Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/Rbz8r9VNlLJt65GHTyI8nTxB7tY.roa
File:                     Rbz8r9VNlLJt65GHTyI8nTxB7tY.roa (raw, json)
Hash identifier:          SqfcwXVdtt12jx/g2IPPsOOQXrTROzwHiVmbR9pq7tI=
Subject key identifier:   45:BC:FC:AF:D5:4D:94:B2:6D:EB:91:87:4F:22:3C:9D:3C:41:EE:D6
Certificate issuer:       /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial:       018F6234C77C8AC968BE325978671CB1289F
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/Rbz8r9VNlLJt65GHTyI8nTxB7tY.roa
Signing time:             Fri 10 May 2024 11:12:57 +0000
ROA not before:           Fri 10 May 2024 11:12:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207983
IP address blocks:        2a0e:5e44::/31 maxlen: 31
                          2a0e:5e46::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:62:34:c7:7c:8a:c9:68:be:32:59:78:67:1c:b1:28:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
        Validity
            Not Before: May 10 11:12:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=45bcfcafd54d94b26deb91874f223c9d3c41eed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:12:72:b1:f2:d0:37:06:ce:4f:dd:ab:f6:
                    69:ba:1d:b2:79:48:1a:fc:17:f4:9a:bf:5c:d4:12:
                    b6:d9:58:d4:71:87:09:a8:d7:a1:17:4c:ba:2c:05:
                    a1:dc:83:67:2d:e4:64:91:db:18:12:c8:6a:4a:8b:
                    16:24:a4:6d:db:cf:ec:4e:a3:a4:db:04:75:6c:14:
                    45:4e:cd:48:04:96:da:19:7c:cb:e7:22:f3:2b:50:
                    c1:5f:b3:90:6f:69:be:f1:96:cc:f8:31:0b:98:2e:
                    d4:00:29:8d:e5:06:f8:cf:34:58:74:41:da:5e:4a:
                    ee:c5:c9:66:19:84:86:d9:ee:7b:4b:37:38:4f:94:
                    dc:e1:23:a0:17:7a:66:33:56:69:f5:78:3d:46:c4:
                    cc:4e:aa:14:db:c1:1d:39:1f:0b:6d:6d:6b:dd:bc:
                    0a:a4:da:c1:80:f8:d8:e9:7e:35:a2:d0:73:2a:f8:
                    50:7a:be:21:3b:e0:95:68:72:3d:74:5d:0f:9f:75:
                    56:ac:96:4b:0e:4e:c7:44:5b:54:ef:65:22:86:95:
                    90:e0:3c:87:bb:74:3a:39:9a:38:67:46:c3:b5:1a:
                    4a:69:7d:3b:29:9b:e5:c1:10:00:cf:8f:90:ce:9c:
                    1c:b2:87:e3:07:3f:12:5d:eb:3b:51:5f:35:a2:7f:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BC:FC:AF:D5:4D:94:B2:6D:EB:91:87:4F:22:3C:9D:3C:41:EE:D6
            X509v3 Authority Key Identifier:
                keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/Rbz8r9VNlLJt65GHTyI8nTxB7tY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:5e44::-2a0e:5e46:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0e:3e:1e:77:9b:b1:12:41:b9:a6:53:79:b0:1f:9c:1b:b1:b7:
         05:91:1b:4d:36:f8:e9:d9:39:c9:9e:ce:17:e5:36:95:89:95:
         ba:65:5e:2a:d0:6d:d0:58:bd:96:b3:7c:b3:60:f4:86:24:47:
         8d:2b:0b:d0:57:64:39:3b:54:9c:ee:ea:8d:9c:82:af:b1:b7:
         1a:1c:19:aa:37:ae:5e:a1:89:20:ce:f5:bf:0a:ce:5c:b3:8c:
         b2:52:04:74:95:7a:bc:a7:97:25:82:6f:35:ea:72:80:4a:ef:
         35:0b:32:29:34:d2:61:a8:9c:38:e7:ce:0a:96:14:c4:6b:37:
         7d:7b:71:88:9a:94:4c:15:43:c5:92:b7:cd:48:70:72:ba:c6:
         da:7d:f1:6f:ee:3d:c1:f6:bd:68:13:ae:ec:b4:9e:76:2a:bd:
         93:3c:17:48:7c:b2:21:17:1a:b0:2c:d8:74:a9:9d:21:b6:e6:
         5c:b4:9d:a3:b2:4e:3f:1c:11:b0:e1:3a:24:fe:21:bf:44:16:
         07:31:d0:e0:95:fd:c3:52:b0:fc:a8:45:83:f0:ef:22:77:37:
         d5:80:0e:5c:3f:68:f4:4d:6b:37:af:d5:f3:d5:21:28:89:42:
         29:7f:e1:57:05:71:10:d6:52:6c:93:7d:07:c7:f5:fa:5f:37:
         49:82:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----