Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/XsDf8iSlvK2hHkgOEZv2P1sai0o.roa
File:                     XsDf8iSlvK2hHkgOEZv2P1sai0o.roa (raw, json)
Hash identifier:          rsBIa7gCXZSVrq93KvVqCLEb9DirsSPlLxq0MOUQqig=
Subject key identifier:   5E:C0:DF:F2:24:A5:BC:AD:A1:1E:48:0E:11:9B:F6:3F:5B:1A:8B:4A
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       018CC26D442ABAE0E4F815CC4A3B82A0A3F8
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/XsDf8iSlvK2hHkgOEZv2P1sai0o.roa
Signing time:             Mon 01 Jan 2024 00:29:49 +0000
ROA not before:           Mon 01 Jan 2024 00:29:49 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212371
IP address blocks:        2a0e:aa07:e047::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:44:2a:ba:e0:e4:f8:15:cc:4a:3b:82:a0:a3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 00:29:49 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5ec0dff224a5bcada11e480e119bf63f5b1a8b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:21:37:2e:28:63:9a:1e:a4:8d:b6:63:a7:65:
                    75:01:4e:d0:eb:15:1a:3c:0f:61:fc:1e:bb:88:af:
                    f3:7b:ec:71:89:14:0c:00:74:a7:14:af:77:78:92:
                    1f:89:cf:15:28:3a:47:d1:82:a6:18:98:c9:95:3f:
                    e7:60:aa:b5:61:4d:1c:eb:e7:0f:55:a4:61:d6:85:
                    fa:22:0f:78:40:16:db:d5:18:1f:a8:1f:75:3a:8b:
                    57:b9:1c:2b:f3:1c:24:e2:16:46:20:55:02:c5:80:
                    0c:af:bd:03:50:df:21:2c:75:62:a4:13:86:7b:e4:
                    98:0e:f3:f4:b7:eb:75:b2:ed:93:9f:d3:9c:7d:7e:
                    48:92:c5:c6:a1:00:5c:f7:a6:c4:6e:60:6e:5d:4f:
                    66:35:03:3e:b9:7b:d5:c0:29:d6:07:a0:2f:be:11:
                    c5:39:40:6e:c9:31:11:a7:a9:f7:a4:a7:dd:50:bf:
                    5c:7a:43:02:7d:f5:37:ac:2a:dc:79:3c:9c:e8:2f:
                    76:24:15:c3:a5:b4:60:aa:d6:3f:0b:f6:33:b2:cd:
                    ae:ad:c9:dc:9b:82:1c:8d:ce:d8:62:c5:18:de:22:
                    40:5c:58:8d:83:aa:4c:07:ee:45:b3:7b:31:61:80:
                    33:91:6f:08:0c:c2:22:88:95:6d:63:5c:18:38:b8:
                    f4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C0:DF:F2:24:A5:BC:AD:A1:1E:48:0E:11:9B:F6:3F:5B:1A:8B:4A
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/XsDf8iSlvK2hHkgOEZv2P1sai0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:e047::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:0a:c0:12:45:07:3c:9b:f1:e4:a0:2c:f1:61:50:f4:30:41:
         d4:50:22:cf:1a:a2:be:1b:d6:5b:05:9e:d9:52:fb:25:87:c7:
         70:f3:7f:a3:52:87:c8:1c:de:2c:fc:bd:ae:e6:5f:fe:cf:94:
         fa:89:57:f7:cc:f2:45:1b:63:0e:93:3e:73:c5:0d:fb:51:4d:
         66:e7:d0:54:2e:a5:58:02:c9:56:66:eb:95:9e:53:c7:e1:9e:
         96:b5:66:34:05:94:c4:4f:bd:e9:ac:76:dc:a8:ca:b6:ff:b3:
         76:a2:cc:84:49:32:a6:bb:18:fa:c5:f7:04:f1:79:62:ef:48:
         91:33:94:81:aa:fc:62:80:77:bb:6a:3e:72:48:79:3a:7f:56:
         74:a1:0e:27:e6:46:29:51:39:e4:ae:bc:7c:f5:76:5c:72:e9:
         d2:9e:b7:4e:f6:e1:03:28:52:16:a4:3e:4f:e5:44:3c:ea:d4:
         9d:a8:10:5c:7d:51:ba:f8:44:0c:b7:2e:3a:84:d3:c8:3c:3e:
         3d:46:29:71:7c:4f:5e:37:1b:cf:7a:a3:51:c3:72:1d:ec:af:
         96:f9:44:70:ee:0e:e3:26:a5:e4:1c:b7:1e:6f:c3:72:6e:3b:
         81:e5:44:32:c9:e1:17:2f:d2:29:c5:fc:3d:e8:7c:8f:fd:8b:
         1e:2d:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----