Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa
File:                     ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (raw, json)
Hash identifier:          5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=
Subject key identifier:   C9:CB:31:03:1C:1F:BE:2F:D9:1C:23:08:87:E1:FB:D8:4E:C1:5D:E6
Certificate issuer:       /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial:       01942067B74FB272ACA0395A2B17B6B4C937
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa
Signing time:             Wed 01 Jan 2025 05:47:35 +0000
ROA not before:           Wed 01 Jan 2025 05:47:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     21286
IP address blocks:        193.176.216.0/23 maxlen: 23
                          2001:67c:5a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:67:b7:4f:b2:72:ac:a0:39:5a:2b:17:b6:b4:c9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
        Validity
            Not Before: Jan  1 05:47:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c9cb31031c1fbe2fd91c230887e1fbd84ec15de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0f:3a:46:ca:34:61:49:09:06:7a:38:2a:03:
                    89:43:32:d0:11:21:71:e2:d3:c3:e6:93:47:31:89:
                    12:13:5c:f8:a2:a7:18:72:eb:74:0e:46:0a:5e:47:
                    c5:55:be:3e:b5:43:e8:c3:ac:e5:6e:72:cf:c4:f6:
                    1a:6d:3b:f6:bd:0c:f7:4f:9c:c3:1b:4a:f3:23:22:
                    94:1c:49:28:03:de:ec:97:61:29:27:e2:79:6d:76:
                    a3:50:9f:35:8b:6d:19:84:57:a2:0c:eb:32:b9:a6:
                    49:07:93:3d:ff:9b:d7:6b:19:06:ed:87:6e:08:e2:
                    b4:e9:98:7a:8b:fd:26:dc:c2:63:05:36:26:4e:f5:
                    76:d7:f2:2a:d1:5a:16:7f:a2:db:c4:fe:9d:51:9a:
                    22:f8:f5:da:67:d1:05:bf:b7:06:c2:b9:38:0e:4e:
                    16:6a:df:e0:eb:92:cd:91:09:79:80:a6:29:0c:34:
                    2b:ee:9a:3b:40:1f:6f:e0:af:f2:5e:77:1b:7c:ec:
                    b6:b8:67:d0:1f:88:34:1b:9a:db:59:73:cf:c8:b6:
                    88:7f:7b:1a:41:f3:b5:c6:77:9b:f0:3f:09:f2:ae:
                    36:31:9a:b7:3d:1d:0e:63:d2:c5:1d:4c:55:08:bb:
                    dd:b9:96:51:c6:86:17:63:3c:ac:93:16:41:03:63:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CB:31:03:1C:1F:BE:2F:D9:1C:23:08:87:E1:FB:D8:4E:C1:5D:E6
            X509v3 Authority Key Identifier:
                keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.216.0/23
                IPv6:
                  2001:67c:5a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:0f:06:ca:af:c3:de:10:3d:3d:f4:f1:1d:dc:2e:1d:5b:ad:
         f4:cf:0d:1f:9c:c0:12:2a:38:ff:f4:64:8f:63:a4:24:7f:99:
         05:aa:09:32:3f:91:c8:af:21:4c:29:eb:c5:ba:8c:e3:86:57:
         f9:8f:a3:2e:b2:7e:0a:11:9f:63:05:b1:8f:30:de:07:a8:4d:
         64:f4:06:3d:da:86:ef:eb:8f:8f:c8:4e:0b:8b:87:c0:93:e7:
         33:f3:ee:48:33:1e:e0:f7:1a:8b:65:1b:f6:93:8b:bb:7c:4d:
         68:7f:66:c5:75:74:f4:48:7e:54:4d:3f:b1:a8:db:79:0a:70:
         36:4d:a4:58:96:11:05:1a:e7:27:a2:b7:f4:63:c9:70:d4:cc:
         8b:ee:c3:44:f2:b1:3d:7e:19:12:87:b2:c1:cd:53:8b:9d:57:
         fb:d7:d5:ce:5f:37:4e:da:38:55:f4:73:47:cd:8d:68:66:0c:
         4b:5b:e5:b6:63:7e:be:ef:04:7a:7b:33:5b:1f:66:14:8e:54:
         1a:af:9f:9c:71:4e:97:93:42:35:ad:1e:38:b6:fe:5f:c0:86:
         b9:54:ad:c2:df:38:8f:b0:e6:a8:3a:70:c6:67:29:05:b5:fa:
         26:f8:dc:86:7d:83:1a:ae:3d:5b:fe:69:88:7f:81:73:de:06:
         3f:e5:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----