Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/tUAcdjZrxAvkAdrmYC6QfcbK3vQ.roa
File:                     tUAcdjZrxAvkAdrmYC6QfcbK3vQ.roa (raw, json)
Hash identifier:          jRqf3SN3lunYQUwaPFbkvSDzB+ujxXeL7za0sBf/9jM=
Subject key identifier:   B5:40:1C:76:36:6B:C4:0B:E4:01:DA:E6:60:2E:90:7D:C6:CA:DE:F4
Certificate issuer:       /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial:       018CC94D9DD6DF53890BF4F8C06B78C4462D
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/tUAcdjZrxAvkAdrmYC6QfcbK3vQ.roa
Signing time:             Tue 02 Jan 2024 08:32:36 +0000
ROA not before:           Tue 02 Jan 2024 08:32:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     52088
IP address blocks:        185.45.108.0/23 maxlen: 24
                          2a02:22f0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:9d:d6:df:53:89:0b:f4:f8:c0:6b:78:c4:46:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
        Validity
            Not Before: Jan  2 08:32:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b5401c76366bc40be401dae6602e907dc6cadef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:bc:03:58:79:29:ca:23:c7:76:6c:b8:22:
                    f5:6d:91:9a:b8:b7:b0:b2:8b:b7:56:da:2a:e3:e6:
                    85:6d:f4:f0:ad:7d:3b:cf:5d:5d:ca:11:3c:74:6d:
                    00:a7:c6:75:41:75:8c:87:8c:f9:66:44:be:84:45:
                    88:83:07:dc:fc:93:21:ab:8d:fb:d5:23:5c:0f:ee:
                    31:60:d5:d1:02:58:76:b3:4a:16:a1:c9:f4:7d:ba:
                    c5:81:fa:51:9e:1e:08:ba:16:97:0a:ff:92:46:79:
                    7d:fd:83:b7:72:dd:d6:d4:ce:17:8c:07:1a:9d:30:
                    c4:2e:61:43:78:c5:82:4d:db:d9:8c:ac:a3:8b:8e:
                    a4:bb:da:1d:5a:fc:f7:53:da:29:1e:49:81:aa:1c:
                    87:df:8b:c8:94:03:ba:00:00:08:48:0b:d3:64:2b:
                    ad:54:c9:fe:92:ad:f9:92:36:43:71:c9:de:26:40:
                    b4:d9:8e:e1:b2:fc:7c:b6:1e:a3:4d:4e:47:36:54:
                    42:ef:7d:d1:30:13:40:bc:40:cd:a1:57:dd:67:74:
                    4f:02:d0:9b:51:ed:88:9e:46:a5:2b:3c:6e:8c:01:
                    25:13:6b:af:0b:58:e6:39:b8:a4:19:a0:41:32:b5:
                    c0:18:d5:64:9c:a8:ff:c1:20:4c:e0:94:fa:b8:1a:
                    fd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:40:1C:76:36:6B:C4:0B:E4:01:DA:E6:60:2E:90:7D:C6:CA:DE:F4
            X509v3 Authority Key Identifier:
                keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/tUAcdjZrxAvkAdrmYC6QfcbK3vQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.45.108.0/23
                IPv6:
                  2a02:22f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:c1:85:ce:1c:83:b9:63:87:b5:b2:6f:14:8e:e6:8d:79:8a:
         42:df:7e:c1:3a:17:0d:a4:82:67:3b:39:f0:07:f4:bc:c4:d7:
         db:a0:93:8c:73:5b:e1:68:c1:d0:32:50:fc:81:8d:b3:2f:9a:
         12:57:47:3b:6c:a0:1f:41:1c:b0:da:4f:36:73:7a:c6:ce:b5:
         39:cd:fc:f5:de:33:48:2c:bd:10:7f:07:45:65:58:de:a3:e6:
         79:a3:f4:31:e7:31:49:12:d3:92:06:fd:44:38:5e:ce:d9:05:
         0f:45:bc:5a:0a:f4:d4:c1:67:fc:3b:b4:bc:cd:6e:63:a9:22:
         93:92:b9:5b:89:55:14:8d:b9:ee:61:31:0d:38:a1:6a:f3:2c:
         3b:57:c9:8e:d0:d5:32:20:3f:52:5f:e5:2e:25:17:06:67:af:
         ec:11:11:02:84:4a:27:9c:69:b0:2f:d4:1f:71:51:fe:41:b9:
         0a:82:ca:71:cc:5a:41:a2:3a:99:60:a1:69:e8:37:e9:e1:b4:
         f2:aa:2c:1e:0e:46:c6:b8:bd:a5:2d:85:86:24:d8:08:03:b0:
         39:92:91:33:35:22:64:a3:98:5e:36:54:08:7a:42:c9:a4:ac:
         28:77:e0:a9:46:82:93:cb:e8:1b:b7:18:cf:d2:4f:10:2f:44:
         2d:38:e0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----