Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/nf1t_w0ZO2n6RSXYAmlR5K5pJys.roa
File:                     nf1t_w0ZO2n6RSXYAmlR5K5pJys.roa (raw, json)
Hash identifier:          pDB87bFGmZjfTtE1DmjLQzE6IpznfjXV0Kd0cGvE0UY=
Subject key identifier:   9D:FD:6D:FF:0D:19:3B:69:FA:45:25:D8:02:69:51:E4:AE:69:27:2B
Certificate issuer:       /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial:       018CC64B5D89FFF58FA46A9259AB3A87C168
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/nf1t_w0ZO2n6RSXYAmlR5K5pJys.roa
Signing time:             Mon 01 Jan 2024 18:31:17 +0000
ROA not before:           Mon 01 Jan 2024 18:31:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42275
IP address blocks:        85.208.68.0/22 maxlen: 24
                          2a09:8340::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4b:5d:89:ff:f5:8f:a4:6a:92:59:ab:3a:87:c1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
        Validity
            Not Before: Jan  1 18:31:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9dfd6dff0d193b69fa4525d8026951e4ae69272b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:97:29:cf:f5:b2:2f:13:e0:ae:4c:32:ef:02:
                    77:38:31:3e:c3:68:91:3c:db:e4:b6:77:30:98:e8:
                    be:bb:07:2d:02:02:1e:e9:73:25:04:f3:2b:5b:d5:
                    68:54:64:5f:62:ff:68:a2:30:d2:e2:c3:92:9b:11:
                    36:cb:5f:52:1b:df:06:14:de:af:34:38:b5:41:cc:
                    c2:e4:e7:ea:37:e9:f3:aa:9d:c3:67:63:6c:74:12:
                    4a:f5:ec:33:67:94:44:5e:ac:a8:69:dc:63:13:3b:
                    e4:e2:74:25:0c:d8:56:f4:1a:ae:2a:ba:86:a7:33:
                    53:d4:01:cd:13:ba:c5:63:24:16:b7:5b:14:9d:45:
                    72:32:6d:39:d0:0d:97:c6:01:6a:15:74:66:48:d0:
                    73:e0:75:64:5b:f7:58:16:78:da:3c:76:c7:0b:32:
                    dc:a1:02:5c:71:10:6d:43:25:22:54:8c:07:c2:e9:
                    5e:09:14:7e:03:ff:ca:7e:2d:c9:98:b3:01:af:ee:
                    c8:ee:bb:28:ae:bb:1a:61:de:12:b7:ce:f8:9f:91:
                    6a:98:37:bc:3c:67:1f:97:c3:29:27:a9:cb:e9:2f:
                    14:2b:8f:fa:55:2e:a5:e7:d3:e9:79:8e:5a:a5:c6:
                    72:76:fe:d0:09:08:b6:47:59:33:1e:09:9f:9f:ff:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FD:6D:FF:0D:19:3B:69:FA:45:25:D8:02:69:51:E4:AE:69:27:2B
            X509v3 Authority Key Identifier:
                keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/nf1t_w0ZO2n6RSXYAmlR5K5pJys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.68.0/22
                IPv6:
                  2a09:8340::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:58:9b:db:23:ae:e7:09:ed:d9:07:53:18:65:a6:88:ec:59:
         f9:98:37:0a:92:bb:be:c5:bc:a0:e3:db:b3:08:c7:32:df:9e:
         75:37:bf:ca:07:70:94:7a:ef:0b:f6:0a:15:f3:fd:af:4d:22:
         d3:c3:68:e4:be:68:9d:11:d3:c0:21:51:0e:f6:6e:9c:22:5e:
         48:ba:dd:ac:fc:8d:79:49:0d:99:39:49:a6:0d:0d:71:88:6b:
         0b:09:53:ca:38:48:f5:a1:63:17:83:ad:9d:69:6b:a2:c8:af:
         35:9a:ad:78:12:e8:5c:4a:0a:7a:79:8b:98:b8:0d:45:63:b0:
         71:31:d4:40:d5:8a:1f:c8:38:c0:20:99:b2:4f:23:2d:88:9f:
         47:eb:12:24:e3:0e:c9:20:7d:63:72:25:70:9d:a1:80:ec:7f:
         63:88:3c:83:ce:c2:4d:5f:70:f8:83:4f:f3:cc:7c:c1:aa:91:
         85:d6:57:58:b8:6e:e5:9c:6e:dd:2f:43:05:d9:4a:6c:14:ca:
         83:39:7c:e3:48:7b:36:4d:bd:23:ff:fb:ab:61:61:55:6b:d6:
         8b:3b:3f:78:c1:aa:80:72:e3:fe:0b:be:64:9f:f0:83:b0:db:
         61:2f:ad:7e:94:a4:bb:7b:ad:ef:47:c5:f9:5c:5d:75:fc:16:
         41:4c:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----