Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa
File:                     uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa (raw, json)
Hash identifier:          hqV8FgxsrXINgskWma19v2UbCR88aZpdO7lM4BvJvGU=
Subject key identifier:   BA:20:31:0A:3C:97:DD:04:F4:A4:D4:26:57:F3:F9:97:11:D9:E5:13
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       018CC5DCBCE2130D178A6DB4C9B7AD0EEA8A
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa
Signing time:             Mon 01 Jan 2024 16:30:26 +0000
ROA not before:           Mon 01 Jan 2024 16:30:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42093
IP address blocks:        2a06:c3c0:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:bc:e2:13:0d:17:8a:6d:b4:c9:b7:ad:0e:ea:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jan  1 16:30:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ba20310a3c97dd04f4a4d42657f3f99711d9e513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:05:ae:ad:f7:0a:6e:54:9d:7d:7a:aa:13:
                    d6:5b:a3:74:fa:a3:b2:35:f2:8d:3c:8a:d2:04:d3:
                    e4:d4:e2:89:e0:cd:c1:87:84:0c:6b:34:7c:c3:64:
                    83:1f:0c:75:e6:8b:83:78:c9:45:e5:36:72:35:8e:
                    d9:f5:bc:71:b7:10:33:34:2a:de:da:fb:8a:4d:93:
                    e1:49:9b:21:8e:3b:e8:d9:44:d6:e1:da:dc:fa:a5:
                    70:7b:bf:eb:a2:45:07:a5:dc:b8:27:a7:fa:c4:a7:
                    d2:8a:bc:b9:ba:19:3a:7d:32:1d:d8:92:89:b5:ba:
                    5d:1f:ea:5d:da:d4:79:98:e6:19:35:ac:f0:e7:39:
                    86:4d:15:1e:cf:ab:03:26:9b:60:44:62:be:d5:26:
                    84:80:51:84:c0:40:20:7e:64:91:10:8c:18:0f:f3:
                    06:71:f2:76:ef:d1:94:33:b6:99:02:83:df:46:5f:
                    e8:3f:69:a3:5d:b9:01:80:85:01:93:34:4e:51:a3:
                    e8:a7:3d:e3:83:7d:e3:83:16:19:1f:c0:a6:6c:2d:
                    20:72:51:72:c1:a6:e8:3c:4f:2c:12:ab:6f:78:05:
                    80:b9:74:e7:8a:78:10:b4:f2:37:45:89:3d:94:51:
                    3f:ed:15:22:bf:2d:06:f8:a0:b1:ce:52:9b:21:47:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:20:31:0A:3C:97:DD:04:F4:A4:D4:26:57:F3:F9:97:11:D9:E5:13
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/uiAxCjyX3QT0pNQmV_P5lxHZ5RM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:c3c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:f9:f9:85:8d:5f:30:63:0d:b7:16:c6:13:2d:c1:1c:cf:
         65:ed:c4:bf:5e:96:15:94:74:5d:14:4f:17:3a:97:9e:76:08:
         77:26:83:d3:14:e1:5b:25:89:de:86:06:9c:ba:b4:eb:e5:2d:
         c9:34:23:5f:67:1d:9b:64:0e:fa:42:a4:e7:ad:29:c6:ee:f3:
         35:da:f3:bd:77:91:98:d5:0c:65:19:99:ce:1c:e5:02:5a:4e:
         d6:eb:30:bd:28:19:20:7b:22:2f:01:fb:0f:e0:5a:9f:d3:a9:
         49:64:55:c8:28:06:67:1f:95:2a:c8:48:ac:12:5e:81:36:1a:
         8b:e3:d0:cb:c6:22:14:96:63:ff:10:b9:ba:01:e1:ba:00:75:
         f9:fb:d1:de:28:72:ca:5e:c5:98:80:82:24:f9:99:c6:d4:d9:
         64:a8:8c:38:37:b7:a9:f5:96:32:73:03:e8:46:2c:e8:c7:86:
         5d:53:22:48:e3:35:e5:f5:92:dd:03:48:29:8e:32:14:2d:62:
         82:6d:72:44:05:bc:67:65:6a:a0:a5:01:6b:b5:62:c1:06:d6:
         4d:ad:64:5c:10:ff:15:5c:a1:59:2a:0c:7b:4d:65:5d:a9:2d:
         25:6b:1c:93:4e:60:32:3f:8b:eb:4f:3e:10:8f:90:eb:a3:ee:
         af:e0:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----