Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/7OvVbY16_HP_AsOVR6KjqxdC8Tw.roa
File:                     7OvVbY16_HP_AsOVR6KjqxdC8Tw.roa (raw, json)
Hash identifier:          Xsk/XHY3IZgYEW+qvXJRv3oCqbBJ0Ddi9kZ3cb8n5Sc=
Subject key identifier:   EC:EB:D5:6D:8D:7A:FC:73:FF:02:C3:95:47:A2:A3:AB:17:42:F1:3C
Certificate issuer:       /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial:       018EF0113FDA4C80C46DF5D7E7872054075D
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/7OvVbY16_HP_AsOVR6KjqxdC8Tw.roa
Signing time:             Thu 18 Apr 2024 07:17:26 +0000
ROA not before:           Thu 18 Apr 2024 07:17:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        193.93.64.0/22 maxlen: 22
                          2001:678:890::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f0:11:3f:da:4c:80:c4:6d:f5:d7:e7:87:20:54:07:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
        Validity
            Not Before: Apr 18 07:17:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ecebd56d8d7afc73ff02c39547a2a3ab1742f13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:f1:9f:e0:1c:21:8d:bf:78:97:6a:22:c6:
                    2a:53:aa:d7:57:54:a7:5f:f4:3e:63:ac:12:fb:eb:
                    fa:05:df:da:69:f5:12:9a:9a:28:4e:76:9f:76:52:
                    d3:87:f0:4f:4f:37:71:7d:33:87:72:bb:c4:c7:d0:
                    4b:78:f9:65:66:bb:c7:27:a3:da:0b:fb:81:90:f3:
                    ad:fa:15:8c:4b:e6:b1:c9:34:7a:57:95:6f:86:7c:
                    08:ce:04:f3:c0:ba:10:0f:b8:c2:49:80:d0:90:86:
                    86:0c:26:36:9d:db:e0:fb:cd:43:5f:44:83:66:40:
                    ed:e9:88:05:50:8f:5b:d7:42:89:c6:c7:a8:e2:5f:
                    60:19:b2:20:a7:95:72:be:13:80:75:13:d7:f0:f9:
                    32:1b:46:b6:4e:b9:57:3a:0c:cd:24:68:35:d6:53:
                    1e:98:c5:79:d0:13:6e:58:35:52:0f:e9:bb:8b:55:
                    23:c6:32:be:40:c6:6e:96:86:36:63:65:31:0e:db:
                    2d:b5:77:33:5e:92:7c:c6:1b:4b:fb:73:bf:58:71:
                    d7:d7:c9:f1:86:b3:38:13:6b:35:5b:4b:f9:fc:ac:
                    a2:13:bc:a2:5e:a8:96:5e:42:cf:50:39:c7:70:2f:
                    07:12:49:a4:17:34:31:2d:71:db:f0:4b:db:17:d0:
                    49:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EB:D5:6D:8D:7A:FC:73:FF:02:C3:95:47:A2:A3:AB:17:42:F1:3C
            X509v3 Authority Key Identifier:
                keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/7OvVbY16_HP_AsOVR6KjqxdC8Tw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.64.0/22
                IPv6:
                  2001:678:890::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:44:cf:0d:c1:9f:84:6d:4a:99:6a:b2:fd:d6:af:b1:92:
         9c:bf:47:db:dc:c0:dc:f5:01:b2:1b:05:28:8a:6e:65:18:90:
         50:6b:63:d8:46:e6:a7:f0:f4:0a:6d:09:4e:1a:10:05:35:bb:
         5a:44:ce:d3:18:bd:72:ce:c9:fe:55:26:38:cb:f3:ec:4a:bd:
         db:b0:d0:ad:12:2e:ed:24:8b:23:4b:b2:27:60:e9:f8:17:46:
         ef:cb:fd:16:3c:6f:d1:61:0f:09:e1:69:c4:0b:a9:4a:e8:b0:
         15:69:28:a1:df:30:62:43:f3:1e:77:53:a2:50:a4:57:e4:c3:
         60:20:74:45:6d:5e:82:85:3f:e3:95:1f:4b:39:ae:b1:d4:cb:
         7d:4f:0c:ad:a5:d4:3e:bc:04:fe:16:f3:b1:92:e0:cf:a6:30:
         53:01:22:f0:f2:38:74:02:df:f7:3a:1b:2c:ff:34:66:16:db:
         ad:88:ab:7f:a8:9f:4d:94:57:fa:f3:f0:65:0f:91:42:df:cb:
         cd:ca:71:d6:4a:47:5d:25:f8:47:3c:fa:23:1b:02:ff:75:1c:
         cc:9f:49:ce:e3:f7:b3:e9:e7:83:d7:70:64:be:89:82:27:0e:
         80:2d:8e:3d:86:8b:af:61:b3:83:7e:28:7d:9f:e9:2c:2f:ef:
         43:ec:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----