Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nEhV61qbkk5__LW5x07wPKJZ11s.roa
File:                     nEhV61qbkk5__LW5x07wPKJZ11s.roa (raw, json)
Hash identifier:          AGciIHOL9DlNp3F2iRj6iIXPs6Vsteit86geY4pSDjY=
Subject key identifier:   9C:48:55:EB:5A:9B:92:4E:7F:FC:B5:B9:C7:4E:F0:3C:A2:59:D7:5B
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       018DAE3DCD0F7CE9CFD96EA9FE73538D5B9D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nEhV61qbkk5__LW5x07wPKJZ11s.roa
Signing time:             Thu 15 Feb 2024 19:28:22 +0000
ROA not before:           Thu 15 Feb 2024 19:28:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     11172
IP address blocks:        193.26.114.0/24 maxlen: 24
                          2a10:6c01::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ae:3d:cd:0f:7c:e9:cf:d9:6e:a9:fe:73:53:8d:5b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Feb 15 19:28:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9c4855eb5a9b924e7ffcb5b9c74ef03ca259d75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:7a:d0:8d:e1:42:58:74:db:f8:12:ab:9d:
                    66:22:40:0c:8c:c1:31:3b:c8:2a:78:61:a3:8e:0d:
                    42:76:41:07:a8:c7:63:e3:c5:81:43:49:b1:c6:e8:
                    be:eb:10:b9:2c:4b:27:8e:ca:81:b7:f3:c7:da:a5:
                    94:1f:eb:bf:39:e3:a5:49:1b:11:2b:ed:d9:54:09:
                    af:2c:7a:cb:ed:48:85:80:7e:4a:9b:52:3d:8c:33:
                    61:c8:28:c5:9a:75:a9:cb:89:10:c4:d0:40:b0:0b:
                    70:41:81:d3:10:9d:3f:3b:01:57:cb:cf:aa:8d:41:
                    5c:92:0c:79:0f:50:28:eb:26:19:32:56:3e:4b:cc:
                    4a:31:e2:40:b9:6d:ce:c8:a7:98:6c:9c:e3:d2:0e:
                    84:cd:c5:bc:9d:24:db:9c:e4:c9:dd:a7:0f:71:30:
                    90:ad:a6:7e:6f:5b:f8:97:bf:21:95:95:fd:b0:94:
                    97:f8:88:06:72:51:60:d3:46:ff:85:a4:c4:f3:eb:
                    89:05:bf:fc:69:0d:13:af:ea:f3:5a:0e:e8:0a:7c:
                    1a:cd:9a:fe:e6:f1:b3:50:98:d2:2a:aa:a1:72:56:
                    4f:0c:c5:90:63:38:ea:96:09:97:0f:06:d8:34:9d:
                    98:49:59:ec:fa:f3:53:b2:1d:d9:33:1f:2f:b9:e6:
                    f3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:48:55:EB:5A:9B:92:4E:7F:FC:B5:B9:C7:4E:F0:3C:A2:59:D7:5B
            X509v3 Authority Key Identifier:
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nEhV61qbkk5__LW5x07wPKJZ11s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.26.114.0/24
                IPv6:
                  2a10:6c01::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:26:c5:e5:95:7d:bd:7f:79:06:0b:07:23:ad:b4:21:0a:fb:
         f5:37:76:8a:8f:ce:78:35:8b:33:b2:37:18:9d:45:e4:a7:19:
         cb:a2:8a:1e:ba:a8:d0:d1:23:3f:a3:ef:ed:90:4f:c4:0e:7c:
         99:15:4a:6d:db:8e:f2:f9:e5:58:c1:ac:68:8d:8b:9e:9e:fc:
         f1:cd:70:34:56:48:2b:60:d7:4a:c2:fa:24:ad:4e:87:09:c4:
         d7:37:ea:d0:0a:1e:79:2e:13:a7:32:03:92:3c:ab:b3:20:5c:
         d7:8c:68:0f:b1:c5:6f:3c:a2:12:70:e3:f8:fa:62:20:02:d8:
         e6:d0:5d:17:52:d8:95:8e:b0:f3:4d:3e:a6:a4:24:86:b6:b1:
         0d:14:25:4e:0d:94:8b:6f:65:58:c6:8b:f2:4a:63:c8:7a:78:
         bc:c6:a1:42:16:b3:3e:dd:60:c4:89:37:14:8f:3e:aa:5b:c7:
         6c:a7:5e:fc:30:0b:c2:ca:8e:51:e9:db:d1:55:e1:a8:52:9e:
         0f:84:3c:1e:2d:21:92:6a:d5:2c:bd:f7:28:e0:27:83:42:b2:
         42:66:c8:10:45:a1:58:83:7e:34:cb:45:31:09:73:40:8d:64:
         ad:09:e9:2d:b2:af:74:7e:4b:50:2d:40:f8:16:fa:f6:ea:49:
         96:d7:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----