Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qulGd8EJAQ_ORqx5yKO_JW_B_gw.roa
File:                     qulGd8EJAQ_ORqx5yKO_JW_B_gw.roa (raw, json)
Hash identifier:          7z31vFHV3bvmDekCmooC8ONLWFP9STwGmHSZTx7eIwI=
Subject key identifier:   AA:E9:46:77:C1:09:01:0F:CE:46:AC:79:C8:A3:BF:25:6F:C1:FE:0C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018CC9BD1C5F30A8013C257307F90B6293FC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qulGd8EJAQ_ORqx5yKO_JW_B_gw.roa
Signing time:             Tue 02 Jan 2024 10:34:23 +0000
ROA not before:           Tue 02 Jan 2024 10:34:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209225
IP address blocks:        2a10:cc40:102::/48 maxlen: 48
                          2a10:cc40:100::/44 maxlen: 48
                          2a10:2f00:17e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bd:1c:5f:30:a8:01:3c:25:73:07:f9:0b:62:93:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 10:34:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aae94677c109010fce46ac79c8a3bf256fc1fe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:55:f7:0b:92:2b:d3:62:7b:80:3d:30:e5:72:
                    52:35:97:16:85:64:18:34:ad:b7:50:5e:b2:20:54:
                    5c:6f:6d:33:34:75:93:26:7b:7d:48:02:00:71:c7:
                    41:fa:98:5d:0c:fe:0a:fd:ae:8a:b1:0b:a4:4f:42:
                    12:7d:20:6f:a4:00:55:82:15:bb:12:81:73:c8:b0:
                    11:87:fc:f3:5d:21:2d:13:54:3c:6b:04:a2:b1:0e:
                    8c:87:b3:80:ed:86:2b:59:ef:13:94:5a:91:30:a9:
                    4e:5d:52:3f:50:53:e4:24:20:46:73:6f:4e:eb:bd:
                    e8:c3:5d:03:4d:f0:3f:f1:52:39:35:84:08:e0:55:
                    77:a9:b2:f7:af:47:72:ec:c5:45:f0:11:77:73:a2:
                    db:26:9a:11:69:c3:91:48:70:f6:2c:75:74:5e:6a:
                    37:37:ad:a8:74:f1:91:dd:3c:77:7a:d8:26:4a:5c:
                    39:4a:ba:76:9e:f9:84:5d:84:e2:97:47:ed:52:6e:
                    47:90:d7:ff:72:fb:81:19:69:ad:b6:59:74:43:96:
                    e1:4c:d0:71:6b:92:7e:f4:dc:52:64:28:82:3c:d8:
                    d8:b2:d8:dd:9f:e2:32:0e:ff:6c:f4:69:84:0b:f8:
                    35:12:b2:47:9e:e1:9d:e1:ad:ae:2f:c6:c8:16:ef:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E9:46:77:C1:09:01:0F:CE:46:AC:79:C8:A3:BF:25:6F:C1:FE:0C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qulGd8EJAQ_ORqx5yKO_JW_B_gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:17e::/48
                  2a10:cc40:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:6b:e8:ee:0e:de:22:46:07:fe:ac:e3:96:50:b8:fa:58:
         1f:e1:c2:1f:04:25:a4:fb:3e:f9:23:7f:98:75:9d:c9:b8:25:
         ca:e1:53:9a:11:9d:0e:2e:b9:65:12:fa:e8:43:83:f2:b1:ec:
         e5:84:e7:cf:aa:5b:d2:e9:d4:b7:17:ff:5d:d2:db:33:b4:dd:
         c5:88:66:5b:04:d4:3d:2f:ee:01:84:cd:57:a0:0b:54:bd:ab:
         70:ba:20:e2:d0:71:2f:a1:e9:fa:48:b4:91:1c:3f:ac:28:e6:
         48:ea:52:50:83:2f:b6:38:30:ff:2f:45:a1:82:62:b2:57:8c:
         40:21:a5:57:ac:90:5c:c1:74:bb:04:a6:79:96:5d:21:b5:6b:
         24:c5:14:0a:b8:24:15:5a:31:ac:3b:d2:8f:38:e0:c6:90:4c:
         20:55:ea:13:8a:9c:7e:c1:70:2c:f5:5a:f1:e0:88:c7:af:bc:
         17:e3:28:16:f1:fa:29:8a:da:77:51:f8:59:6c:e0:7f:4b:66:
         30:4e:39:40:35:33:51:5f:03:78:04:e9:d6:37:b5:76:9f:8b:
         26:ed:8d:b8:30:bc:f6:bf:5e:06:94:c1:d1:7e:16:fe:b6:3b:
         a3:25:cb:9f:d4:ae:8c:1e:f5:2c:e0:33:5c:3f:27:65:fa:a7:
         d1:cc:45:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----