Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/lU0XgAvF1MXdvrqd1avo64xeBs0.roa
File:                     lU0XgAvF1MXdvrqd1avo64xeBs0.roa (raw, json)
Hash identifier:          COjkGuJIEP2tiqN69/pKoxWcefpsc6CHjzKD0d6VOQE=
Subject key identifier:   95:4D:17:80:0B:C5:D4:C5:DD:BE:BA:9D:D5:AB:E8:EB:8C:5E:06:CD
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       018CC49251DE7E69DD88BE4D19CFCBF60D3C
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/lU0XgAvF1MXdvrqd1avo64xeBs0.roa
Signing time:             Mon 01 Jan 2024 10:29:32 +0000
ROA not before:           Mon 01 Jan 2024 10:29:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198127
IP address blocks:        2a00:e200:104::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:51:de:7e:69:dd:88:be:4d:19:cf:cb:f6:0d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 10:29:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=954d17800bc5d4c5ddbeba9dd5abe8eb8c5e06cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:0e:ae:02:35:95:37:5e:54:eb:30:0a:62:
                    ab:f1:65:fb:68:72:25:b0:15:41:fb:83:a9:b8:45:
                    3f:a8:dd:f2:5c:e6:04:0a:00:ec:e3:34:81:ab:dd:
                    0a:6f:c6:e6:c9:84:63:20:1f:c0:49:06:18:7d:fc:
                    1a:8d:19:fb:76:17:24:19:d7:64:ad:31:28:38:c1:
                    42:a5:94:1f:ae:dd:bf:86:66:68:2c:86:86:c0:1a:
                    00:32:f6:f5:19:d3:62:e1:28:e9:9e:ab:e0:94:1f:
                    38:8e:93:9f:97:70:df:b2:26:8a:08:4e:02:45:14:
                    0a:33:6b:9c:8e:12:54:af:cf:d5:2a:a8:f5:6f:59:
                    e1:c2:e3:af:48:7f:54:e3:9b:e5:6a:88:9a:f3:f2:
                    cb:d2:43:48:61:7d:0e:6a:3d:64:41:d4:57:7d:78:
                    a9:ba:8f:b9:37:f4:27:0a:b3:5c:ca:2f:8d:32:1a:
                    a4:91:3f:5c:00:0c:d4:b1:eb:b4:c1:57:5b:8e:65:
                    23:e6:08:04:28:0d:fa:be:2d:70:33:da:d2:79:4a:
                    b1:53:24:ba:b0:0a:65:20:f6:82:1b:7f:19:30:75:
                    51:1f:45:15:b9:a2:55:eb:70:6b:90:e2:4f:97:90:
                    f3:af:95:dc:59:a2:8f:d5:04:2d:cb:40:5e:ef:3f:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4D:17:80:0B:C5:D4:C5:DD:BE:BA:9D:D5:AB:E8:EB:8C:5E:06:CD
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/lU0XgAvF1MXdvrqd1avo64xeBs0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:e200:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:08:54:57:30:d7:51:e3:38:f5:c3:fe:d3:47:d8:14:57:37:
         59:a2:3b:07:0f:bb:4c:eb:d5:05:64:40:0b:3f:e5:7e:5a:18:
         82:58:12:87:1a:a2:0b:d9:d7:85:9c:cd:ce:84:7c:58:ca:a4:
         9f:2c:ce:3a:d0:50:ee:29:47:2e:ea:76:3b:fc:63:d8:78:3e:
         ae:00:fe:6f:07:26:96:5f:0a:47:c4:fe:94:d5:ba:f6:e1:5d:
         81:ec:a6:10:cd:0f:8d:50:b6:c6:00:f7:55:5a:e4:2b:50:d8:
         42:db:b4:96:45:03:11:5f:49:fd:72:33:1c:ba:e9:59:c5:fb:
         69:c2:5d:ad:2b:17:64:01:ea:99:b2:f8:01:6b:cc:bb:a1:4f:
         2d:c0:7c:dc:5a:bb:83:fb:ac:34:80:58:0d:77:46:70:8d:75:
         c5:2a:ad:df:2c:aa:37:a2:f9:f3:bb:1f:3e:46:7a:1d:11:e4:
         c8:f0:b6:ef:3c:2a:0e:85:50:f7:14:40:85:49:b3:2c:73:48:
         62:c6:a7:77:cb:f8:7a:ec:1d:ca:13:81:23:cf:b1:a6:37:cd:
         77:06:8a:a9:9b:ed:0d:57:24:c0:69:38:11:8a:2b:92:a7:6a:
         12:b3:fc:c8:e0:51:80:fc:a5:cf:5b:d8:82:3e:72:bf:ca:b8:
         f2:0d:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----