Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/Dfc8EbFlfH2ocbkZ4i5DRetFFTk.roa
File:                     Dfc8EbFlfH2ocbkZ4i5DRetFFTk.roa (raw, json)
Hash identifier:          Wllycfypi6aGm5kcvc2vgto5ykCI7k2yPdRK/s6GWME=
Subject key identifier:   0D:F7:3C:11:B1:65:7C:7D:A8:71:B9:19:E2:2E:43:45:EB:45:15:39
Certificate issuer:       /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial:       018CC4255BC51E5639C259D6A12E3AF03C1A
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/Dfc8EbFlfH2ocbkZ4i5DRetFFTk.roa
Signing time:             Mon 01 Jan 2024 08:30:31 +0000
ROA not before:           Mon 01 Jan 2024 08:30:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        193.107.46.0/24 maxlen: 24
                          2a13:7f00::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:5b:c5:1e:56:39:c2:59:d6:a1:2e:3a:f0:3c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
        Validity
            Not Before: Jan  1 08:30:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0df73c11b1657c7da871b919e22e4345eb451539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:cb:4e:90:6e:2d:c0:55:02:72:9c:58:fa:
                    3b:2c:86:d5:2b:57:27:6e:0a:e9:c5:99:33:ae:94:
                    5f:54:23:e6:38:45:b1:1f:dc:c1:2b:b6:53:41:ef:
                    0a:39:6a:38:78:da:b6:36:73:bf:c9:7d:40:db:a9:
                    e2:f5:79:9b:0b:9c:bb:3e:94:64:18:12:70:f4:14:
                    2c:d9:15:36:30:e3:ba:d1:3a:46:38:f9:8b:ff:8b:
                    48:46:f7:ec:c5:1d:02:9a:df:f4:c7:df:95:20:cb:
                    0b:82:5c:d3:6d:79:01:42:7f:b4:84:7c:5f:f0:60:
                    d4:b4:46:55:8c:45:54:c0:c5:e6:b1:84:aa:4c:8f:
                    e1:14:a1:d9:5c:e3:8e:c0:72:46:44:69:c5:b5:ff:
                    66:e9:43:c2:48:10:69:13:fd:8c:b3:14:5c:fa:5f:
                    02:cf:32:5e:c3:7d:36:14:3b:a2:4f:46:71:85:fa:
                    52:7f:65:b3:15:ef:2e:d8:25:99:3f:5b:3d:96:ae:
                    a0:2e:c7:b7:76:29:db:df:e7:94:95:18:ea:fd:83:
                    83:8d:93:bc:7a:74:21:98:bf:dd:ee:58:7a:ef:80:
                    2f:f8:5f:81:0a:9d:a1:06:4a:b9:ad:cc:4e:db:57:
                    74:58:bc:a2:7e:6a:0b:f4:e8:e7:db:66:b6:3b:c3:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F7:3C:11:B1:65:7C:7D:A8:71:B9:19:E2:2E:43:45:EB:45:15:39
            X509v3 Authority Key Identifier:
                keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/Dfc8EbFlfH2ocbkZ4i5DRetFFTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.46.0/24
                IPv6:
                  2a13:7f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:f0:09:64:57:db:b6:5d:af:c2:7b:b6:7a:9d:26:db:a1:e3:
         d1:a5:ec:37:8c:7d:6a:14:0b:e1:c9:22:8e:df:4d:ad:76:af:
         b4:3d:ad:32:18:f4:a9:82:50:b5:e0:a8:c2:96:7d:8c:9d:d8:
         14:db:67:d0:66:e3:01:12:89:23:5b:21:50:6b:4a:bd:7f:d1:
         eb:6a:e6:1a:73:af:10:dc:ec:e5:05:35:d4:56:d0:61:c6:41:
         d7:bd:ee:be:83:4f:06:b0:db:30:c7:e0:6b:25:73:01:3b:60:
         d6:62:fb:6e:2b:f3:57:af:a2:01:f1:7d:d0:7e:cf:5a:ca:e0:
         02:30:b9:c6:93:ad:26:6d:34:3e:04:6e:b3:b1:38:d6:62:41:
         50:ba:3b:58:d5:5b:86:bb:11:da:44:13:04:6d:1c:51:6a:1a:
         5a:94:0e:e4:fc:36:78:4b:9f:9c:98:8f:ca:1e:83:50:c5:0d:
         aa:88:ef:26:38:d3:67:b5:98:a8:34:44:38:bc:be:34:b6:bf:
         48:f2:ca:d3:05:c2:84:a2:de:60:d3:1a:03:60:9e:31:d1:ad:
         26:11:2d:b2:b1:e0:56:07:a1:b6:80:b0:1b:49:dd:11:9b:ce:
         5e:d9:f3:03:86:89:28:b0:0a:46:f4:b2:d0:7d:4b:4f:c1:33:
         96:fc:75:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----