Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/qvfhmF5mEYsoGctQhrbJCiGZh4U.roa
File:                     qvfhmF5mEYsoGctQhrbJCiGZh4U.roa (raw, json)
Hash identifier:          O8Q6aB9CiJsm7fy9aACylhu7RDvmS0vI/a06YCM9k58=
Subject key identifier:   AA:F7:E1:98:5E:66:11:8B:28:19:CB:50:86:B6:C9:0A:21:99:87:85
Certificate issuer:       /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial:       018CC49231C642B1E0FB8592B9E611289D92
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/qvfhmF5mEYsoGctQhrbJCiGZh4U.roa
Signing time:             Mon 01 Jan 2024 10:29:24 +0000
ROA not before:           Mon 01 Jan 2024 10:29:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200520
IP address blocks:        193.17.96.0/21 maxlen: 30
                          2a03:35c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:31:c6:42:b1:e0:fb:85:92:b9:e6:11:28:9d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
        Validity
            Not Before: Jan  1 10:29:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aaf7e1985e66118b2819cb5086b6c90a21998785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:5a:55:1c:26:ed:e2:83:92:f3:42:48:d2:
                    1b:d7:47:9d:14:80:bc:97:0b:d5:43:e0:61:f4:38:
                    a9:4d:ca:50:db:58:14:59:63:0b:21:c5:a7:7b:d1:
                    37:5e:6b:7c:38:fe:4b:c3:e6:c6:80:ae:da:cf:84:
                    bf:09:8a:6e:81:ee:9c:10:fc:98:97:5a:38:6b:81:
                    dc:09:23:07:2e:75:62:95:5d:aa:42:4c:3c:4b:70:
                    84:62:fe:60:48:92:a9:9b:c7:b6:f0:f8:4a:50:31:
                    ec:60:41:09:da:2f:a8:73:24:97:7c:29:4f:36:37:
                    fd:3b:2d:a4:db:e7:f8:87:8f:6c:26:f3:5f:3c:4c:
                    cc:9b:8c:41:fe:48:20:e0:03:df:9a:9c:dc:95:df:
                    ae:2e:59:42:8d:8a:c5:68:d4:ea:eb:1b:70:14:8d:
                    58:98:14:9e:19:45:c5:2b:bb:5f:05:19:8a:e8:29:
                    7f:0d:86:c0:a0:b5:3d:b2:46:b5:31:ff:f9:07:4d:
                    30:8c:85:ac:00:3c:ca:84:a8:82:1c:34:a6:b0:f4:
                    dc:99:78:ef:b6:9c:f0:04:2a:4d:fc:33:75:5c:80:
                    ed:21:34:17:86:c3:40:b5:52:65:27:17:a3:d0:a8:
                    d2:fd:d1:a0:cc:76:dd:9d:78:17:2e:55:eb:d9:b2:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F7:E1:98:5E:66:11:8B:28:19:CB:50:86:B6:C9:0A:21:99:87:85
            X509v3 Authority Key Identifier:
                keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/qvfhmF5mEYsoGctQhrbJCiGZh4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.96.0/21
                IPv6:
                  2a03:35c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:1d:83:1e:99:1f:c3:a1:3d:7d:cd:61:40:fe:ed:88:65:fe:
         35:b8:33:75:8c:be:30:cd:41:c5:29:be:2a:2c:bd:e2:98:57:
         6f:ed:9d:0d:ae:e1:da:fd:80:39:03:86:f7:4e:e2:ea:86:5e:
         43:60:f1:2a:55:2f:82:85:f9:36:d6:40:e4:83:9c:2b:b4:21:
         21:17:b7:b7:dc:ab:eb:5d:ae:90:60:9f:b5:db:7b:74:ce:54:
         b1:76:ce:e2:56:81:8f:be:3c:d0:85:bf:c3:16:04:41:ed:7c:
         34:c9:91:ac:b7:ba:1f:c2:a4:3b:7f:6d:3c:42:c2:b4:b5:4f:
         2b:bd:9a:93:a7:41:3a:b1:ac:29:57:93:0e:84:ee:6e:5b:3b:
         94:5e:4c:a7:06:a2:0e:a4:47:c7:9a:84:69:83:f7:e9:39:66:
         4c:1b:f9:7e:cf:89:7d:ed:d2:7f:58:67:1f:47:8f:ca:03:f4:
         7d:a9:a1:55:9e:07:34:dc:77:eb:6f:cd:14:1f:a0:fa:da:0d:
         9b:fc:90:3d:3c:5d:9a:da:51:cb:81:40:6a:48:b3:70:f5:2b:
         39:3c:1b:9c:ab:7d:54:f4:94:fb:60:11:b3:8a:0a:11:11:6f:
         08:df:0b:e1:8a:7f:60:93:87:1e:5a:de:86:98:f6:64:99:e1:
         d7:71:9e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----