Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/XhsbQetBbzEGHkxo7AR3AdUKtsM.roa
File:                     XhsbQetBbzEGHkxo7AR3AdUKtsM.roa (raw, json)
Hash identifier:          77m0dJ1U8HUYlB3cbrsM5oZcE2HA59slCcakiiMWvh0=
Subject key identifier:   5E:1B:1B:41:EB:41:6F:31:06:1E:4C:68:EC:04:77:01:D5:0A:B6:C3
Certificate issuer:       /CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
Certificate serial:       018CC793770101F383AB74E10F6F3D911AEF
Authority key identifier: 4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/XhsbQetBbzEGHkxo7AR3AdUKtsM.roa
Signing time:             Tue 02 Jan 2024 00:29:39 +0000
ROA not before:           Tue 02 Jan 2024 00:29:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16228
IP address blocks:        80.246.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:93:77:01:01:f3:83:ab:74:e1:0f:6f:3d:91:1a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4f206fdccab83ddfe19e896e9163d7a9ad4779
        Validity
            Not Before: Jan  2 00:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5e1b1b41eb416f31061e4c68ec047701d50ab6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:aa:42:07:8c:32:62:66:37:7d:16:df:4e:
                    b1:eb:81:8a:a7:be:06:45:94:66:e4:d3:70:85:32:
                    9e:32:4f:7c:99:cc:e5:7d:b9:bb:dd:d6:c5:b9:42:
                    8b:b7:cf:6c:c4:fc:0c:d3:c3:35:e8:6b:a7:71:7a:
                    3f:23:40:61:17:34:39:f3:63:e8:01:40:da:a3:a0:
                    b6:79:90:62:2e:96:d5:58:6f:b3:aa:4e:a4:0d:9f:
                    6f:97:2b:97:fe:0b:00:43:f1:d1:4d:e5:48:03:30:
                    bf:be:d6:01:d3:0f:03:66:c6:59:1d:35:1a:dc:24:
                    c8:37:6f:f6:14:ea:a2:9d:9c:a2:99:4c:77:56:ea:
                    78:ea:ca:a4:ce:6d:2d:60:70:70:7b:21:6c:e3:40:
                    84:ea:91:fa:de:4a:64:29:bb:de:76:16:b9:28:59:
                    39:f6:a0:c8:4b:1e:3a:25:b9:c1:99:0b:d0:4a:2e:
                    1d:8b:63:80:10:af:5e:43:d8:66:05:52:a8:b1:c7:
                    4f:a2:ba:72:3b:f7:cc:25:78:98:8f:76:94:a7:63:
                    e0:22:e2:03:ab:15:69:6a:bb:81:0f:c7:f0:a2:03:
                    d0:b8:c2:aa:ad:fd:be:06:30:cc:44:f7:eb:c8:cb:
                    89:aa:0e:4a:e5:de:28:a0:a7:d6:38:47:eb:24:d3:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1B:1B:41:EB:41:6F:31:06:1E:4C:68:EC:04:77:01:D5:0A:B6:C3
            X509v3 Authority Key Identifier:
                keyid:4C:4F:20:6F:DC:CA:B8:3D:DF:E1:9E:89:6E:91:63:D7:A9:AD:47:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE8gb9zKuD3f4Z6JbpFj16mtR3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/XhsbQetBbzEGHkxo7AR3AdUKtsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c29bac-6cf8-4b87-a8e2-ad54931c24b3/1/TE8gb9zKuD3f4Z6JbpFj16mtR3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:72:be:01:4f:90:2d:5c:0c:e5:7c:73:65:89:1a:2a:38:
         eb:0c:4e:2b:c4:60:7d:5a:9f:c2:4d:95:61:2c:66:4e:94:f4:
         e0:d7:fc:21:03:73:e6:c5:c8:fe:7b:35:b6:5e:75:8e:be:a8:
         13:e2:f7:4f:2e:47:c9:f2:60:43:72:4c:01:59:4e:f3:9f:41:
         2f:7d:17:4e:e2:40:fc:9d:ef:b7:05:ea:6f:11:2b:da:2e:23:
         03:4e:7a:95:a2:05:35:9d:b0:da:2f:fe:4a:26:81:09:03:01:
         ce:96:16:95:54:c7:82:68:72:7e:46:e0:d5:19:f1:6a:ad:76:
         30:ae:6c:b8:0a:c1:85:03:2d:d6:74:c3:79:d2:b6:d6:11:fe:
         9d:1d:b8:3a:d8:86:4d:04:03:09:4b:9a:13:24:b7:e2:2b:35:
         e1:b1:b3:3a:29:16:09:d6:38:c7:fd:5f:3d:64:76:71:37:43:
         c1:84:aa:ce:bd:cf:2d:c8:cb:87:cd:2d:f1:2b:96:3b:e4:9b:
         17:16:13:53:2a:67:06:cc:5b:db:fd:ce:53:9d:e9:f4:09:f7:
         b7:2a:6c:c1:ad:95:3d:ce:ee:99:7d:f0:17:9d:f3:17:a2:4c:
         a9:3a:6a:09:16:11:69:7a:4d:49:14:f5:ff:e9:c7:04:23:e6:
         99:d7:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----