Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/ObWCuCucZ2YXPP1LPzoIDvKVhI8.roa
File:                     ObWCuCucZ2YXPP1LPzoIDvKVhI8.roa (raw, json)
Hash identifier:          J/sZD7LWEHUM61XwqBBAo0tBa1jNUdmICgGLZxUGPvs=
Subject key identifier:   39:B5:82:B8:2B:9C:67:66:17:3C:FD:4B:3F:3A:08:0E:F2:95:84:8F
Certificate issuer:       /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial:       018CC86F70D736677E760A7A12D4BD458A58
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/ObWCuCucZ2YXPP1LPzoIDvKVhI8.roa
Signing time:             Tue 02 Jan 2024 04:29:55 +0000
ROA not before:           Tue 02 Jan 2024 04:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216388
IP address blocks:        2a13:89c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:70:d7:36:67:7e:76:0a:7a:12:d4:bd:45:8a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
        Validity
            Not Before: Jan  2 04:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=39b582b82b9c6766173cfd4b3f3a080ef295848f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:ea:d2:da:09:d1:4e:e6:a8:42:36:f9:6a:
                    e0:39:f1:a9:06:4c:28:2b:5b:b7:45:f9:a2:5d:df:
                    74:dd:36:99:5b:d1:75:00:92:d6:19:bb:0d:73:64:
                    7c:14:09:60:aa:66:f0:07:09:2b:3b:b8:a9:e5:f3:
                    ca:c2:da:3e:8b:9d:a1:eb:9e:83:2b:5b:99:5c:1a:
                    5a:14:e6:94:a3:d8:1b:b1:cb:e1:e1:14:ba:67:ad:
                    d4:ef:20:63:02:b3:b3:86:df:17:64:9d:ad:a5:97:
                    b8:3d:88:6f:b5:b9:fc:04:ba:fb:cc:85:18:8d:62:
                    20:91:c0:b5:68:e0:ab:20:da:dd:b7:e6:9a:38:f1:
                    64:77:5a:10:53:e3:68:1d:2d:a4:3b:6f:12:33:50:
                    0e:2d:2f:d2:67:13:e9:9c:1c:cd:85:7e:7f:6a:56:
                    97:72:6e:7e:6b:a3:ea:4a:fb:e2:90:9e:2d:62:54:
                    7f:85:30:26:84:ef:9d:b6:c5:2d:dd:ff:39:f1:08:
                    40:06:91:8c:d5:89:94:68:78:b0:7d:44:13:f8:77:
                    31:c8:3a:79:95:8c:f7:33:76:f5:c5:dc:25:8f:a8:
                    94:88:a1:87:39:f1:bc:8b:c0:0f:d3:94:9b:b1:cc:
                    c3:f0:2b:74:58:d1:17:d9:3b:08:5a:ca:6e:11:2b:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B5:82:B8:2B:9C:67:66:17:3C:FD:4B:3F:3A:08:0E:F2:95:84:8F
            X509v3 Authority Key Identifier:
                keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/ObWCuCucZ2YXPP1LPzoIDvKVhI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:89c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:8f:a8:a8:0b:41:3f:46:39:e1:af:72:0b:e8:f0:56:7e:
         bb:82:24:0d:8c:e7:c9:31:34:73:d1:a9:c5:1b:9d:ba:9b:42:
         05:d9:f7:5c:66:3f:34:f2:fc:1b:8c:64:83:92:b1:f3:fa:67:
         a8:bd:ed:08:c4:6f:26:a7:4e:70:ed:8e:f5:96:0b:c1:54:30:
         fd:ef:fa:2e:b1:41:87:65:c2:57:78:bf:6e:20:fa:0f:74:90:
         1e:97:5f:6c:64:b7:61:45:6e:40:fb:ff:37:2d:e0:d4:ed:48:
         b4:f8:9f:e5:1a:2f:ac:0c:c6:cc:3f:fa:a3:a6:46:8e:0d:f6:
         25:a5:a1:74:9a:89:1f:51:20:5a:c5:40:84:ee:0b:1c:12:89:
         0d:58:44:22:e1:f5:0d:26:94:68:e0:1c:af:27:68:8d:66:8b:
         18:5e:c8:d3:55:b1:be:08:10:f0:2c:d0:b1:64:ff:2b:95:13:
         76:94:93:c7:38:7f:e0:79:1c:5f:88:b3:ed:c8:a2:49:cc:a0:
         98:e7:ff:90:dc:fe:95:f0:1f:0c:87:94:e8:86:f1:f2:99:dd:
         3c:1e:48:a1:5f:06:8d:9c:06:39:0c:96:1c:80:46:cc:a9:a4:
         cf:19:4d:e3:16:dd:4c:c2:73:7c:e9:2b:26:31:72:ac:ce:a7:
         e9:fd:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----