Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/a0d8JnFw_JIh9DqYAbHTQbD4jMw.roa
File:                     a0d8JnFw_JIh9DqYAbHTQbD4jMw.roa (raw, json)
Hash identifier:          VlAMzhV1+zuZi3Qss72Au9sqyPgTDP4S8LCJWUP9Gp8=
Subject key identifier:   6B:47:7C:26:71:70:FC:92:21:F4:3A:98:01:B1:D3:41:B0:F8:8C:CC
Certificate issuer:       /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial:       018CC8012FEFAA071CFC4717DA4AD82362D3
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/a0d8JnFw_JIh9DqYAbHTQbD4jMw.roa
Signing time:             Tue 02 Jan 2024 02:29:30 +0000
ROA not before:           Tue 02 Jan 2024 02:29:30 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198722
IP address blocks:        212.18.110.0/24 maxlen: 24
                          2a12:8400::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:2f:ef:aa:07:1c:fc:47:17:da:4a:d8:23:62:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
        Validity
            Not Before: Jan  2 02:29:30 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6b477c267170fc9221f43a9801b1d341b0f88ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:5a:8a:e9:71:d9:a6:10:40:74:13:c8:fa:
                    ae:d5:1b:16:d7:f4:a1:98:ae:ab:bc:90:e7:f6:ab:
                    44:dc:6a:ef:81:5a:73:b4:18:97:6b:5b:57:c1:7b:
                    f6:fa:69:4a:a8:e3:f0:d6:1e:e0:74:1a:f8:d9:60:
                    62:e4:ec:a9:7a:6e:4c:f5:f7:68:2f:28:89:bb:8c:
                    ab:c6:68:f4:c4:9a:78:8b:42:30:99:d3:2c:7e:00:
                    6b:eb:aa:7e:50:2f:7d:9a:4d:91:db:96:56:02:ca:
                    5c:60:13:9d:18:52:5b:ac:75:46:ef:1c:c2:ee:05:
                    53:b0:88:d3:41:c3:1b:47:26:4f:47:83:43:92:c1:
                    52:79:7d:1a:c3:33:35:ac:0c:fa:6f:b9:a0:7f:06:
                    3c:64:2a:c2:08:9d:70:aa:b6:2f:b5:62:4d:cc:76:
                    03:3b:28:30:8b:cf:1c:11:9c:2c:91:3f:2a:90:d3:
                    b8:74:f0:6f:c5:72:84:c3:4d:f4:dd:52:16:a6:89:
                    3f:5c:5c:04:b5:80:f4:ae:b6:42:3c:47:b5:15:6f:
                    8d:2d:8b:d5:b9:8d:0d:3c:fd:69:2d:d6:e4:f1:2a:
                    e8:f6:c3:cb:3c:f3:b1:70:8b:c1:cd:3e:fd:26:34:
                    d0:c6:72:eb:53:77:bc:95:c8:0d:9d:f6:30:52:ab:
                    41:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:47:7C:26:71:70:FC:92:21:F4:3A:98:01:B1:D3:41:B0:F8:8C:CC
            X509v3 Authority Key Identifier:
                keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/a0d8JnFw_JIh9DqYAbHTQbD4jMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.110.0/24
                IPv6:
                  2a12:8400::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:df:ce:2f:37:a6:7d:d7:eb:a2:26:c5:e6:e6:4f:e3:0c:d2:
         2d:31:41:28:78:d3:00:9c:c9:17:89:2e:9d:69:1a:1d:a3:fa:
         97:36:91:34:d6:fe:d5:d0:5b:e6:b3:df:56:ce:26:56:e2:00:
         72:58:87:91:db:f9:23:b4:03:d0:f4:24:38:37:d7:78:05:0b:
         a4:b2:b7:c8:99:e6:83:4c:3b:d3:e9:72:ad:ec:62:52:9c:8b:
         f6:d6:86:6d:ca:c3:26:c2:fd:ee:c2:33:9d:8f:76:26:aa:60:
         06:f4:f5:b9:5a:ad:fa:42:c5:23:8e:17:17:8e:e1:5c:50:32:
         51:99:5e:65:5e:42:27:e2:ce:f6:f1:1d:16:53:8c:ed:da:44:
         c6:7b:59:bd:08:e3:82:5a:2d:e2:fc:2a:2f:f2:fe:c8:72:7b:
         9f:fb:1e:a9:17:ff:f5:b8:71:93:0a:21:a8:d8:a8:bc:3a:da:
         7f:d7:64:08:8e:db:cf:83:7e:cc:b4:e5:45:5e:46:cf:24:51:
         14:04:cf:34:74:1c:14:98:dc:0c:43:f1:9f:ec:5a:ea:49:99:
         a5:75:8f:97:d7:fb:b1:de:b0:c8:f6:cc:bd:70:ad:b2:48:21:
         c6:ee:3b:a8:e7:78:04:18:8a:2c:b2:d2:31:3d:e2:22:44:84:
         a7:6c:80:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----