Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/PdzD3EQnx2v20NwPoQnT4NJoTXw.roa
File:                     PdzD3EQnx2v20NwPoQnT4NJoTXw.roa (raw, json)
Hash identifier:          q8p9IK6YI1OfabyvLYtSh0I0hdgUFpMDB8pDgY2HPdA=
Subject key identifier:   3D:DC:C3:DC:44:27:C7:6B:F6:D0:DC:0F:A1:09:D3:E0:D2:68:4D:7C
Certificate issuer:       /CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
Certificate serial:       018CCE99D9D92AA3355B466008E24883FE81
Authority key identifier: EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/PdzD3EQnx2v20NwPoQnT4NJoTXw.roa
Signing time:             Wed 03 Jan 2024 09:13:58 +0000
ROA not before:           Wed 03 Jan 2024 09:13:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8943
IP address blocks:        83.138.62.0/24 maxlen: 24
                          2a05:5a40::/32 maxlen: 32
                          2a05:5a42::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ce:99:d9:d9:2a:a3:35:5b:46:60:08:e2:48:83:fe:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9ff91c6b1c7a8ed02842b25c9b0d0638a90424
        Validity
            Not Before: Jan  3 09:13:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3ddcc3dc4427c76bf6d0dc0fa109d3e0d2684d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:a4:fd:cc:aa:c5:24:73:7c:bd:78:3d:cd:
                    eb:db:cf:73:b6:65:81:d2:8e:0c:eb:b0:d9:1a:65:
                    90:15:87:02:84:6c:6d:67:ea:61:29:9f:cf:3b:e9:
                    b9:7e:51:c1:6a:2a:d7:4b:8c:e3:6a:22:27:1a:23:
                    ca:a5:08:3a:ac:09:ef:70:fd:cc:bb:85:85:f4:92:
                    27:4e:78:8b:fc:23:f5:b9:4c:1b:e1:e0:40:de:06:
                    6e:f0:bb:16:d6:a1:7a:0b:c9:89:2e:0c:b7:40:15:
                    f6:eb:0e:5b:31:e1:c3:f2:cf:e5:31:3d:4c:39:33:
                    46:ce:31:c1:a1:7b:91:2e:d7:2e:b7:d1:1f:89:c0:
                    6e:5f:c8:2d:02:14:0c:fb:d7:96:9c:e7:27:3f:1e:
                    49:bc:7a:67:97:c6:9b:7f:17:96:31:28:29:57:86:
                    08:32:78:8f:1b:05:80:a3:04:bc:24:75:0f:64:ca:
                    9b:4d:ec:52:df:3b:16:dc:11:72:68:6c:71:49:ae:
                    c7:e7:c5:f2:f1:91:12:e7:83:08:09:a3:69:0c:f9:
                    f1:52:f1:d3:10:6f:85:4f:3b:70:f9:94:f7:fe:6b:
                    31:28:d4:7d:2e:9f:41:08:d3:4f:5a:fe:f0:c3:b0:
                    a4:da:4d:d8:c2:ed:76:26:04:0e:16:36:1f:00:da:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DC:C3:DC:44:27:C7:6B:F6:D0:DC:0F:A1:09:D3:E0:D2:68:4D:7C
            X509v3 Authority Key Identifier:
                keyid:EA:9F:F9:1C:6B:1C:7A:8E:D0:28:42:B2:5C:9B:0D:06:38:A9:04:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6p_5HGsceo7QKEKyXJsNBjipBCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/PdzD3EQnx2v20NwPoQnT4NJoTXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/57548d-7096-45b0-8be8-00b7bf32ecf8/1/6p_5HGsceo7QKEKyXJsNBjipBCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.62.0/24
                IPv6:
                  2a05:5a40::/32
                  2a05:5a42::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:8f:96:31:40:d1:50:76:2b:9c:b8:9f:d3:3a:5d:38:ed:fe:
         c8:f9:3a:7c:fe:c5:79:07:ba:09:43:7d:23:2d:b6:87:88:8f:
         b9:28:e7:0f:b1:cc:2a:7b:63:6f:a9:39:19:15:f5:52:a2:23:
         cd:5b:0f:a7:96:94:0a:ab:8f:62:5f:fa:c4:ea:8d:5c:10:0d:
         da:9c:3b:19:41:41:8c:44:c9:f2:df:93:99:cd:4b:83:f6:2b:
         e1:b9:38:e4:6c:67:58:18:a9:f6:87:a6:07:50:01:c2:e8:67:
         5b:04:62:45:c4:f1:f4:95:c3:1a:82:1e:f7:75:de:0b:6d:c4:
         09:e9:f8:95:b6:5a:84:a3:04:dd:68:18:d6:7e:c9:81:1e:10:
         e5:79:33:1b:2c:78:b3:f0:bc:e4:cf:87:1b:65:fe:49:ff:f8:
         80:4e:46:59:7e:90:55:5b:aa:c3:d5:7d:d3:b2:48:a6:66:47:
         eb:f0:57:21:6a:be:6e:ab:67:f8:48:1f:3d:dd:c6:40:ff:35:
         f0:17:f6:1f:ac:1c:d8:bf:79:f1:39:8d:aa:58:d2:d0:27:8a:
         3c:8d:56:ef:6b:6c:a2:c7:01:fd:d3:4e:11:c6:f7:45:09:2a:
         54:13:da:80:68:30:db:d0:1a:ce:c3:1d:4c:83:82:a5:fc:e8:
         88:30:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----