Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/9gfIe-s4mtS-U6i3yotUrecvOJY.roa
File:                     9gfIe-s4mtS-U6i3yotUrecvOJY.roa (raw, json)
Hash identifier:          Q3LL4h797YEo9UwhEYI6MEhwYh/0zgcVAuKat9wjWAE=
Subject key identifier:   F6:07:C8:7B:EB:38:9A:D4:BE:53:A8:B7:CA:8B:54:AD:E7:2F:38:96
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       018CC26D25F84B2CB69F4DC17EF30507E163
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/9gfIe-s4mtS-U6i3yotUrecvOJY.roa
Signing time:             Mon 01 Jan 2024 00:29:42 +0000
ROA not before:           Mon 01 Jan 2024 00:29:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     135028
IP address blocks:        2a0e:aa07:f010::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:25:f8:4b:2c:b6:9f:4d:c1:7e:f3:05:07:e1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 00:29:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f607c87beb389ad4be53a8b7ca8b54ade72f3896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b4:a1:66:53:be:9c:73:d2:97:15:2d:e7:3b:
                    17:e3:88:28:6e:5c:6c:d9:c9:48:ef:23:cd:62:3b:
                    13:7e:83:17:9c:78:40:70:76:ec:f0:22:80:be:fe:
                    e5:76:09:0b:20:6e:b6:49:85:7d:c8:68:86:40:04:
                    b4:ff:c9:b2:52:a7:51:32:8c:c5:6e:0f:97:3f:99:
                    22:26:ca:4a:d3:b4:b8:36:d5:93:28:ff:a6:63:f7:
                    ab:57:1a:60:82:8d:de:bc:2f:c6:35:1d:1d:ce:3a:
                    c1:d6:34:2d:e8:57:fd:42:5b:58:e0:f7:0c:8c:3a:
                    b6:c5:61:04:09:79:60:d1:e4:47:fe:bb:a0:fd:49:
                    33:cb:e6:10:c1:7f:bc:49:53:bf:6e:31:c5:ec:6e:
                    16:0e:ba:2a:65:a3:cc:e1:cd:94:69:1e:e1:28:c0:
                    ac:e4:b9:d9:9b:f5:fb:fd:6e:6d:97:38:48:ee:7b:
                    c1:d1:fe:eb:8e:4a:03:4e:5f:58:5f:41:5e:e5:db:
                    6f:d7:6f:68:af:8c:bf:96:ec:44:28:d1:a7:aa:6e:
                    9d:9d:ca:23:46:2c:f0:81:42:4a:12:fe:fa:47:e3:
                    9b:e1:db:d0:79:94:2e:58:1a:24:87:97:60:8a:68:
                    87:8e:c4:3f:a9:22:33:ba:73:cd:6d:7e:20:ae:80:
                    8a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:07:C8:7B:EB:38:9A:D4:BE:53:A8:B7:CA:8B:54:AD:E7:2F:38:96
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/9gfIe-s4mtS-U6i3yotUrecvOJY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:f010::/44

    Signature Algorithm: sha256WithRSAEncryption
         be:4d:a2:dc:54:2c:d8:b1:ba:ff:af:79:5d:bc:e0:28:fc:3a:
         cd:b0:fa:84:1b:53:b4:54:17:32:56:98:99:eb:fa:08:17:e7:
         4d:94:10:45:26:11:aa:22:4f:15:f0:5b:c5:2b:9f:11:d8:23:
         9d:00:a3:31:3f:e9:2b:b1:93:e8:55:a9:ce:7d:d3:b1:bf:d7:
         c3:c2:76:c8:69:0b:bb:b1:84:a5:ee:82:1a:41:1c:74:d6:4a:
         9c:1a:da:54:a4:c0:09:39:22:d5:ba:07:28:32:f3:11:ab:84:
         7d:69:b3:ab:cf:02:61:7b:cc:fc:5f:80:e6:23:2c:cd:8f:d9:
         e0:c2:5c:9a:af:9e:72:ae:7e:4c:b4:39:5a:27:2b:53:e6:25:
         a1:52:06:34:f5:ba:be:d3:4b:64:07:20:c4:13:5b:11:b5:05:
         04:16:cb:fa:7d:90:20:48:70:51:d0:f6:7b:39:bc:7f:71:d1:
         e5:93:76:5f:ca:29:89:67:c8:21:1e:6f:d2:b8:9b:f8:b7:db:
         d1:b7:cb:09:d0:20:1a:6f:6d:8d:2d:27:88:00:f5:06:a1:67:
         26:45:1d:70:75:f6:d3:70:43:90:57:b6:ed:cd:6d:cd:79:f9:
         34:8a:fc:e8:dd:e4:f0:f6:7a:27:e1:4e:59:50:96:62:a6:bc:
         e0:26:c7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----