Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/tA6clkO-5zftLY3X2Xw7ACOkhl0.roa
File:                     tA6clkO-5zftLY3X2Xw7ACOkhl0.roa (raw, json)
Hash identifier:          GOu9otq6nIx/nTZFJDhO1K9FdqwSXcae9M9YzjhNx+s=
Subject key identifier:   B4:0E:9C:96:43:BE:E7:37:ED:2D:8D:D7:D9:7C:3B:00:23:A4:86:5D
Certificate issuer:       /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial:       018CC793D582BA5E699006B3E2728E4B14EB
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/tA6clkO-5zftLY3X2Xw7ACOkhl0.roa
Signing time:             Tue 02 Jan 2024 00:30:03 +0000
ROA not before:           Tue 02 Jan 2024 00:30:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205718
IP address blocks:        185.229.156.0/22 maxlen: 22
                          2a09:eb40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:93:d5:82:ba:5e:69:90:06:b3:e2:72:8e:4b:14:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
        Validity
            Not Before: Jan  2 00:30:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b40e9c9643bee737ed2d8dd7d97c3b0023a4865d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:e0:ce:0e:71:84:66:b9:20:a7:45:b4:a2:
                    2f:79:d0:11:29:d8:e0:57:b7:4b:77:88:77:9c:ca:
                    b0:0f:69:a8:24:5a:77:95:eb:fd:72:4a:54:06:6c:
                    ec:c2:05:35:17:f1:04:c5:f3:0b:b7:52:8f:27:00:
                    62:77:5c:95:c7:77:ad:05:7d:ce:33:9c:9a:ce:d0:
                    31:03:41:f4:34:8f:8d:15:54:32:7d:77:ea:02:13:
                    51:07:2b:93:e3:6f:8a:cd:2d:de:11:c5:d0:32:34:
                    81:21:c5:48:98:19:d2:0b:9d:b0:0f:5c:37:23:af:
                    c7:d2:44:5a:02:91:b4:fc:37:c1:f0:3c:a3:45:55:
                    10:bb:db:98:11:23:98:2c:8e:1d:58:b8:92:70:f1:
                    dd:b5:d2:4b:e5:60:28:c8:f2:68:ce:12:7a:bd:7d:
                    e9:66:11:f5:95:af:bf:5c:cb:ad:0c:b5:1f:ba:16:
                    ca:c5:dc:96:d1:9c:03:03:82:ef:15:0f:ac:60:93:
                    2d:8a:33:4c:bd:18:21:99:a5:83:93:23:8d:ba:09:
                    f6:91:65:0d:2f:bb:c5:f4:7e:d0:3d:31:fd:a5:96:
                    6c:c5:dd:c6:64:cc:d8:2e:d7:b1:a7:80:9d:d3:35:
                    24:b1:1a:39:eb:a3:21:55:b9:26:1a:42:ee:e9:29:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0E:9C:96:43:BE:E7:37:ED:2D:8D:D7:D9:7C:3B:00:23:A4:86:5D
            X509v3 Authority Key Identifier:
                keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/tA6clkO-5zftLY3X2Xw7ACOkhl0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.156.0/22
                IPv6:
                  2a09:eb40::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:28:02:86:eb:79:30:0e:fa:6d:9c:2d:fd:c5:1c:25:29:cc:
         2b:08:85:31:c8:80:bb:68:e5:ec:bb:1a:37:ed:21:f9:5e:42:
         27:3f:ac:9d:14:4a:14:f7:b0:59:91:c8:c1:21:3d:d9:4c:df:
         87:51:f8:4c:ba:29:65:96:75:6e:74:a5:0a:68:a0:34:5a:eb:
         c5:d8:4a:a2:2f:97:d1:87:fd:7f:60:16:ce:ae:57:a6:56:83:
         e2:3d:ab:28:89:38:d1:3c:e0:f1:60:7c:3f:22:4b:37:3c:69:
         e8:01:c3:ab:c5:9f:58:30:34:35:8d:21:b4:ca:27:3e:b7:da:
         05:29:31:65:c9:68:e1:ce:03:65:db:d8:2c:6b:da:d7:9d:77:
         ab:93:58:5b:68:b8:93:0d:0d:37:5f:5d:e6:6e:9c:24:14:5f:
         6d:47:33:dd:d0:25:c3:d5:fc:9c:79:03:bc:de:20:b9:c5:0f:
         1b:1e:c5:45:fc:92:32:54:52:36:06:bc:10:9e:9a:17:23:77:
         08:bc:06:34:cd:41:21:d3:a2:21:e7:d3:15:a5:b3:ce:61:0f:
         1a:c3:e0:49:78:57:fc:6f:76:66:00:fa:7b:f6:57:48:40:04:
         41:82:07:b5:20:be:5b:8f:cf:f7:9c:57:27:55:78:be:99:66:
         35:eb:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----