Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/Gm7HwdreKur9PjT96Ii_d6OpGMM.roa
File:                     Gm7HwdreKur9PjT96Ii_d6OpGMM.roa (raw, json)
Hash identifier:          OuGul3T09UAFl146LOqQgLbhIFFXyJPQgY0tXeqCcns=
Subject key identifier:   1A:6E:C7:C1:DA:DE:2A:EA:FD:3E:34:FD:E8:88:BF:77:A3:A9:18:C3
Certificate issuer:       /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial:       01934650A32DA74F37C6B0E92D3D735DEA72
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/Gm7HwdreKur9PjT96Ii_d6OpGMM.roa
Signing time:             Tue 19 Nov 2024 21:25:09 +0000
ROA not before:           Tue 19 Nov 2024 21:25:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        45.10.120.0/22 maxlen: 24
                          2a0e:3d80:beaf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:50:a3:2d:a7:4f:37:c6:b0:e9:2d:3d:73:5d:ea:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
        Validity
            Not Before: Nov 19 21:25:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1a6ec7c1dade2aeafd3e34fde888bf77a3a918c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:1f:87:1a:0b:29:69:90:83:59:f3:c1:bf:
                    a9:03:16:4b:93:16:bb:c8:2f:62:17:cb:59:da:6f:
                    a6:4c:da:4c:90:1b:da:cd:b9:99:ef:b8:fb:c3:7c:
                    b4:0a:51:cd:75:d7:21:e4:7d:76:46:d7:22:4e:b9:
                    45:a8:af:db:55:b4:e6:58:14:ec:9f:2f:95:11:2d:
                    33:ca:fa:e1:8e:72:16:ac:dc:04:e3:d5:73:92:d1:
                    bc:a0:8f:50:d2:48:41:4c:58:85:bc:52:ac:d7:66:
                    3f:f0:ed:5c:8f:d6:a6:de:b4:73:48:60:58:db:5a:
                    02:d6:3c:b7:4f:46:7a:69:16:35:34:ae:96:7d:a1:
                    b7:c4:4e:28:cd:db:f9:e5:f5:46:9e:d8:3b:d7:5a:
                    a5:ed:2b:52:cd:74:3d:64:70:22:a6:7d:d6:f1:1c:
                    a4:5f:d6:9c:cd:0c:5b:87:b9:94:f0:b4:77:6c:26:
                    7a:36:05:50:7f:b3:2d:07:3c:3c:a6:4e:95:b0:f1:
                    80:44:4f:5e:f8:f1:ba:af:af:5a:39:ce:6d:d0:c7:
                    bc:cf:47:77:37:bb:09:3a:8a:d7:08:44:d8:7e:5c:
                    ae:4d:fa:eb:ab:f1:f7:91:60:bd:1b:c8:39:31:4d:
                    91:0d:9b:89:5c:70:3f:a0:44:0a:f0:b5:73:e7:e0:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6E:C7:C1:DA:DE:2A:EA:FD:3E:34:FD:E8:88:BF:77:A3:A9:18:C3
            X509v3 Authority Key Identifier:
                keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/Gm7HwdreKur9PjT96Ii_d6OpGMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.120.0/22
                IPv6:
                  2a0e:3d80:beaf::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:da:d9:1b:9b:bf:12:fd:9c:dc:aa:40:8d:ac:87:8e:5a:53:
         f9:b8:01:45:fb:90:b6:8e:94:e1:e6:c8:1d:7d:b2:f9:66:ec:
         e8:93:15:e1:85:0d:05:ad:9b:69:58:ca:95:06:76:23:89:af:
         a9:02:92:91:fa:1f:83:70:c5:cb:c8:e8:d8:b7:23:dc:78:f1:
         37:d5:b1:dc:51:c8:3b:bd:c6:3a:e3:7b:89:6e:c5:00:22:dc:
         b7:70:47:e4:61:0d:cd:b7:73:67:33:73:02:2b:d8:52:f4:0a:
         0d:97:97:43:43:08:ca:fb:19:2c:7e:b2:da:af:f1:06:b9:03:
         b1:48:4e:aa:74:2d:ea:82:47:cc:2a:92:16:da:99:ba:ab:c9:
         de:10:02:6f:74:4c:5e:fd:06:c3:a7:d2:c3:6a:0d:09:cd:87:
         90:69:b6:52:17:79:0b:d1:78:fd:0a:ae:cd:d5:bf:aa:b0:22:
         05:1b:2d:d5:fe:a9:d4:82:ec:ae:b3:c6:c2:65:33:01:2a:cb:
         e3:8e:e3:14:eb:e6:2f:ee:88:1f:77:0d:10:b4:37:e3:6d:c4:
         cf:81:02:3c:fd:86:00:1b:dc:c4:d0:ce:5a:68:a1:cd:77:c1:
         37:ac:1f:89:79:56:5d:2e:14:41:8e:53:13:cb:a4:92:de:ea:
         59:3d:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----