Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/5MznBrmyh5eYiGyUjr7nhVy8m_U.roa
File:                     5MznBrmyh5eYiGyUjr7nhVy8m_U.roa (raw, json)
Hash identifier:          jHaSZ51300WM6XphxlUN5+ngte39LKa4bMxNuQqTATY=
Subject key identifier:   E4:CC:E7:06:B9:B2:87:97:98:88:6C:94:8E:BE:E7:85:5C:BC:9B:F5
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       018CC9BC752ED34D528BF1FE567FF7E6D17E
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/5MznBrmyh5eYiGyUjr7nhVy8m_U.roa
Signing time:             Tue 02 Jan 2024 10:33:40 +0000
ROA not before:           Tue 02 Jan 2024 10:33:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213014
IP address blocks:        91.236.75.0/24 maxlen: 24
                          2a0d:f407:1021::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bc:75:2e:d3:4d:52:8b:f1:fe:56:7f:f7:e6:d1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jan  2 10:33:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e4cce706b9b2879798886c948ebee7855cbc9bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:33:52:70:8c:0d:d5:83:10:eb:2c:2a:fe:be:
                    5b:f7:2e:db:62:40:1b:b1:d7:9f:2c:f4:a7:e4:c2:
                    e3:10:91:12:59:cf:1b:64:9a:75:b1:76:d4:8b:11:
                    74:fb:0e:5f:12:4d:3e:64:39:1e:5e:29:15:80:7b:
                    fe:c0:13:fb:35:32:a6:c0:94:35:3b:0e:79:0c:af:
                    6d:2c:dc:1c:d1:5a:7d:f2:a6:99:64:7a:88:c4:56:
                    05:69:e2:ba:1a:24:63:09:8b:0d:77:d8:ea:11:c2:
                    08:d2:8e:d0:6c:c2:3a:25:e3:34:39:3f:fb:9c:d9:
                    2f:1b:7a:42:80:3e:90:63:ea:cf:eb:33:bd:6f:1c:
                    6e:15:e5:9b:2d:34:1d:c6:06:d8:ec:cf:ea:b4:c3:
                    0c:b6:b3:45:82:d4:e7:26:53:c1:f8:e8:9a:b6:80:
                    18:61:48:f3:57:22:8d:2b:da:11:9e:eb:65:12:89:
                    a6:35:53:b6:77:7f:5b:ce:45:ab:1b:6b:75:ff:a3:
                    24:d6:e8:33:12:15:20:f9:4d:29:86:d2:cf:9f:9b:
                    66:1d:bc:ad:26:38:1c:06:77:23:60:b7:b7:66:08:
                    c8:39:83:22:a1:87:21:fc:97:b1:c2:2f:2f:55:f5:
                    c4:84:55:08:51:d1:0b:c0:7f:1c:99:4f:5f:86:eb:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CC:E7:06:B9:B2:87:97:98:88:6C:94:8E:BE:E7:85:5C:BC:9B:F5
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/5MznBrmyh5eYiGyUjr7nhVy8m_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.236.75.0/24
                IPv6:
                  2a0d:f407:1021::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:87:0d:11:ca:a6:e6:ec:6f:d4:57:9c:e1:44:3a:49:b8:63:
         2b:16:9b:ef:78:4c:1d:22:a2:d5:b7:c9:5f:ff:50:3a:83:f5:
         a8:a4:ea:85:fd:20:63:19:32:43:bd:7b:73:47:22:68:14:fc:
         ca:0f:34:94:f5:a9:12:c9:24:a3:a9:b9:80:e5:4d:59:55:3b:
         48:18:c9:76:7e:74:76:2b:f9:65:14:4f:ac:83:52:74:74:59:
         33:68:18:c6:4a:24:b3:b0:6e:22:bb:f2:b6:62:cd:dc:de:ed:
         6f:b5:86:7f:07:e9:33:97:51:1f:e2:21:48:b7:d7:11:6b:b7:
         90:9b:f8:f1:05:3f:c4:c5:ff:67:ce:60:22:3e:49:45:1b:2f:
         67:85:ea:ad:5b:8b:99:8d:37:39:d7:99:cc:e8:f3:56:20:b0:
         31:4b:cf:27:ad:be:8a:49:6f:fe:92:0b:e5:65:34:14:87:7c:
         f7:b3:f2:19:2f:5c:1a:5f:76:fd:74:3b:e9:8e:4d:e3:5c:88:
         ff:63:13:77:13:a0:34:27:8a:c6:00:20:66:e9:1b:68:ce:e4:
         24:1f:ae:c4:ce:bf:f7:1d:9c:2d:1c:fa:88:56:48:df:9d:6f:
         98:ca:ff:56:30:9e:14:3e:08:b4:9f:3d:89:1b:9a:23:92:53:
         b2:cf:f7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----