Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/z2T9r-RC8wF66azEWhPwVep1sSI.roa
File:                     z2T9r-RC8wF66azEWhPwVep1sSI.roa (raw, json)
Hash identifier:          oPjxeIidhVB3gGP7Whf5IsHV6EI5CurwkB5KQsfzMRU=
Subject key identifier:   CF:64:FD:AF:E4:42:F3:01:7A:E9:AC:C4:5A:13:F0:55:EA:75:B1:22
Certificate issuer:       /CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
Certificate serial:       018DC60039F0128BD73249DF7199385E0EE7
Authority key identifier: 0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/z2T9r-RC8wF66azEWhPwVep1sSI.roa
Signing time:             Tue 20 Feb 2024 10:12:00 +0000
ROA not before:           Tue 20 Feb 2024 10:12:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12540
IP address blocks:        212.64.160.0/19 maxlen: 19
                          212.64.186.0/24 maxlen: 24
                          2a0d:fc0::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:c6:00:39:f0:12:8b:d7:32:49:df:71:99:38:5e:0e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4a861d7c14b4ca5e6d1c7d60aaeeb32ea8ef61
        Validity
            Not Before: Feb 20 10:12:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cf64fdafe442f3017ae9acc45a13f055ea75b122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:f9:94:13:b2:6a:e4:74:e2:37:06:6f:c5:
                    1e:f9:cd:8a:01:c7:8e:67:54:bd:a6:3e:06:62:bf:
                    13:b3:d5:28:ce:d5:f7:36:67:b7:27:6b:bb:93:b0:
                    d3:8e:c0:3a:41:bd:15:e6:86:b0:95:80:37:be:ba:
                    ab:f7:7c:06:f3:72:80:f2:5c:d1:3b:cb:aa:13:56:
                    65:2f:7a:ff:1a:ef:4a:5e:ed:cb:8d:08:83:fe:67:
                    63:f9:73:84:9d:6e:be:fe:fa:cd:c4:2d:f3:69:8e:
                    ce:46:cb:a0:a1:25:ae:54:d6:be:44:1a:d4:b2:8e:
                    b6:2d:ef:c0:e2:28:c1:36:98:71:89:aa:48:95:b7:
                    de:aa:c9:e1:c7:8b:e5:4e:6a:c6:97:70:5f:37:50:
                    ec:df:a6:d8:e3:bf:01:f2:48:08:4c:14:60:5e:15:
                    61:60:34:23:75:a5:fa:f5:69:2c:7e:18:69:7f:5a:
                    ab:66:16:b6:c2:73:dc:f7:59:b5:23:65:db:60:4d:
                    bc:e6:2e:e4:5e:36:e8:e4:59:0a:5f:15:8d:3e:d4:
                    92:23:20:41:33:5d:54:a3:da:85:fb:99:c3:44:49:
                    a1:c4:23:6a:a3:10:a5:1a:6d:4a:04:c2:6f:8c:fc:
                    be:6a:56:52:c0:0f:3f:07:2b:d8:e4:98:3c:0f:85:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:FD:AF:E4:42:F3:01:7A:E9:AC:C4:5A:13:F0:55:EA:75:B1:22
            X509v3 Authority Key Identifier:
                keyid:0A:4A:86:1D:7C:14:B4:CA:5E:6D:1C:7D:60:AA:EE:B3:2E:A8:EF:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkqGHXwUtMpebRx9YKrusy6o72E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/z2T9r-RC8wF66azEWhPwVep1sSI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e792b0-0f79-4fa2-a5cb-94dbf3fd0e2d/1/CkqGHXwUtMpebRx9YKrusy6o72E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.64.160.0/19
                IPv6:
                  2a0d:fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:39:84:55:fc:3d:bc:18:5d:b1:7c:f5:a9:ae:40:e0:54:
         0e:5b:da:a2:9c:1f:b9:6c:7d:9e:49:ed:a0:e0:af:c1:49:fe:
         4d:20:e4:44:29:00:7b:9e:a4:f0:ba:ac:17:17:6e:40:da:93:
         82:3a:f5:42:99:60:4f:93:ac:e0:af:6d:c5:78:02:0a:23:8c:
         bc:67:ff:32:f0:ac:3d:fa:34:9c:07:e8:3b:d1:33:84:9e:ed:
         42:1a:c7:de:0a:b2:2d:d3:09:d3:fa:1b:84:bc:59:49:96:6b:
         0b:8c:23:e3:1d:75:2c:58:75:7c:19:ae:6d:e2:17:f1:44:6f:
         10:64:55:02:5a:ef:47:0f:0f:82:d1:73:96:5d:fd:ec:31:1e:
         7c:1b:19:81:6f:3f:5d:53:83:3d:1a:6b:e6:c7:0d:ad:17:32:
         9d:43:71:1f:e0:2e:06:0f:b0:82:29:41:c2:f4:be:a4:06:82:
         fa:d8:35:8d:db:7e:e6:9f:3f:72:32:ce:03:eb:4f:67:27:db:
         e1:d3:5e:5f:84:c6:1d:45:fe:a6:59:cc:a3:19:ee:53:a2:68:
         cd:97:e4:d2:39:aa:30:bd:ff:e0:60:29:60:ca:85:8c:65:a2:
         05:f0:f0:65:89:49:69:7d:17:90:c4:6b:fc:33:da:ee:d6:12:
         6e:42:e6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----