Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/nsKfFsvaguNgkpoGs_fT3uLJLLc.roa
File:                     nsKfFsvaguNgkpoGs_fT3uLJLLc.roa (raw, json)
Hash identifier:          7P3BwXuchThRInjj0HMs3g8KEcVFcNDr1mryFw+xF7s=
Subject key identifier:   9E:C2:9F:16:CB:DA:82:E3:60:92:9A:06:B3:F7:D3:DE:E2:C9:2C:B7
Certificate issuer:       /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial:       018CCA287BC665DFFDE1DEA95006E8A0B7B3
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/nsKfFsvaguNgkpoGs_fT3uLJLLc.roa
Signing time:             Tue 02 Jan 2024 12:31:39 +0000
ROA not before:           Tue 02 Jan 2024 12:31:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     174
IP address blocks:        2a0e:1c80:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 10:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:28:7b:c6:65:df:fd:e1:de:a9:50:06:e8:a0:b7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
        Validity
            Not Before: Jan  2 12:31:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9ec29f16cbda82e360929a06b3f7d3dee2c92cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:39:b6:55:c0:ef:8a:4d:64:99:f1:bb:09:89:
                    1d:5b:0b:b1:bd:31:16:eb:0a:65:cd:8b:be:0a:f7:
                    30:6a:e1:4e:3e:8d:29:88:51:14:9d:fa:ee:43:21:
                    1e:a2:0a:2b:1d:3f:73:af:53:c9:c4:1a:47:7a:24:
                    dc:4d:e7:36:0e:41:e3:27:9c:4f:fe:ae:ce:b0:69:
                    02:57:77:fb:9f:ff:74:6f:e8:37:71:ed:fb:f8:e4:
                    8d:58:9d:24:b6:c7:f5:58:24:ac:aa:60:d4:0e:13:
                    ef:88:15:29:25:f9:90:93:83:19:b7:42:07:b1:a6:
                    7d:4d:ba:b3:31:a6:17:46:62:4f:cf:1d:ff:ce:bb:
                    94:5d:47:87:86:d9:77:b5:0b:0b:25:1b:80:d3:6b:
                    e7:7c:5f:32:11:4d:1c:9a:4f:0d:3c:3c:4d:0f:7c:
                    96:68:e2:ad:43:18:b0:09:7e:9d:83:4c:73:4e:8b:
                    fd:46:0a:87:10:02:2a:f1:1e:ae:79:4a:36:e7:ad:
                    7f:3b:f5:42:78:76:b1:51:5c:84:9c:33:20:af:01:
                    20:5d:8d:46:c3:18:fe:70:78:fd:62:89:33:15:fa:
                    4d:01:cc:e8:19:be:91:24:b8:55:39:41:89:af:de:
                    83:ca:9a:6d:5f:3e:51:d9:38:82:63:93:15:ab:80:
                    11:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C2:9F:16:CB:DA:82:E3:60:92:9A:06:B3:F7:D3:DE:E2:C9:2C:B7
            X509v3 Authority Key Identifier:
                keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/nsKfFsvaguNgkpoGs_fT3uLJLLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:1c80:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:bb:ff:f1:3c:08:a7:e3:2f:2d:96:9d:7e:ec:c6:d6:64:e5:
         19:2e:67:c4:b9:a5:2e:fa:a2:7a:f8:87:aa:3c:01:90:65:60:
         56:ec:0d:b2:cb:68:a0:9a:14:d0:10:6c:75:48:3d:1a:33:7b:
         91:76:ef:ce:f6:22:40:5a:53:ff:94:25:81:92:46:a0:7a:55:
         6e:37:d3:ce:76:48:17:cf:0c:e0:98:3e:70:f0:f6:b9:84:62:
         ce:e6:ba:af:9b:31:31:08:ed:e6:ec:c3:a1:aa:47:01:c0:ed:
         53:83:e9:2c:a7:27:b9:af:42:c4:86:08:f5:ce:81:56:6f:71:
         75:a3:e5:32:21:6f:a0:de:02:a4:a2:6d:aa:4c:fc:67:ee:f3:
         3d:04:f2:d5:4d:f9:ea:70:8d:9f:01:f7:62:85:58:fb:70:f3:
         58:d0:97:14:f1:cf:fb:0d:31:42:3d:f0:90:7b:3d:13:26:53:
         32:76:dc:40:d6:39:9f:45:84:0c:ae:86:b2:95:f5:c1:af:93:
         04:ba:85:f0:be:35:d4:10:fa:8b:56:5f:ae:f5:ce:85:98:9c:
         7e:10:f8:1d:71:89:e5:60:5c:17:21:63:e7:b2:70:c6:91:e0:
         eb:a6:ff:fb:9e:b0:48:77:af:3f:c3:e3:1f:77:83:09:e6:3b:
         7a:7b:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----