Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FF0BAb52t_eershlbZUR4juZHx0.roa
File:                     FF0BAb52t_eershlbZUR4juZHx0.roa (raw, json)
Hash identifier:          QnoU5q6rWXbwsWIlRq+eKrrg8wZKEVngym0JAYxUVno=
Subject key identifier:   14:5D:01:01:BE:76:B7:F7:9E:AE:C8:65:6D:95:11:E2:3B:99:1F:1D
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       018CC34928B9A0A0F7A75C5B8408B14C20C4
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FF0BAb52t_eershlbZUR4juZHx0.roa
Signing time:             Mon 01 Jan 2024 04:30:00 +0000
ROA not before:           Mon 01 Jan 2024 04:30:00 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        193.138.31.0/24 maxlen: 32
                          2001:7f8:56::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:28:b9:a0:a0:f7:a7:5c:5b:84:08:b1:4c:20:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Jan  1 04:30:00 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=145d0101be76b7f79eaec8656d9511e23b991f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:00:7a:9d:5f:fe:ec:10:3e:fc:94:88:43:
                    b4:c6:77:86:dc:b3:2b:55:1e:7c:54:f9:88:09:cc:
                    4c:48:d6:7c:09:7e:d0:5c:df:cc:2d:7b:0f:cc:da:
                    71:9f:b8:d5:12:cc:cf:8b:a3:d0:a3:05:f6:d3:f5:
                    0d:1c:f5:5f:75:61:07:86:3e:a3:35:e2:00:f0:c2:
                    c6:cb:09:1f:c9:55:53:99:d5:32:98:dc:58:13:c5:
                    cb:21:01:ce:31:56:cc:e3:fb:a9:34:7b:c9:95:85:
                    cc:e5:8b:39:4f:9a:d2:29:96:22:21:a7:e2:24:e9:
                    40:45:5a:46:ef:f7:f3:c7:9b:45:20:d3:32:b4:04:
                    e7:df:82:6c:63:19:21:8c:cc:b5:cb:57:28:a4:d4:
                    ca:a3:7d:64:f6:62:9c:a2:c8:98:c9:d1:54:7e:fe:
                    a8:30:db:3f:25:5c:95:b7:7c:77:02:f6:5b:a9:37:
                    17:60:14:d9:29:ef:f7:f4:e2:2e:da:11:f3:7a:c7:
                    ec:2f:9c:63:16:18:b8:38:f3:c8:76:14:b6:6b:81:
                    24:16:94:74:de:ad:d3:b1:6f:9b:31:d3:fe:32:89:
                    5c:3e:09:03:e6:82:85:a8:ee:50:2f:88:c8:35:3a:
                    b2:58:84:78:60:1f:cb:ae:9e:05:db:69:1d:eb:d3:
                    eb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5D:01:01:BE:76:B7:F7:9E:AE:C8:65:6D:95:11:E2:3B:99:1F:1D
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FF0BAb52t_eershlbZUR4juZHx0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.31.0/24
                IPv6:
                  2001:7f8:56::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:9c:b3:8c:4a:c6:34:e1:b0:d9:d4:3e:dd:7f:8e:14:25:04:
         a4:77:7c:c2:55:50:2f:1e:16:da:5b:0a:38:13:85:47:77:2b:
         33:35:d4:69:c2:f5:39:70:4d:3a:32:ae:cc:de:51:e0:5b:4d:
         25:35:82:0f:01:30:7f:da:6e:c4:f9:55:9d:4e:8f:47:83:79:
         9b:a9:fe:53:a4:ba:4f:c5:d9:5b:82:be:73:12:2b:95:e6:cc:
         9b:97:0f:64:dc:c9:d0:64:42:cb:2c:42:b1:81:c6:1f:57:75:
         62:5c:15:be:43:29:f3:c4:eb:f6:f6:59:32:b9:c1:0c:e2:b8:
         1e:c8:75:6f:b3:7d:19:eb:7c:af:f3:3c:bb:12:da:c2:c6:89:
         2f:87:cc:b6:6c:83:49:1f:90:ab:2e:6f:ff:27:ae:2c:00:01:
         6c:03:ca:e6:6c:da:93:db:5c:c5:b4:7b:ed:84:52:f0:db:0f:
         15:2b:de:18:03:30:27:ac:79:2f:47:85:af:2d:17:98:d2:19:
         c5:f7:50:27:5e:9f:75:46:2f:80:fc:e4:65:01:04:c7:82:22:
         31:29:51:70:f8:d3:68:e3:a8:1b:e7:4c:f7:2c:dd:9c:cc:21:
         38:0e:b3:a3:17:9e:c8:29:cd:7d:46:45:80:ee:4a:af:db:48:
         78:ec:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----