Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/LD69fxhIMu1qFqWntlZx472Ln14.roa
File:                     LD69fxhIMu1qFqWntlZx472Ln14.roa (raw, json)
Hash identifier:          j3/TZX8sBNuWlKm/mBOJrseG6V7lckLcYy8a3wW7UaY=
Subject key identifier:   2C:3E:BD:7F:18:48:32:ED:6A:16:A5:A7:B6:56:71:E3:BD:8B:9F:5E
Certificate issuer:       /CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
Certificate serial:       018F1A6CC52C295C5B4B31C3305F85FE1A4C
Authority key identifier: 77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/LD69fxhIMu1qFqWntlZx472Ln14.roa
Signing time:             Fri 26 Apr 2024 12:41:26 +0000
ROA not before:           Fri 26 Apr 2024 12:41:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        46.253.129.0/24 maxlen: 24
                          2a11:60c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1a:6c:c5:2c:29:5c:5b:4b:31:c3:30:5f:85:fe:1a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bc534ba44e9d3cba2f2446d4a3dd6eea9b8f61
        Validity
            Not Before: Apr 26 12:41:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2c3ebd7f184832ed6a16a5a7b65671e3bd8b9f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:83:67:bb:4c:95:69:8e:fd:5a:0a:9c:76:
                    29:3b:8c:50:4a:80:fb:3d:ff:a5:e5:74:9a:b1:2d:
                    88:fc:5f:aa:e3:5c:98:7e:5a:54:e6:c7:c3:20:37:
                    88:41:ba:62:85:85:b8:51:34:d4:4a:43:c7:8f:50:
                    3c:f4:84:21:96:b2:e3:1f:6f:47:21:2f:bb:53:80:
                    ed:bd:da:8e:b4:eb:1e:5c:d9:d7:d6:66:10:48:ea:
                    92:69:1b:cc:9c:ea:d5:14:3d:38:97:ad:17:7c:40:
                    2e:1c:79:86:7e:51:a6:ea:d8:bf:e7:34:ff:da:02:
                    a1:9c:fd:f7:73:3c:3a:da:07:ff:15:04:41:df:1c:
                    a4:99:69:01:d5:be:cf:60:ca:83:f5:2a:96:c2:41:
                    95:e7:8c:c6:fc:da:28:d2:99:d7:6a:53:1c:4b:97:
                    cd:33:78:a6:26:67:d2:49:d8:c1:bf:5a:b2:57:e3:
                    8d:56:78:82:d2:63:a0:ab:42:f9:86:01:7f:86:0d:
                    03:30:5a:bb:f0:59:a5:64:1e:30:b6:68:2a:53:fc:
                    ff:07:9e:58:02:23:e3:d2:5b:59:b6:6d:3d:35:39:
                    17:a0:50:ff:06:1a:02:89:e9:9e:41:53:a8:78:e0:
                    48:4f:9e:a2:d9:e3:22:93:f4:32:80:fb:72:fe:6f:
                    00:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3E:BD:7F:18:48:32:ED:6A:16:A5:A7:B6:56:71:E3:BD:8B:9F:5E
            X509v3 Authority Key Identifier:
                keyid:77:BC:53:4B:A4:4E:9D:3C:BA:2F:24:46:D4:A3:DD:6E:EA:9B:8F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7xTS6ROnTy6LyRG1KPdbuqbj2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/LD69fxhIMu1qFqWntlZx472Ln14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/2fdd56-ba2c-46fb-9882-9b257f4fea8d/1/d7xTS6ROnTy6LyRG1KPdbuqbj2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.129.0/24
                IPv6:
                  2a11:60c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:16:96:70:c0:28:6e:f3:fc:3c:eb:2e:15:18:d7:4d:41:17:
         41:de:4c:04:21:5a:6a:1b:ce:88:31:df:f2:5a:54:5c:4b:e6:
         78:11:83:4a:50:29:0d:b3:06:f0:9d:d0:b6:d1:80:48:10:59:
         33:8a:e3:25:8c:7e:d0:19:02:11:dc:ed:47:ac:30:28:f6:79:
         82:0b:0f:5c:a6:94:aa:8a:92:08:22:28:90:2b:af:cd:5d:69:
         a5:d0:31:dd:17:00:fc:6b:c1:35:5b:13:22:34:75:2f:60:a1:
         b6:8e:db:fb:e9:7c:95:95:02:44:02:b1:2b:b2:6e:c5:60:80:
         37:dc:7c:48:bb:75:08:18:9e:c3:cc:0d:f3:2b:2f:4b:9a:ce:
         e9:3f:7c:3b:66:f9:7e:9f:10:69:c1:98:1a:a6:fb:2d:fb:61:
         16:35:20:70:09:39:88:36:e2:e6:1e:c0:2c:8b:43:43:ba:6e:
         a7:39:96:40:94:de:d3:07:c3:e2:d0:23:b1:65:a6:14:c8:6e:
         69:ae:21:55:4f:3b:03:11:83:7a:e5:0d:10:6d:95:ce:dc:28:
         95:1d:64:c6:c6:63:0e:f2:f8:c5:14:9a:66:c3:04:1b:15:b4:
         90:85:26:23:55:0a:40:35:b8:21:aa:45:92:01:10:be:fb:eb:
         d3:da:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----