Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/p2jPlO7M2pXrem9dm5e8Rt8NrS4.roa
File:                     p2jPlO7M2pXrem9dm5e8Rt8NrS4.roa (raw, json)
Hash identifier:          4G7/rBDu1fOzBYxyJFAnAShLkdyb3ZlulWYd0dhl6oQ=
Subject key identifier:   A7:68:CF:94:EE:CC:DA:95:EB:7A:6F:5D:9B:97:BC:46:DF:0D:AD:2E
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       018CC8016437D8E3835C20C2777AE952B915
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/p2jPlO7M2pXrem9dm5e8Rt8NrS4.roa
Signing time:             Tue 02 Jan 2024 02:29:43 +0000
ROA not before:           Tue 02 Jan 2024 02:29:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     26073
IP address blocks:        2a0e:1cc0:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:64:37:d8:e3:83:5c:20:c2:77:7a:e9:52:b9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jan  2 02:29:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a768cf94eeccda95eb7a6f5d9b97bc46df0dad2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:10:b5:e6:4c:2f:6a:3d:07:b0:52:6c:3c:
                    d9:70:56:b0:00:0f:5a:83:7a:7b:37:1d:b3:dd:3b:
                    89:27:fd:ea:2e:98:2d:7e:c9:e9:b8:c1:6d:52:67:
                    7c:19:08:2b:74:c4:3a:f7:8c:a5:cb:cb:ec:b6:de:
                    92:34:c4:4b:21:df:b4:cc:9e:1a:ff:5c:9b:0b:c8:
                    60:b0:41:7a:78:74:3f:e4:17:2f:c6:70:54:24:20:
                    45:eb:34:ea:17:90:f3:03:85:01:f8:8b:15:f2:0f:
                    f4:6c:8f:12:04:cd:2b:44:2c:62:de:9c:12:70:c2:
                    d9:b5:c1:8e:c3:bc:bd:19:98:da:8b:d1:f9:93:ea:
                    19:f9:cc:d1:8d:5d:e5:3f:08:ac:9a:90:b5:28:14:
                    9e:6a:f1:b4:0f:b5:53:31:f4:99:41:2c:03:d1:ba:
                    51:ac:06:87:68:c1:10:eb:5d:f7:42:ef:e8:e6:49:
                    f1:f1:5d:3c:8e:46:26:c5:17:16:c1:b1:34:5c:90:
                    f1:b4:a4:90:44:56:f9:c6:05:77:78:74:19:2f:1c:
                    7a:17:62:73:33:71:f8:26:13:0a:20:bb:13:50:8f:
                    ac:42:53:bf:3f:f6:e8:9f:c7:fa:14:34:fc:49:97:
                    95:d0:56:f8:f5:04:7e:6e:03:cc:1d:89:68:df:38:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:68:CF:94:EE:CC:DA:95:EB:7A:6F:5D:9B:97:BC:46:DF:0D:AD:2E
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/p2jPlO7M2pXrem9dm5e8Rt8NrS4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:1cc0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:b9:c0:ea:85:08:fa:f5:6c:17:51:e2:49:eb:da:35:7a:
         e3:13:0d:f1:ce:10:19:61:a1:e9:5c:a5:bc:99:63:0b:fe:03:
         26:2d:d4:f1:2b:61:4e:18:da:61:d4:c4:c0:3d:46:c8:dd:01:
         5b:42:3f:a8:0c:2d:07:b4:d5:2d:a5:63:cd:4e:c4:8e:31:1a:
         16:fa:97:b1:40:77:07:d2:ed:3f:78:bc:a1:ae:5f:83:31:d2:
         99:b0:50:8e:70:4d:65:8a:7e:b6:61:b1:fb:f0:76:3e:44:b5:
         a1:75:59:6c:6c:55:b4:8b:44:e1:15:25:1c:ec:6f:1a:8c:fa:
         a2:c1:5c:12:d7:eb:29:a0:86:9e:02:6e:45:d5:29:d6:42:d9:
         47:53:17:6b:93:a1:b3:03:64:2e:82:01:2d:50:0d:2c:29:25:
         bd:39:98:4d:ae:41:90:38:a1:1e:d0:88:3d:e3:a2:ca:fd:8b:
         d5:a3:62:54:be:41:b8:ce:bb:13:94:71:e8:e1:10:1c:54:18:
         fb:cc:99:2a:07:e3:8a:d8:bd:c5:00:66:0c:41:da:d4:ef:b1:
         e4:7d:45:15:5f:fe:d6:c2:9f:5b:e2:20:f7:b7:af:aa:72:8e:
         d9:d8:dd:d0:da:b4:fb:2d:09:8d:ff:01:95:eb:84:6f:a3:3c:
         55:e5:52:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----