Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/l4uK-yayieCiI4ipj2Kc1UVAlcw.roa
File:                     l4uK-yayieCiI4ipj2Kc1UVAlcw.roa (raw, json)
Hash identifier:          50Q0NYy2xGxDWn8zO+bdIhyp2k9MHMlOstEwEsIF/jg=
Subject key identifier:   97:8B:8A:FB:26:B2:89:E0:A2:23:88:A9:8F:62:9C:D5:45:40:95:CC
Certificate issuer:       /CN=f73a6daf6522f29555519afd142d4a035c7492b8
Certificate serial:       018CC349552D02BDF36497A5BA5C7F6B05BF
Authority key identifier: F7:3A:6D:AF:65:22:F2:95:55:51:9A:FD:14:2D:4A:03:5C:74:92:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zptr2Ui8pVVUZr9FC1KA1x0krg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/l4uK-yayieCiI4ipj2Kc1UVAlcw.roa
Signing time:             Mon 01 Jan 2024 04:30:12 +0000
ROA not before:           Mon 01 Jan 2024 04:30:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56883
IP address blocks:        185.211.43.0/24 maxlen: 24
                          2a12:af80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/9zptr2Ui8pVVUZr9FC1KA1x0krg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/9zptr2Ui8pVVUZr9FC1KA1x0krg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9zptr2Ui8pVVUZr9FC1KA1x0krg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:55:2d:02:bd:f3:64:97:a5:ba:5c:7f:6b:05:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73a6daf6522f29555519afd142d4a035c7492b8
        Validity
            Not Before: Jan  1 04:30:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=978b8afb26b289e0a22388a98f629cd5454095cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:f3:ed:5c:5d:c2:24:96:e3:72:74:c3:7a:
                    31:dc:56:b4:2f:d3:46:a4:48:2a:a3:ff:63:b8:b3:
                    6d:5d:39:6c:01:4e:e3:02:09:73:4c:e8:77:c1:fa:
                    99:1f:31:bb:0d:bd:aa:0e:e2:e5:12:71:85:d6:b0:
                    11:43:9c:99:e4:35:2a:da:fe:fb:15:f9:54:58:25:
                    02:f5:dc:cc:14:ac:9c:00:4a:2b:ad:d0:42:b2:42:
                    d4:79:84:77:ed:b9:1e:d1:7c:a2:14:aa:6f:a3:b5:
                    5d:46:0a:3e:ee:72:b9:08:60:c0:e6:79:c6:0d:e9:
                    5c:8d:a1:c8:7f:b4:a8:71:0c:ca:4b:e6:99:c3:df:
                    5c:de:6f:2d:4e:15:36:33:ff:e6:ad:73:f5:96:50:
                    f4:f4:70:d9:2c:52:25:4c:31:00:59:8f:07:25:1e:
                    00:54:13:25:6e:d6:f0:64:d8:78:8a:38:c4:8e:46:
                    f6:06:a8:ae:d2:45:3f:d6:ce:b6:8a:78:b0:07:b6:
                    e5:30:9d:1e:06:b6:19:31:cf:d5:ea:bd:1f:d2:0b:
                    dd:31:75:af:9e:a8:61:ce:9b:1a:c2:26:70:e9:18:
                    7a:93:95:83:58:51:9d:02:74:73:ed:20:d2:69:e0:
                    ed:b0:b4:99:68:87:23:7c:d2:f5:e3:a4:5c:f5:05:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8B:8A:FB:26:B2:89:E0:A2:23:88:A9:8F:62:9C:D5:45:40:95:CC
            X509v3 Authority Key Identifier:
                keyid:F7:3A:6D:AF:65:22:F2:95:55:51:9A:FD:14:2D:4A:03:5C:74:92:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zptr2Ui8pVVUZr9FC1KA1x0krg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/l4uK-yayieCiI4ipj2Kc1UVAlcw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/9zptr2Ui8pVVUZr9FC1KA1x0krg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.43.0/24
                IPv6:
                  2a12:af80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:6c:06:3e:0c:bf:58:50:1a:fc:81:0d:ec:86:1d:b2:05:53:
         32:57:76:64:de:9e:c0:ea:d1:d6:7a:ae:c2:91:64:ba:4a:35:
         b5:40:84:3e:da:ab:df:16:75:08:51:60:31:a3:37:0d:88:f1:
         2c:e1:7c:1e:cd:af:40:dd:67:78:22:27:29:75:01:81:f5:32:
         d1:df:33:0b:62:10:e0:19:0f:8f:cd:05:6f:48:fa:47:27:1f:
         05:ae:05:fc:e2:f1:93:01:0d:78:7b:91:fa:d6:20:f8:2a:ff:
         2a:fd:ab:9a:13:cc:ab:86:d4:1a:69:a1:7d:28:bd:12:d7:51:
         8b:d0:a6:f3:87:ec:34:04:c6:51:11:3c:dc:2e:f6:21:07:5a:
         8f:1b:6e:80:5c:22:ab:38:74:c1:30:76:d7:38:0b:61:e2:4d:
         28:a9:81:63:78:7f:2e:55:00:9e:48:57:61:ec:12:bc:de:32:
         a8:6f:27:14:a0:11:3f:9f:96:60:dc:26:f4:f1:c7:7e:71:b5:
         65:b9:a2:ec:25:e5:3c:ee:6e:82:d9:e3:e1:88:22:8e:e3:cd:
         6c:af:1f:8e:ce:59:88:92:ce:dc:dd:02:9f:07:2e:c8:3e:70:
         b1:b7:83:4a:4c:fa:8b:ef:b8:3f:e2:51:d0:f3:45:6b:13:81:
         b7:63:47:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----