Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/KwHg1lKXjHmlnjNjvXEqSG0tQ68.roa
File:                     KwHg1lKXjHmlnjNjvXEqSG0tQ68.roa (raw, json)
Hash identifier:          Shrzlr/rK73jWcbI95NRr0K2lMw816cMjiQkMDmOD1c=
Subject key identifier:   2B:01:E0:D6:52:97:8C:79:A5:9E:33:63:BD:71:2A:48:6D:2D:43:AF
Certificate issuer:       /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial:       018CC6B8198FCB3AE81CC0C85D34779E35CC
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/KwHg1lKXjHmlnjNjvXEqSG0tQ68.roa
Signing time:             Mon 01 Jan 2024 20:30:03 +0000
ROA not before:           Mon 01 Jan 2024 20:30:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210727
IP address blocks:        46.253.129.0/24 maxlen: 24
                          2a11:60c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:19:8f:cb:3a:e8:1c:c0:c8:5d:34:77:9e:35:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
        Validity
            Not Before: Jan  1 20:30:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2b01e0d652978c79a59e3363bd712a486d2d43af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d2:c4:32:f5:83:e0:c9:00:e6:b2:73:1f:dd:
                    b1:54:94:96:a1:d0:ac:a4:57:ff:96:d3:dc:39:cb:
                    14:6f:e3:23:d4:0b:10:1e:42:56:b7:36:89:6f:14:
                    28:31:4f:b2:ad:3e:f1:a4:40:22:e2:69:da:87:bc:
                    67:aa:33:35:de:c4:2d:77:d0:d4:09:92:f1:7c:70:
                    93:c5:64:df:ad:0d:a7:2d:c6:99:bb:0b:de:ce:5b:
                    ae:95:f1:80:4a:cc:fc:b4:2c:ed:91:3e:7e:5f:47:
                    42:16:58:ce:62:a0:02:f9:64:20:b8:50:d5:96:2d:
                    81:b0:af:e2:c2:3b:b0:98:7a:39:4c:06:cc:56:6a:
                    2f:2c:91:84:ba:dc:b3:69:76:13:4d:6c:1e:44:33:
                    3a:65:5e:0b:f1:eb:7d:08:75:4e:59:1c:40:11:4f:
                    ef:85:a5:35:98:5b:74:4f:e0:a5:86:00:94:05:fa:
                    3e:3a:16:6d:cd:66:06:41:3c:04:fa:4f:d3:0b:51:
                    e3:ff:19:5e:46:41:be:2d:87:cf:81:66:99:da:9f:
                    9f:ea:4d:78:2d:d3:1f:47:4c:34:7e:0a:c8:23:f2:
                    68:98:2f:84:49:f2:b5:da:12:b0:00:b2:92:27:eb:
                    18:83:38:5e:99:a6:db:e9:db:4e:63:60:02:ac:a2:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:01:E0:D6:52:97:8C:79:A5:9E:33:63:BD:71:2A:48:6D:2D:43:AF
            X509v3 Authority Key Identifier:
                keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/KwHg1lKXjHmlnjNjvXEqSG0tQ68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.129.0/24
                IPv6:
                  2a11:60c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:d1:c6:d4:bb:f3:83:4b:35:28:c9:93:9e:00:bf:d2:e3:be:
         30:12:05:f8:93:14:b1:db:c0:9f:03:a7:a5:4e:fc:56:ae:ad:
         7f:7e:d2:52:cc:52:fc:e5:f2:f2:3f:8b:44:20:b8:51:ea:de:
         26:6e:11:73:13:aa:f0:e8:fb:cb:ea:ee:7d:ae:42:db:99:a4:
         e9:e9:89:72:46:d0:d9:a7:4c:ca:05:e7:b2:47:0a:18:8c:e9:
         fd:d8:8e:a0:bf:02:1b:7c:82:05:c2:e7:18:04:08:86:23:29:
         31:ef:8f:1c:8e:51:ac:f4:16:44:52:2a:13:59:f2:56:fe:b1:
         26:a6:52:e3:b1:80:be:67:d1:c7:e9:90:b2:e3:d6:43:76:df:
         c7:f1:e4:e5:13:86:90:08:2f:f0:ab:dd:44:b0:6e:d5:30:18:
         48:52:4e:f7:88:93:92:89:d6:0d:9f:b7:fe:90:33:8c:eb:4a:
         a2:99:48:df:cf:f2:19:33:0b:35:74:05:8d:30:7e:03:17:76:
         9e:6e:f8:85:cd:05:0e:8b:d8:9c:e0:47:7b:0d:1d:c3:bc:23:
         bd:fd:39:e4:40:01:14:eb:20:b1:2d:97:7c:2b:a3:d1:8b:65:
         69:71:09:51:23:07:1a:d3:01:f9:8c:51:c3:47:71:97:c3:8f:
         fa:da:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----