Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa
File:                     Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa (raw, json)
Hash identifier:          aV9ijG5xbK2AlYOJNT1d1Ex2iHxCo5sGJvE+INOlCs8=
Subject key identifier:   62:ED:2E:CC:AF:0F:5A:CC:28:43:4A:82:C3:C9:49:22:E6:06:BF:B1
Certificate issuer:       /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial:       0190D986590937FE8F4BFD7FB233A57FBB9F
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa
Signing time:             Mon 22 Jul 2024 08:19:38 +0000
ROA not before:           Mon 22 Jul 2024 08:19:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     30962
IP address blocks:        193.200.128.0/24 maxlen: 24
                          2001:67c:208::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:d9:86:59:09:37:fe:8f:4b:fd:7f:b2:33:a5:7f:bb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
        Validity
            Not Before: Jul 22 08:19:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=62ed2eccaf0f5acc28434a82c3c94922e606bfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:82:2a:39:5d:04:1a:27:2e:b1:2f:11:ff:
                    ca:9f:da:b9:cc:80:5d:60:6d:20:30:fe:ab:53:d4:
                    38:b8:8e:9e:f1:3b:9d:97:33:d7:16:13:ad:84:de:
                    e2:8c:6d:51:64:ac:6b:c8:97:20:d5:45:0f:b0:f9:
                    97:62:31:a0:cf:aa:58:58:93:31:c9:07:d9:d9:7c:
                    8f:78:6a:3e:55:b2:51:63:14:71:b0:be:00:b4:cd:
                    c6:77:7c:02:0d:be:f1:0d:75:bd:10:94:c4:9d:4d:
                    83:3e:dc:2a:43:98:42:a3:b0:cc:a4:3d:04:c9:bb:
                    2c:ff:a0:67:b8:02:cc:02:bc:3e:5d:a7:d6:12:ab:
                    5e:18:58:b4:d8:8f:61:b1:b2:04:de:6f:d5:39:de:
                    da:4d:c9:a8:af:d5:05:a4:f5:ab:1e:1e:45:74:5e:
                    8f:fb:7d:32:b5:d1:0e:b0:7e:80:81:ed:d5:13:e2:
                    94:43:3b:f2:73:91:1e:da:a9:a2:6a:1e:39:e0:c5:
                    06:a8:5d:c6:d3:fc:cc:c7:34:64:79:09:db:4f:a4:
                    bd:c7:b1:91:3b:d5:13:98:96:74:10:b4:a6:6d:27:
                    2b:da:5a:10:de:c9:99:c1:41:34:d7:73:a8:7b:2d:
                    4f:53:19:ee:50:d3:cd:ed:ab:05:03:7f:10:2f:f3:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:ED:2E:CC:AF:0F:5A:CC:28:43:4A:82:C3:C9:49:22:E6:06:BF:B1
            X509v3 Authority Key Identifier:
                keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.128.0/24
                IPv6:
                  2001:67c:208::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:f7:5a:82:54:78:58:d1:82:fe:17:2f:9c:42:10:7d:31:e8:
         76:0a:64:72:75:4b:8f:52:88:e1:81:05:17:30:dc:f2:93:a4:
         04:10:bc:14:e5:27:2f:fa:6a:17:4e:ec:8a:cc:f0:66:6f:92:
         0f:b3:b1:5f:6f:e8:99:08:61:cd:ad:4e:6c:61:04:94:e5:fb:
         f8:8d:ca:2e:23:e3:2b:8b:3c:e6:2b:39:fd:81:03:a5:c7:8f:
         7c:95:48:fc:6d:13:e7:31:03:07:56:47:6d:ca:d3:fb:70:5e:
         31:46:4a:e4:be:8c:f7:ed:57:c7:9b:fd:5d:ed:ab:f6:0e:f5:
         30:cc:54:30:22:7c:e0:a6:61:e8:9b:a5:2e:25:f2:9d:ce:2f:
         96:3c:9f:63:e2:27:77:35:96:0a:2c:61:4e:d3:39:64:08:dd:
         5e:1a:35:6d:82:76:22:a9:1b:49:87:96:cb:2d:04:4c:6c:fb:
         c0:33:f2:91:cc:0f:e8:6a:c9:19:15:44:c7:59:98:6e:71:f2:
         f7:0d:f2:5a:6a:c1:18:fb:63:be:ed:5e:a3:f9:6d:df:bc:fd:
         a7:52:aa:bb:d1:ef:10:40:cf:d3:ff:20:65:f6:f5:88:83:0e:
         6f:ec:ec:27:e1:bf:d1:41:7b:a4:71:88:52:67:71:c4:c3:5c:
         8d:9a:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----