Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/lkf0miEJnerSM4PYEEzH4htCKS8.roa
File:                     lkf0miEJnerSM4PYEEzH4htCKS8.roa (raw, json)
Hash identifier:          YmP4AeorZW1NTGhEgsXqH9FgTcJRWYFmiE20v//ouzc=
Subject key identifier:   96:47:F4:9A:21:09:9D:EA:D2:33:83:D8:10:4C:C7:E2:1B:42:29:2F
Certificate issuer:       /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial:       018CC64AECCC51E7957DCAF3C1844F0A239A
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/lkf0miEJnerSM4PYEEzH4htCKS8.roa
Signing time:             Mon 01 Jan 2024 18:30:48 +0000
ROA not before:           Mon 01 Jan 2024 18:30:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     43028
IP address blocks:        193.200.201.0/24 maxlen: 24
                          2001:67c:12c8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:ec:cc:51:e7:95:7d:ca:f3:c1:84:4f:0a:23:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
        Validity
            Not Before: Jan  1 18:30:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9647f49a21099dead23383d8104cc7e21b42292f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:27:c7:fa:ef:bf:95:9d:8d:78:88:81:3f:
                    d3:af:ba:e4:22:33:6d:56:d5:8b:88:00:6d:44:88:
                    cf:0c:55:a9:40:87:9b:88:f0:3c:29:9e:97:22:d9:
                    6f:14:31:39:9f:21:8e:b5:9f:21:48:49:6b:28:45:
                    53:38:90:05:4d:e2:9c:a2:42:66:4d:9a:98:62:02:
                    5c:c9:d1:c8:6d:f7:cc:c4:2e:52:72:ea:73:28:17:
                    2b:d8:09:01:9f:18:c3:e3:e7:e7:26:f7:70:25:b2:
                    79:33:31:26:5e:65:7e:32:9a:3d:28:03:9e:2c:cb:
                    5b:6d:f0:de:38:e5:aa:0e:7e:20:31:be:af:c8:2a:
                    5d:de:4a:50:9c:bb:61:bb:89:b6:11:7d:a9:a1:1c:
                    91:40:85:ed:43:2d:7a:72:ba:93:23:3f:e6:7d:3b:
                    64:aa:b9:ab:fe:60:bf:63:83:41:e2:24:c0:61:df:
                    c5:26:da:5b:7d:c2:9b:0b:c8:37:dc:88:79:c6:b8:
                    f2:4f:ff:18:26:3e:56:25:d5:fc:ff:65:98:1d:cc:
                    d0:de:93:ad:1a:41:5e:a9:87:ae:a0:53:67:06:a1:
                    e2:c1:1f:7e:3c:c7:da:af:f0:45:d3:b2:43:9c:74:
                    6f:ce:13:e6:a7:e3:81:13:f2:ec:17:2c:3a:12:67:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:47:F4:9A:21:09:9D:EA:D2:33:83:D8:10:4C:C7:E2:1B:42:29:2F
            X509v3 Authority Key Identifier:
                keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/lkf0miEJnerSM4PYEEzH4htCKS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.201.0/24
                IPv6:
                  2001:67c:12c8::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:d5:f2:d4:47:63:51:48:be:6e:af:3d:f6:6a:11:9f:c7:5f:
         49:f2:a4:6e:7d:45:32:79:60:58:71:bb:ec:8c:13:d9:d4:ca:
         dc:1a:79:7c:07:da:84:c7:96:91:8f:ef:3c:5c:dd:7e:98:4d:
         72:3d:2d:9f:ad:e5:06:5a:78:c5:5b:20:6f:0d:d8:5c:76:75:
         4c:86:65:5c:37:c2:42:21:1e:e2:72:31:a3:6c:c7:92:9d:e4:
         7c:95:a1:8f:9b:1d:c2:ff:c2:79:06:8f:7d:09:8b:7f:62:d4:
         47:c7:e6:46:4b:27:da:2f:cf:93:95:1c:9b:58:18:2f:f0:ac:
         01:3b:06:10:61:39:b5:98:09:a5:50:36:c4:80:bd:9c:f9:3c:
         8b:e1:3a:fc:3e:6c:66:3a:ed:59:1c:fd:18:57:1e:75:a7:60:
         47:e5:19:12:79:98:70:e9:ae:60:10:22:a1:db:5b:bf:e4:d1:
         5b:d9:12:f4:5f:3c:45:0e:e2:49:c1:12:f9:94:ba:37:9d:d0:
         ea:4a:f4:69:03:35:37:d9:39:96:d9:5d:19:c9:ce:0a:d4:bb:
         78:d1:f2:98:ee:66:6d:02:cb:81:d4:28:8c:e7:5c:7e:1b:58:
         95:57:76:b5:1c:04:b0:6e:af:75:17:aa:02:2e:5f:38:7b:f8:
         ee:63:e1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----