Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/UobsdjDTC0oRtb3S5cgdpjMaQQA.roa
File:                     UobsdjDTC0oRtb3S5cgdpjMaQQA.roa (raw, json)
Hash identifier:          P4A9b/kw3kxGkvso1PBRJ2d4VrVDdWUOSKeFz8txf+c=
Subject key identifier:   52:86:EC:76:30:D3:0B:4A:11:B5:BD:D2:E5:C8:1D:A6:33:1A:41:00
Certificate issuer:       /CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Certificate serial:       018CC4246C14993C83D654D2404316CDC635
Authority key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/UobsdjDTC0oRtb3S5cgdpjMaQQA.roa
Signing time:             Mon 01 Jan 2024 08:29:30 +0000
ROA not before:           Mon 01 Jan 2024 08:29:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     52112
IP address blocks:        2a13:9640::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:6c:14:99:3c:83:d6:54:d2:40:43:16:cd:c6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
        Validity
            Not Before: Jan  1 08:29:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5286ec7630d30b4a11b5bdd2e5c81da6331a4100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6b:fa:72:e8:d8:67:80:00:44:32:89:b1:73:
                    f9:e5:0c:33:7e:cb:5a:75:4c:72:65:c7:28:f2:94:
                    2f:7e:9d:38:f1:f0:46:02:b5:23:c5:26:b1:79:af:
                    a6:f2:34:23:7d:09:68:12:ec:3f:26:e8:52:57:30:
                    49:09:c7:58:fd:05:da:04:9a:ca:4f:3d:c4:ed:e8:
                    74:7d:7f:0a:8a:a7:dc:bf:66:f9:b0:18:b7:88:0f:
                    bf:90:10:68:fa:2d:8c:e0:cd:b0:fa:27:91:67:5d:
                    b5:57:da:d2:e0:73:a0:c3:28:ee:f5:7f:89:73:4f:
                    52:b1:00:63:52:57:78:f8:36:82:29:79:86:e8:2b:
                    53:41:d0:a7:7b:dc:51:18:b8:45:16:29:e4:18:04:
                    4f:b5:98:63:9b:cc:0a:ea:42:ee:67:a6:d2:c0:c3:
                    62:c0:c4:c2:f3:f9:cf:ba:3f:60:80:46:4e:52:c9:
                    21:b8:84:9c:58:b9:a6:b4:bd:ae:ae:e4:30:50:e6:
                    31:47:c7:aa:3e:cc:3d:d9:c8:85:7a:ad:92:97:9a:
                    aa:85:f5:bd:c1:08:68:50:87:6c:e7:7b:db:df:c4:
                    00:6d:fb:40:a1:f5:8d:28:67:98:03:d9:61:a6:9c:
                    dd:a7:3b:92:bb:56:aa:01:19:b2:f1:58:49:2d:68:
                    48:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:86:EC:76:30:D3:0B:4A:11:B5:BD:D2:E5:C8:1D:A6:33:1A:41:00
            X509v3 Authority Key Identifier:
                keyid:EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/UobsdjDTC0oRtb3S5cgdpjMaQQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9640::/44

    Signature Algorithm: sha256WithRSAEncryption
         be:44:b3:f1:22:d5:4c:8c:de:fb:29:b9:40:c2:29:2a:f4:91:
         18:15:fc:7d:57:28:29:0e:87:08:f9:80:2a:f0:38:92:6a:23:
         2f:29:0e:07:32:e8:cc:f8:25:92:a4:19:3a:bc:db:7c:a0:47:
         0e:72:c8:35:6f:3c:34:b1:ff:55:af:88:21:bb:94:f2:e0:f6:
         4c:28:e2:90:db:2b:7c:48:e6:82:4e:5e:e4:a2:df:57:c8:2d:
         b3:8f:05:24:30:98:f2:d7:1c:ce:ef:59:a5:87:fd:18:25:bd:
         26:d5:2e:1e:6d:54:0b:a9:f4:12:70:90:98:86:4d:43:72:6c:
         33:55:a5:a0:6b:7b:7a:de:57:45:f7:a9:50:94:d1:33:cc:8b:
         ef:bf:64:3e:ad:71:b2:4e:67:9e:3d:12:57:f7:d6:cd:01:97:
         d5:c4:ee:2e:25:a0:4a:bc:65:aa:60:cf:5d:55:ff:94:1d:00:
         ba:56:ad:52:30:3b:f8:b3:a2:eb:1e:7a:6f:5d:19:7e:d0:41:
         c1:51:26:88:0c:16:ff:39:d3:6c:dc:25:11:f8:e9:11:b9:bd:
         5b:6f:5a:27:1f:b3:2c:bb:30:b9:c7:dd:5a:ed:54:6e:1c:11:
         d2:fd:88:3e:b7:94:18:e4:76:f2:8a:50:95:14:0d:3d:fa:d5:
         9c:85:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----