Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/KYR_PIIcozqRwBRmJciJRANKPXM.roa
File:                     KYR_PIIcozqRwBRmJciJRANKPXM.roa (raw, json)
Hash identifier:          UINbezZRXXo3Be0NCts/ztM5SxfqEP5KtJQilP4W2CQ=
Subject key identifier:   29:84:7F:3C:82:1C:A3:3A:91:C0:14:66:25:C8:89:44:03:4A:3D:73
Certificate issuer:       /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial:       018CC94DE5BFF2BD9D2DCF497181BCBD6894
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/KYR_PIIcozqRwBRmJciJRANKPXM.roa
Signing time:             Tue 02 Jan 2024 08:32:54 +0000
ROA not before:           Tue 02 Jan 2024 08:32:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     32482
IP address blocks:        2a0f:58c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:e5:bf:f2:bd:9d:2d:cf:49:71:81:bc:bd:68:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
        Validity
            Not Before: Jan  2 08:32:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=29847f3c821ca33a91c0146625c88944034a3d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:e9:d9:87:85:8a:64:9e:19:ec:9b:a8:19:
                    6c:12:e1:28:ad:8c:5f:3b:e1:1e:14:ef:ab:74:aa:
                    75:2c:29:f8:07:ae:ce:fe:3b:4c:93:26:84:3d:5a:
                    76:ac:81:cd:b0:7d:3d:6d:97:b1:00:10:5f:e1:05:
                    22:db:36:c3:cd:68:73:2f:52:f8:26:7a:f1:db:af:
                    24:41:ae:81:df:01:ad:c4:ed:76:93:31:c6:57:0b:
                    0b:b5:95:3e:59:b4:bd:cc:1c:de:e0:41:30:1e:f6:
                    6e:9e:c3:35:66:9e:b1:9f:76:14:66:8c:c1:27:56:
                    26:48:ba:61:c2:59:33:c6:dd:89:09:9b:9f:e8:0c:
                    c0:41:eb:39:56:a4:6e:26:33:28:d6:50:e0:5e:99:
                    8d:33:03:f6:c8:c0:18:90:17:18:c9:e3:c7:4b:cb:
                    8b:2c:3f:3c:89:7e:8c:2f:83:88:c9:6c:af:42:66:
                    47:c1:03:f9:96:93:35:d2:da:dc:e6:f6:e0:73:e0:
                    9f:0d:95:c7:4b:ea:cd:20:54:60:28:46:86:c2:19:
                    a1:84:2b:6d:67:e8:b8:16:b9:31:9a:fc:26:03:2f:
                    2e:01:69:d7:88:6e:ee:b4:67:fe:31:58:6d:a4:00:
                    b9:7d:7e:cd:e3:01:64:cf:a2:04:4e:ed:5c:55:6c:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:84:7F:3C:82:1C:A3:3A:91:C0:14:66:25:C8:89:44:03:4A:3D:73
            X509v3 Authority Key Identifier:
                keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/KYR_PIIcozqRwBRmJciJRANKPXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:58c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:67:2a:50:f4:c3:d7:21:8a:de:fd:0f:57:5d:1f:3f:c4:
         ad:0f:92:62:f4:2d:13:1f:5c:c4:ca:8e:f2:40:29:42:41:38:
         bb:76:58:db:86:bf:84:d5:f7:cb:c5:75:e4:bf:65:d5:c1:f4:
         18:72:c6:3a:b0:6c:5d:a3:de:8a:bc:f1:40:7f:b2:6e:f0:da:
         91:84:6b:61:6e:a1:a3:10:65:d5:89:ed:fa:3e:3b:58:a4:80:
         f5:b0:0b:d4:76:4b:e0:8d:be:c3:f2:84:4a:e2:73:32:b9:e1:
         e9:60:a5:f9:63:e1:2c:eb:b6:52:c0:d7:50:ea:b7:ed:4b:38:
         ef:73:f8:68:c8:d0:f4:7e:76:31:af:f4:0e:95:ea:c6:c0:78:
         2c:02:3a:1c:c4:25:af:d6:1d:07:2e:82:17:3c:3b:49:cd:13:
         4c:c2:0c:b4:36:b0:20:e9:c8:84:52:41:98:5c:25:1a:6c:8e:
         9d:ca:7a:76:82:fd:7b:49:cf:4a:96:84:a1:ce:12:f8:c8:8e:
         64:1e:55:b7:24:3c:a4:fd:2f:30:8b:2a:8c:e0:6e:16:0f:de:
         7e:09:b3:0b:29:80:35:aa:ff:5a:3c:4b:94:93:7a:25:73:3c:
         94:f8:9c:b1:d9:57:6e:20:42:96:fd:11:5d:91:2e:5e:f2:c7:
         c1:7f:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----