Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/hetelT-FRG_bHpO0RqW2JskTYug.roa
File:                     hetelT-FRG_bHpO0RqW2JskTYug.roa (raw, json)
Hash identifier:          je/CZRQfYGzlTl5t2Ogh0NcIDSAzmn8Eoi/V49KsI0Y=
Subject key identifier:   85:EB:5E:95:3F:85:44:6F:DB:1E:93:B4:46:A5:B6:26:C9:13:62:E8
Certificate issuer:       /CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
Certificate serial:       018CC2DADC55E60EFE3E84F25EEDE22F783B
Authority key identifier: A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/hetelT-FRG_bHpO0RqW2JskTYug.roa
Signing time:             Mon 01 Jan 2024 02:29:32 +0000
ROA not before:           Mon 01 Jan 2024 02:29:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60850
IP address blocks:        185.0.26.0/24 maxlen: 24
                          2001:7f8:146::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:dc:55:e6:0e:fe:3e:84:f2:5e:ed:e2:2f:78:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
        Validity
            Not Before: Jan  1 02:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=85eb5e953f85446fdb1e93b446a5b626c91362e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:42:e2:f4:25:6c:33:c0:60:60:d9:07:75:
                    a2:dd:3e:c9:0b:3c:72:af:d3:6a:58:e2:5b:48:05:
                    bd:c4:5b:fe:0d:d4:e7:f7:bb:b7:8c:61:d6:01:27:
                    66:e1:de:b3:fa:ea:5c:6e:84:ef:dd:a0:e4:7a:65:
                    39:d7:d3:ac:65:a6:19:ae:8d:68:41:96:ff:33:cb:
                    40:b5:55:05:1a:07:50:55:52:35:70:c3:48:24:14:
                    3d:a8:81:26:ed:e8:09:0b:86:32:ae:d9:5d:02:91:
                    3a:24:75:ab:92:a1:28:92:d5:80:3f:9e:bf:3b:0e:
                    a9:65:8c:b0:a8:b4:b7:27:47:24:08:a4:f7:96:af:
                    c8:d3:9c:e8:ca:4b:94:07:28:60:8e:cd:c7:78:47:
                    61:07:57:7c:e5:08:d1:9e:7d:73:0b:00:02:cb:bd:
                    bf:1e:56:51:d2:f3:ca:7d:fa:01:48:1a:37:a7:9b:
                    d2:41:08:76:15:6a:9f:79:24:c8:f4:46:ca:18:cd:
                    89:7c:97:e5:1c:35:a9:9e:5d:d5:55:cd:ef:34:28:
                    b1:89:77:df:37:d5:9f:af:72:5f:e8:ff:f8:88:7a:
                    07:95:cf:4d:67:89:f6:f6:32:93:7a:18:af:37:8a:
                    be:27:f6:63:18:f9:23:fe:f1:a1:37:2b:e5:f6:9b:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EB:5E:95:3F:85:44:6F:DB:1E:93:B4:46:A5:B6:26:C9:13:62:E8
            X509v3 Authority Key Identifier:
                keyid:A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/hetelT-FRG_bHpO0RqW2JskTYug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.0.26.0/24
                IPv6:
                  2001:7f8:146::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:db:ef:ad:e2:1a:2d:82:a6:d2:b2:3b:7b:8b:41:de:d8:f3:
         71:05:20:81:09:f2:d5:a5:db:8b:cd:f3:de:43:71:18:95:29:
         99:ea:d4:08:54:17:c8:99:78:70:31:79:5e:3e:93:cb:43:22:
         32:54:0f:d9:1a:7b:eb:44:9e:dc:cd:97:48:76:ae:12:3b:69:
         07:63:da:dd:63:f0:c3:b3:11:23:3d:98:4c:10:df:b6:f3:6c:
         a2:a2:b8:2c:92:0e:a4:71:0b:67:1c:4e:37:5c:89:d3:b1:36:
         1e:32:4a:6d:0c:b2:4a:da:6a:a5:2c:c5:fb:6f:59:d3:d0:90:
         5d:56:ee:ae:72:c7:51:51:4d:26:23:34:05:7c:4c:2d:64:20:
         8e:34:13:4e:3f:d1:80:e4:f0:c1:f8:67:8b:b4:c4:cb:8e:d3:
         94:df:c8:f0:98:4d:2e:01:28:98:a8:2b:d2:11:15:e4:47:f9:
         33:80:4c:af:90:02:56:67:21:f3:57:3d:62:c9:10:74:c8:1d:
         34:53:3d:d3:37:f4:23:36:99:1f:a8:a9:c8:d6:e1:86:68:12:
         50:51:2f:e7:4d:59:c9:f2:17:ff:74:f9:c6:46:8f:f6:d5:61:
         e9:b5:16:ab:e4:33:17:b0:12:c9:d4:74:e1:98:5a:d3:ac:a4:
         a3:96:9d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----