Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/nNVpYsmGV3WCQgrWoCF612hh45U.roa
File:                     nNVpYsmGV3WCQgrWoCF612hh45U.roa (raw, json)
Hash identifier:          wHZv2kFUAaf9BLzL2JAS25Y7LGXWvg9AYSI7lzsiDkQ=
Subject key identifier:   9C:D5:69:62:C9:86:57:75:82:42:0A:D6:A0:21:7A:D7:68:61:E3:95
Certificate issuer:       /CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
Certificate serial:       018CC5DC5BA2924F52A5AADD6477FBF97E5A
Authority key identifier: B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/nNVpYsmGV3WCQgrWoCF612hh45U.roa
Signing time:             Mon 01 Jan 2024 16:30:02 +0000
ROA not before:           Mon 01 Jan 2024 16:30:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        185.53.16.0/22 maxlen: 22
                          2a04:c980::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:5b:a2:92:4f:52:a5:aa:dd:64:77:fb:f9:7e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17050d8caf09a91d00f1c090a0b752cd1b3d57c
        Validity
            Not Before: Jan  1 16:30:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9cd56962c986577582420ad6a0217ad76861e395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:3c:b4:f7:6f:a5:37:cc:0e:27:8b:26:37:
                    25:a3:6c:03:0f:d3:5e:17:f6:ba:59:ff:18:5a:e6:
                    29:e8:94:44:b0:2f:f5:d2:84:df:cc:41:9f:7e:c5:
                    85:6c:1a:ec:2f:c9:b3:f3:0e:bf:62:e8:17:7a:49:
                    bd:80:4e:9b:bb:c6:b6:07:42:b6:db:28:14:60:dc:
                    fe:92:64:6b:7e:67:7a:b8:a8:0c:fa:ec:12:52:25:
                    6e:8b:f8:ab:83:98:bb:26:cd:d3:08:1b:12:8f:81:
                    54:9d:42:6f:4f:51:46:bd:e6:1f:f3:93:af:64:44:
                    32:57:63:c6:11:d7:98:e0:e1:34:56:9e:3e:df:ec:
                    eb:d5:e7:22:2e:fd:d5:ba:86:87:06:5c:2b:8e:38:
                    b7:8e:76:30:a0:34:d4:87:26:92:bc:a4:8f:73:3d:
                    e4:06:a5:e3:26:0d:32:13:fa:26:68:d7:4d:25:b3:
                    a4:bb:b5:e1:98:64:50:e0:06:0a:7d:84:fd:d6:38:
                    f0:6f:3d:d8:f8:9b:87:7f:88:ff:29:1a:60:e3:38:
                    7f:a0:5b:23:2e:46:e7:70:d7:d6:b3:39:bb:9c:43:
                    18:dd:26:d4:13:7e:ea:1b:3a:a4:2a:e3:ab:a0:0b:
                    ce:a1:2b:a0:9b:73:5d:4c:d3:08:e2:db:62:fa:ae:
                    39:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D5:69:62:C9:86:57:75:82:42:0A:D6:A0:21:7A:D7:68:61:E3:95
            X509v3 Authority Key Identifier:
                keyid:B1:70:50:D8:CA:F0:9A:91:D0:0F:1C:09:0A:0B:75:2C:D1:B3:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/nNVpYsmGV3WCQgrWoCF612hh45U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a273e8-67dc-4782-9a34-4aeb6a795511/1/sXBQ2MrwmpHQDxwJCgt1LNGz1Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.53.16.0/22
                IPv6:
                  2a04:c980::/29

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:6e:31:92:52:39:9b:06:9b:d6:e1:dd:af:e8:c7:af:c7:
         7b:4f:9a:8d:61:58:8d:8e:1d:4b:9c:71:1b:9a:f9:e9:6c:90:
         ac:60:ec:59:69:d0:1b:e0:1c:25:ad:5a:a9:44:9e:86:ea:08:
         b4:c3:8a:79:85:f3:fa:a2:a8:5e:a2:ed:80:ba:fa:f1:ed:3a:
         6f:67:d8:9a:be:b4:f7:4c:30:3f:41:ff:d0:06:d0:62:51:b9:
         23:45:b5:5d:7c:25:d8:55:e6:7e:d0:8c:50:27:37:cb:ed:46:
         5f:46:2d:d0:eb:01:2f:c1:e1:ac:97:41:a8:8f:a4:eb:40:e9:
         a8:10:b7:8e:2f:44:93:29:bc:87:44:c3:1a:51:93:4e:7f:c5:
         82:68:94:1f:ff:a9:c2:6d:9e:97:33:3b:4d:4d:f7:96:99:f9:
         73:8a:b7:2c:00:06:98:13:37:8b:c3:15:70:cc:c4:ee:72:85:
         63:f6:f3:4c:67:09:68:9a:73:12:de:25:8f:55:41:54:f3:04:
         11:cb:16:1e:df:e3:41:de:60:60:a5:89:a5:40:da:9b:4c:9f:
         59:b1:4f:dc:6f:66:09:59:2b:70:a3:df:95:29:61:c8:be:64:
         b0:07:5f:a9:3c:12:2b:cc:db:16:66:28:34:51:20:b7:4d:9c:
         b4:4f:8c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----