a6:ac:85:d5:88:f9:e3:fe:8d:da:
         36:70:d9:fc:8c:3c:8a:53:d8:dc:9e:a7:6c:95:c0:f0:3a:ad:
         5f:1e:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----