Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/IVYiDImLRYQAMuJrQ-qPMlu9FAQ.roa
File:                     IVYiDImLRYQAMuJrQ-qPMlu9FAQ.roa (raw, json)
Hash identifier:          xy+zzDDf1F9KB2DZbHXwlrXwc8qzzdbmBYablDx4Mcw=
Subject key identifier:   21:56:22:0C:89:8B:45:84:00:32:E2:6B:43:EA:8F:32:5B:BD:14:04
Certificate issuer:       /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial:       018CC42554B22D0454CBE41FB93175AB7C7E
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/IVYiDImLRYQAMuJrQ-qPMlu9FAQ.roa
Signing time:             Mon 01 Jan 2024 08:30:30 +0000
ROA not before:           Mon 01 Jan 2024 08:30:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198794
IP address blocks:        91.239.100.0/24 maxlen: 24
                          2001:67c:28a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:54:b2:2d:04:54:cb:e4:1f:b9:31:75:ab:7c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
        Validity
            Not Before: Jan  1 08:30:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2156220c898b45840032e26b43ea8f325bbd1404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:bb:65:ab:98:f7:da:38:f8:79:56:3b:89:
                    3e:36:0e:8b:7a:c1:0a:37:ff:4c:06:57:d3:36:d1:
                    ce:cc:67:c8:d9:84:a2:dc:94:06:cc:da:d8:92:a9:
                    ef:2e:25:d0:75:79:2f:8c:b0:56:b2:7c:1e:99:d7:
                    34:8a:03:38:4b:a5:0d:52:b0:85:1c:ec:9b:a1:b1:
                    3e:b0:a6:04:a1:d1:eb:60:be:2e:dd:62:eb:33:28:
                    57:cf:c6:3f:60:2e:8b:0d:65:ea:b4:1e:69:e3:68:
                    31:44:44:e5:79:cd:0e:3a:e3:8e:86:6f:af:e3:5e:
                    a4:dd:0d:c0:76:fe:25:6d:78:90:a5:34:0c:ce:84:
                    0d:b5:bb:e9:92:ec:24:75:4f:79:68:8a:53:90:6f:
                    20:1f:4e:5e:2c:44:0e:74:5e:5d:47:01:e9:8d:11:
                    9b:da:06:fa:b8:be:c3:32:9c:61:bf:f2:14:64:71:
                    fb:be:5c:e8:e3:78:5b:31:21:6c:63:d9:8e:d1:bf:
                    e2:ac:39:9f:5d:a6:e6:99:f9:7a:6b:61:3a:17:cf:
                    fc:a2:f9:b2:76:f5:5f:8f:95:c1:b7:7e:de:d3:20:
                    c3:c8:65:04:6e:99:ee:b4:c0:99:a0:48:fa:8f:4c:
                    a0:f9:63:d1:86:0d:ed:d3:94:2d:c1:79:8f:77:95:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:56:22:0C:89:8B:45:84:00:32:E2:6B:43:EA:8F:32:5B:BD:14:04
            X509v3 Authority Key Identifier:
                keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/IVYiDImLRYQAMuJrQ-qPMlu9FAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.100.0/24
                IPv6:
                  2001:67c:28a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:b7:34:86:d1:ea:3f:c9:4c:ea:d0:7e:58:a4:9b:7b:83:
         89:db:7c:33:18:e9:ec:16:1b:85:46:f2:6f:ed:94:10:79:8f:
         1f:b5:26:87:52:4a:0d:ee:5d:ca:8a:05:81:ee:03:c2:ad:37:
         28:b0:5b:76:1d:6f:75:7c:a7:b9:18:0f:fa:9b:b2:ed:3b:93:
         49:81:80:05:13:7f:ad:b1:89:1d:b2:5c:6c:dd:94:66:ef:c6:
         b2:b7:38:f6:15:e5:5a:f7:0c:29:f1:34:83:54:74:1b:06:4f:
         30:60:b2:d2:6b:e2:a9:c2:14:82:b5:b6:8d:38:70:92:9d:e0:
         ea:16:55:3a:16:82:07:d7:df:bb:d0:f5:f1:51:45:1d:33:3a:
         d6:b8:d4:63:1b:d8:b1:39:fd:ff:59:63:85:bb:69:ef:ed:e4:
         75:38:dc:5d:39:fb:e5:99:aa:7f:d8:12:a6:34:30:69:1b:67:
         d7:c0:07:17:f9:85:26:99:d6:49:ca:e8:3b:f0:d5:2c:30:df:
         91:fe:88:ae:e9:2e:6c:7c:83:53:9d:50:46:a4:0b:32:b6:3d:
         c4:d1:39:6d:c9:a0:9c:15:01:79:8f:19:4a:93:6e:10:34:ed:
         87:48:2c:bb:ca:dc:13:b9:05:a7:50:19:b0:55:93:c6:a5:be:
         7f:80:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----