Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/CSaeJl0Lp8OG9CGtokhwoVer4wc.roa
File:                     CSaeJl0Lp8OG9CGtokhwoVer4wc.roa (raw, json)
Hash identifier:          GczNzyG+KxE1arm2LdWY4+rffQFhe7Wwqa7HCPhwifE=
Subject key identifier:   09:26:9E:26:5D:0B:A7:C3:86:F4:21:AD:A2:48:70:A1:57:AB:E3:07
Certificate issuer:       /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial:       018CC2DAF01CCB901FB813103251DA10F2C8
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/CSaeJl0Lp8OG9CGtokhwoVer4wc.roa
Signing time:             Mon 01 Jan 2024 02:29:37 +0000
ROA not before:           Mon 01 Jan 2024 02:29:37 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210627
IP address blocks:        185.188.40.0/24 maxlen: 24
                          2a11:2c0::/29 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:f0:1c:cb:90:1f:b8:13:10:32:51:da:10:f2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
        Validity
            Not Before: Jan  1 02:29:37 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=09269e265d0ba7c386f421ada24870a157abe307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:39:79:9e:9c:26:ef:7e:48:38:4c:f4:f2:b1:
                    2b:8a:93:73:e8:66:26:aa:7b:da:22:80:fe:2a:36:
                    bf:23:57:67:c7:ba:92:3d:3a:1c:e9:58:63:b8:dc:
                    24:23:39:d5:f3:5a:04:85:f7:63:d7:c0:13:b2:8c:
                    0e:f1:e9:6d:2f:aa:f3:f6:67:48:b3:51:b4:7e:cb:
                    68:87:7d:ee:ef:d2:68:b9:de:19:d2:c7:ac:e8:91:
                    5c:1f:00:93:36:77:2d:08:5f:75:82:89:a0:2b:33:
                    14:dc:ed:aa:1d:60:52:6b:b6:01:9c:c4:16:9f:23:
                    4e:4b:e5:ba:af:7b:74:f1:99:8f:b1:11:37:17:5e:
                    d2:de:da:7c:60:1c:fc:59:64:3a:81:5b:6d:74:bc:
                    b3:d9:cd:91:68:f0:19:a6:e7:50:ff:ec:6a:5e:01:
                    67:7d:34:21:0b:5d:cb:f6:80:ca:da:b2:76:3c:87:
                    dc:07:62:85:37:bd:c4:c2:a9:14:f9:50:c6:c8:dc:
                    d0:2d:5b:06:e4:0a:df:7e:8d:1c:45:7d:f7:f6:4b:
                    ec:04:26:6b:e3:98:3a:ed:1c:a1:a0:ee:a6:6c:f8:
                    d6:71:3a:7a:ba:19:31:e4:41:b8:e9:8b:06:3c:77:
                    f9:e1:40:11:0a:91:bb:d1:de:b8:1e:f2:ef:b7:c8:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:26:9E:26:5D:0B:A7:C3:86:F4:21:AD:A2:48:70:A1:57:AB:E3:07
            X509v3 Authority Key Identifier:
                keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/CSaeJl0Lp8OG9CGtokhwoVer4wc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.40.0/24
                IPv6:
                  2a11:2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         55:79:71:96:02:f4:09:d6:a9:9d:43:01:7a:1a:7b:9b:18:9d:
         c5:ef:88:ff:bf:80:64:1e:d9:b3:c1:ae:2d:01:e9:2a:4c:cd:
         48:27:73:4f:9b:ad:a9:c7:d1:86:82:4f:d5:f9:6b:68:5d:77:
         ec:a0:d0:b0:f4:b7:f9:e5:9d:71:c3:ae:1a:80:00:04:ed:56:
         3d:79:12:bd:c6:2b:56:13:d8:1f:dc:0e:94:17:57:b3:72:9d:
         d2:b1:36:d0:de:f3:93:43:57:0a:c9:df:7a:97:db:c0:05:3c:
         56:4f:37:26:b9:9c:a3:90:d5:e2:6c:35:30:5e:d0:c4:ac:d4:
         ab:66:f4:b1:66:ac:6d:89:c0:7b:11:0f:6c:5e:e8:8c:31:ba:
         7c:fc:ca:d3:f6:6f:68:52:86:a3:6f:70:25:d8:3f:76:0f:5b:
         97:bc:cd:d2:b2:f9:83:a5:35:0d:43:24:25:ad:7b:24:d6:91:
         93:4b:3f:d4:11:df:0b:ed:ad:ef:23:ea:e7:90:59:34:a2:9c:
         2f:85:4a:28:2b:60:f8:27:dc:4a:37:e8:f6:b6:ee:05:90:0d:
         44:94:71:f6:a6:e4:40:51:07:26:78:8e:99:61:dd:9d:8c:2e:
         82:5d:d6:f3:83:68:56:dc:45:0d:27:81:c1:9a:7f:40:28:74:
         c7:f5:f6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----