Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/g-2KrX-lxvJNd_9K3cNz5gyiU2A.roa
File:                     g-2KrX-lxvJNd_9K3cNz5gyiU2A.roa (raw, json)
Hash identifier:          BXb0souN4TB4nNfD0BWovJyjg47elZmvKdXSMN49Xpc=
Subject key identifier:   83:ED:8A:AD:7F:A5:C6:F2:4D:77:FF:4A:DD:C3:73:E6:0C:A2:53:60
Certificate issuer:       /CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
Certificate serial:       018CC2DAC0A54C3757EE15D4D1BC2FFCCDEF
Authority key identifier: 35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/g-2KrX-lxvJNd_9K3cNz5gyiU2A.roa
Signing time:             Mon 01 Jan 2024 02:29:25 +0000
ROA not before:           Mon 01 Jan 2024 02:29:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     41446
IP address blocks:        192.166.12.0/22 maxlen: 22
                          2001:67c:2108::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:c0:a5:4c:37:57:ee:15:d4:d1:bc:2f:fc:cd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350b40ced36e31f905e1a6e8e03c621e9fbfcb29
        Validity
            Not Before: Jan  1 02:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=83ed8aad7fa5c6f24d77ff4addc373e60ca25360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:bf:4d:c9:1f:83:0e:0c:de:55:ae:61:da:
                    30:78:0e:97:94:5c:b9:05:73:fd:07:ea:ea:06:2e:
                    86:46:de:c9:06:e9:88:ee:e4:a0:e1:7e:16:0d:90:
                    51:4f:30:c8:76:00:25:09:38:88:4a:4e:86:36:5d:
                    92:08:a1:0b:e8:93:f8:4c:32:f7:0a:69:e1:62:16:
                    e8:fc:b7:ab:1e:9b:6f:d0:10:de:fe:33:3d:84:31:
                    c6:5c:a5:a3:d7:4d:25:25:d8:9e:fd:01:9c:a7:30:
                    d3:c7:7f:b7:96:1c:ef:a1:46:be:c1:84:de:75:eb:
                    0b:c5:04:5f:d8:f2:17:4e:0b:d9:bf:d2:03:65:e1:
                    9b:5f:8f:81:1c:5a:10:83:ad:6e:40:8e:43:4e:11:
                    36:03:d4:94:d5:8e:1d:8f:b8:2d:8d:6c:19:9a:c9:
                    40:83:42:9f:8c:32:25:33:63:23:1a:5a:6a:15:3c:
                    3f:e7:5b:3d:33:e9:57:e0:bd:44:84:3e:28:35:1f:
                    a5:0b:ce:33:99:73:79:f4:24:2b:50:17:90:18:c5:
                    df:ff:e2:ac:99:fb:8a:95:11:c7:a2:c9:bd:79:a4:
                    b9:f3:f4:2a:2c:fc:61:f9:03:a1:22:3a:77:7e:a0:
                    ad:bc:1a:d5:4c:be:2f:b6:28:6b:61:76:f4:70:eb:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:ED:8A:AD:7F:A5:C6:F2:4D:77:FF:4A:DD:C3:73:E6:0C:A2:53:60
            X509v3 Authority Key Identifier:
                keyid:35:0B:40:CE:D3:6E:31:F9:05:E1:A6:E8:E0:3C:62:1E:9F:BF:CB:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQtAztNuMfkF4abo4DxiHp-_yyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/g-2KrX-lxvJNd_9K3cNz5gyiU2A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/221fcd-61e5-4b45-a359-72f6ca757a08/1/NQtAztNuMfkF4abo4DxiHp-_yyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.12.0/22
                IPv6:
                  2001:67c:2108::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:7e:f5:5a:ec:f7:c7:54:36:6a:a6:e1:5b:d1:db:67:c8:
         89:08:aa:6d:95:bc:47:2d:69:cf:1d:d1:da:44:b3:e4:dd:5c:
         21:bb:8b:3c:d3:91:b4:ac:71:6a:bd:3e:00:4b:fd:77:61:14:
         2f:a6:09:56:48:2b:95:d6:76:e8:e6:97:6b:98:b6:51:e0:03:
         a5:84:df:b4:e7:87:d8:da:ca:f7:60:41:bc:23:8a:f1:99:2c:
         52:1f:c1:ba:6e:b9:b5:f8:e4:ec:0d:e7:16:ec:9c:70:5a:c3:
         56:9d:49:1c:89:b1:88:a7:62:56:b6:17:56:aa:8a:70:57:0d:
         0f:41:73:6f:f0:2e:5e:f2:1d:5e:07:fc:bd:6f:53:f9:93:7e:
         2b:54:43:79:bf:2d:3f:e5:73:00:d6:24:93:60:61:3d:24:36:
         df:62:27:1d:39:ff:01:38:8c:00:73:bf:70:3a:3d:29:dd:0c:
         f9:09:0c:56:25:de:cd:60:55:c6:23:74:d3:69:46:95:2b:44:
         dd:6d:64:43:d7:79:ca:2c:5a:0a:56:0d:d8:23:bf:9a:32:02:
         8e:3f:ac:4a:81:c6:6d:6f:c1:e8:22:68:64:09:36:b7:de:3f:
         19:92:0a:3c:44:d0:a2:8f:e6:12:24:98:5c:a2:dc:90:d4:23:
         f9:90:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----