Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/na1HyxcNWgVwipCYs_tT3cZbp8g.roa
File:                     na1HyxcNWgVwipCYs_tT3cZbp8g.roa (raw, json)
Hash identifier:          JEgdnH/mRpsfub+sTOrDfmoId3yK1iXxum2P8sP/IlU=
Subject key identifier:   9D:AD:47:CB:17:0D:5A:05:70:8A:90:98:B3:FB:53:DD:C6:5B:A7:C8
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       018CC86FC116CE8A92DCF57E9DE89C064804
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/na1HyxcNWgVwipCYs_tT3cZbp8g.roa
Signing time:             Tue 02 Jan 2024 04:30:16 +0000
ROA not before:           Tue 02 Jan 2024 04:30:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56769
IP address blocks:        2a0f:b4c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:c1:16:ce:8a:92:dc:f5:7e:9d:e8:9c:06:48:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Jan  2 04:30:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9dad47cb170d5a05708a9098b3fb53ddc65ba7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:be:42:2e:7c:31:32:15:1a:cd:81:ca:57:9e:
                    48:0a:2b:70:20:b1:62:8b:be:be:e3:9f:ee:37:98:
                    6b:69:53:46:b6:9f:31:a4:3a:e5:7a:6d:48:b4:4e:
                    bf:2d:f7:28:be:f8:a1:41:d2:80:90:35:73:ce:3a:
                    38:5b:f1:ca:8c:bf:78:43:68:33:13:0b:70:ad:47:
                    94:12:01:62:44:4e:00:de:b4:0b:0e:f4:d9:19:ea:
                    4d:38:b9:ee:8a:b4:a6:32:5b:10:af:c5:f1:22:ca:
                    76:3b:e5:cc:83:88:b8:b6:cb:8e:bf:b1:24:a6:ee:
                    d7:53:5a:e1:dd:fd:01:e9:92:78:53:a6:7f:4d:45:
                    c5:83:b3:51:80:06:de:f3:c1:ad:2b:47:74:c9:2b:
                    5e:a5:49:1d:97:a5:68:7f:2b:56:f3:c4:5c:f1:5a:
                    ce:d5:49:b7:15:82:8b:eb:f1:b5:93:1d:d2:27:49:
                    8f:c9:ef:f3:3a:1d:f7:cf:c9:f5:c5:44:99:db:52:
                    b2:06:53:3f:c5:79:3a:2b:0c:98:ae:b5:a5:ef:43:
                    42:13:34:c9:9f:60:88:1c:ef:1b:a9:37:51:75:63:
                    ad:1a:58:f1:26:3e:4b:9c:74:63:55:c8:79:c8:d8:
                    af:d4:18:d9:14:f0:94:ce:9a:37:2c:b3:6f:db:ce:
                    d0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AD:47:CB:17:0D:5A:05:70:8A:90:98:B3:FB:53:DD:C6:5B:A7:C8
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/na1HyxcNWgVwipCYs_tT3cZbp8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:ce:8c:3c:c3:bf:05:87:1e:32:dd:18:43:0f:9e:95:fd:f4:
         ee:d0:d6:56:0f:e3:11:0c:0b:61:ac:df:e9:21:ad:03:cb:17:
         51:94:7a:e0:66:26:c8:dc:9c:7b:91:1c:f8:3b:bc:5d:9d:53:
         a3:48:ed:31:ee:32:c4:16:b6:15:9b:20:4a:20:d0:4f:e9:e9:
         25:1e:9d:29:58:bd:b6:2e:bd:e0:8c:92:83:f2:59:1b:80:ce:
         63:6b:68:76:7c:28:f2:93:4f:17:13:9d:d5:7e:94:50:7e:ca:
         18:f6:f9:dd:43:bc:c7:53:ac:72:2c:dd:02:27:eb:08:1d:0e:
         4a:07:a7:6c:bf:11:6f:8f:b7:ae:c1:ca:5e:e0:2c:42:c7:0f:
         9b:0b:6d:74:7b:5c:c2:eb:74:f8:43:e7:c4:b1:84:0c:5a:3e:
         26:ca:e5:97:6c:ff:ae:1e:14:51:99:a1:c4:c2:32:04:99:e1:
         e9:50:c5:ec:7f:1b:23:10:b6:73:99:07:6c:52:60:95:59:b6:
         82:ba:de:b8:60:be:04:74:54:fa:13:9b:ff:e1:42:24:27:b7:
         71:4e:83:53:c4:d4:bb:85:e3:f9:dc:90:2b:e8:6a:3c:92:95:
         ba:3d:a0:c2:d4:e7:87:e1:a9:18:75:50:36:d3:93:aa:82:40:
         61:2e:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----