Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/1-vAep-SXwHSOBMCQzV8X2I8BFCE.roa
File:                     1-vAep-SXwHSOBMCQzV8X2I8BFCE.roa (raw, json)
Hash identifier:          /n00LWX8AanF05iJxbBwVN0Q0TxpNbmt1o/bj4EmgBM=
Subject key identifier:   FA:F0:1E:A7:E4:97:C0:74:8E:04:C0:90:CD:5F:17:D8:8F:01:14:21
Certificate issuer:       /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial:       018CC492A9268A77042CF7BD32FC7C02AF4D
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/1-vAep-SXwHSOBMCQzV8X2I8BFCE.roa
Signing time:             Mon 01 Jan 2024 10:29:54 +0000
ROA not before:           Mon 01 Jan 2024 10:29:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25173
IP address blocks:        193.201.45.0/24 maxlen: 24
                          2001:67c:2004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:a9:26:8a:77:04:2c:f7:bd:32:fc:7c:02:af:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
        Validity
            Not Before: Jan  1 10:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=faf01ea7e497c0748e04c090cd5f17d88f011421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:03:5c:e9:6b:c1:3b:e0:41:dd:ce:5b:31:
                    24:01:2d:2d:7c:c7:93:c9:12:70:ec:cf:96:53:ff:
                    af:18:34:78:7c:c2:85:2a:b7:7c:78:ef:08:a5:a5:
                    08:33:93:ae:84:49:59:2c:b9:9b:15:05:09:a4:da:
                    b5:1f:ed:a2:3e:31:ce:7f:b8:53:62:11:2a:f1:7a:
                    3d:af:e1:fc:94:01:f5:d4:26:00:85:27:cc:a4:bf:
                    18:c6:0d:94:8f:48:f1:03:03:fd:1f:b9:be:f7:eb:
                    89:dd:7a:64:d1:fc:44:47:81:2f:54:45:7b:b2:1e:
                    58:11:52:7d:2a:2a:1d:32:64:67:e2:27:1b:a2:a8:
                    43:ff:1b:31:08:11:c8:47:50:be:f4:03:15:3b:6e:
                    4b:b0:6c:24:bc:2b:7b:d6:c9:54:93:c0:09:bc:61:
                    e3:6e:89:a1:5b:b4:af:55:b1:eb:b1:51:80:7a:78:
                    54:3b:e6:7d:24:be:14:47:74:20:1d:82:fb:91:74:
                    c5:61:75:cd:04:a8:65:94:f7:a1:69:47:2e:d2:a4:
                    70:05:0a:8c:16:62:df:28:fd:5c:0e:a8:76:86:f8:
                    b3:d5:84:82:db:4d:91:d9:b3:6a:66:93:3b:b9:9f:
                    2a:36:68:6b:4f:1c:45:29:3f:47:a4:62:fe:2c:1f:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F0:1E:A7:E4:97:C0:74:8E:04:C0:90:CD:5F:17:D8:8F:01:14:21
            X509v3 Authority Key Identifier:
                keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/1-vAep-SXwHSOBMCQzV8X2I8BFCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.45.0/24
                IPv6:
                  2001:67c:2004::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:fa:63:f4:c4:22:bc:27:fd:6b:01:dd:67:23:04:3c:fb:69:
         2f:92:14:3e:99:ac:08:1c:38:33:9f:50:54:1a:bd:ec:74:4f:
         79:5f:fc:a4:97:46:6e:b9:0c:59:21:fc:e8:44:93:9d:b2:ef:
         b0:9e:9e:b5:e6:2c:0d:85:cf:28:c5:3b:51:8a:95:28:87:e2:
         53:ca:5f:60:9f:52:35:03:f6:80:d1:71:cf:0b:15:e9:82:b8:
         a9:f9:40:4f:5b:ba:51:07:62:66:5e:f1:e1:f6:9f:b8:17:4e:
         64:3b:5a:c5:62:21:df:ad:2e:94:68:a0:45:b4:0c:5e:0e:5b:
         fc:1f:be:04:b2:ad:89:7d:32:40:35:d6:8e:98:16:68:fe:71:
         32:56:bf:d4:09:07:fb:02:58:e1:ad:a2:bc:f3:05:05:14:54:
         26:69:c4:11:2c:82:01:5d:bc:64:24:db:d1:dc:8d:3e:fa:8d:
         19:72:23:dc:7f:99:7e:82:38:9c:11:d1:eb:62:36:22:44:d6:
         ca:fa:bb:87:3f:9a:b9:2e:b0:92:7a:1c:70:00:c2:ad:47:06:
         c8:6c:fc:1a:34:74:f6:6f:ef:86:2d:39:26:9a:52:e9:18:79:
         da:12:3a:0e:d7:ca:4e:51:fa:f2:ec:bb:23:f7:d1:cd:58:70:
         12:ec:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----