Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/qgmT6giBQNedAqq1X3QTUXXuqU8.roa
File:                     qgmT6giBQNedAqq1X3QTUXXuqU8.roa (raw, json)
Hash identifier:          m6t1v6ysaNmdguDi6/I/aYd3UL4zuCQ5xfdNdkezv4I=
Subject key identifier:   AA:09:93:EA:08:81:40:D7:9D:02:AA:B5:5F:74:13:51:75:EE:A9:4F
Certificate issuer:       /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial:       018D4178CA1FF7326703060FB42E87C7BB8C
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/qgmT6giBQNedAqq1X3QTUXXuqU8.roa
Signing time:             Thu 25 Jan 2024 16:34:11 +0000
ROA not before:           Thu 25 Jan 2024 16:34:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205229
IP address blocks:        185.224.176.0/22 maxlen: 24
                          185.224.179.128/26 maxlen: 26
                          2a14:3900::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:41:78:ca:1f:f7:32:67:03:06:0f:b4:2e:87:c7:bb:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
        Validity
            Not Before: Jan 25 16:34:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=aa0993ea088140d79d02aab55f74135175eea94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:43:0e:60:3b:fc:65:3f:9c:61:e6:cf:f0:42:
                    75:4b:ea:f7:38:01:e6:8d:ce:83:65:d5:04:47:08:
                    62:0d:b1:84:90:4a:d0:ef:c7:76:62:34:a8:92:9e:
                    63:14:c0:ee:df:f2:82:ff:3d:5a:ba:af:84:dc:53:
                    d7:92:86:71:99:24:bd:a0:a7:64:b8:78:21:af:f1:
                    e6:c6:17:66:26:a4:8f:88:e8:64:fd:97:2c:54:19:
                    e9:34:6e:ca:70:ad:b3:04:ef:8b:37:36:2f:7e:8b:
                    2a:02:25:2c:bf:af:1e:bd:e7:c3:62:7c:63:ee:e8:
                    fd:58:f7:a7:c5:79:85:9c:f9:31:f8:dc:14:20:58:
                    16:10:b6:c5:05:05:af:58:24:25:c8:ce:7b:1a:8c:
                    29:09:34:58:bc:71:b9:0c:c4:0d:e3:cb:f4:e7:12:
                    dd:a1:27:d0:27:fc:15:ef:27:94:7f:33:16:82:cb:
                    05:09:9b:34:08:24:09:7c:bb:44:9a:a2:a7:40:aa:
                    fb:2b:ed:06:a4:a3:12:29:49:d1:20:d7:22:8c:3d:
                    9a:b9:c9:0c:ab:54:08:d8:14:6c:a7:cb:06:18:46:
                    35:cc:f3:1d:2c:2d:7b:b7:5b:38:98:8b:13:95:46:
                    80:2c:f7:d8:55:a0:92:27:dc:ca:0e:ef:fb:0f:21:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:09:93:EA:08:81:40:D7:9D:02:AA:B5:5F:74:13:51:75:EE:A9:4F
            X509v3 Authority Key Identifier:
                keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/qgmT6giBQNedAqq1X3QTUXXuqU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.176.0/22
                IPv6:
                  2a14:3900::/29

    Signature Algorithm: sha256WithRSAEncryption
         6a:39:62:32:12:f1:00:dc:de:a9:9a:4b:bd:b6:d8:fb:0b:5a:
         24:44:f7:3e:62:b0:c7:af:e7:3f:57:29:72:ae:8f:bf:e1:7a:
         03:da:46:85:b8:71:9a:be:c4:7b:e6:61:54:33:c4:df:b0:0c:
         ba:d0:95:99:bd:3c:9c:bf:53:e9:c8:21:94:80:dd:c7:da:4f:
         c7:b6:40:b1:63:3e:ce:95:c3:71:bb:a1:82:e0:f0:d2:70:9b:
         a2:dc:3c:69:9f:5b:58:b2:23:3f:ca:6b:c1:41:fb:b3:39:4d:
         49:71:45:e7:1f:6e:a0:75:92:6b:80:f3:e0:6f:40:02:33:70:
         3a:de:a7:17:a2:31:37:fd:0e:ed:63:cf:da:0c:4f:ad:8c:b4:
         8f:a4:21:7e:d8:9d:dd:1a:f0:6b:64:83:20:ea:d5:78:30:b9:
         54:64:1f:dc:0e:db:fa:d9:c7:6a:22:91:b2:ec:a2:20:6e:62:
         f3:df:b0:bd:b3:ae:a7:d9:74:f9:d6:d9:4d:7e:26:85:15:a6:
         7f:5f:65:7e:3c:9d:24:6b:5b:0f:41:ac:3a:1d:e4:3d:01:6c:
         34:7f:69:d3:d8:1b:c6:cb:2b:aa:5d:f8:49:81:58:15:cf:7d:
         0f:98:12:86:61:d3:a5:93:6a:91:92:86:4c:1c:5f:70:c8:b5:
         bf:9c:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----