Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/EFCdu4D0vOADh9FoAY2EbBw0ZkQ.roa
File:                     EFCdu4D0vOADh9FoAY2EbBw0ZkQ.roa (raw, json)
Hash identifier:          yByJh6WCXLuqwvA+vclPBup7ttoTCnCXEhXU2EVuzrc=
Subject key identifier:   10:50:9D:BB:80:F4:BC:E0:03:87:D1:68:01:8D:84:6C:1C:34:66:44
Certificate issuer:       /CN=e9057470fd56f1b773b2e40abaee79f9966e4436
Certificate serial:       0191BCDE2D5B933312887B2E75FAF8FD93B9
Authority key identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/EFCdu4D0vOADh9FoAY2EbBw0ZkQ.roa
Signing time:             Wed 04 Sep 2024 11:49:22 +0000
ROA not before:           Wed 04 Sep 2024 11:49:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209014
IP address blocks:        164.138.192.0/21 maxlen: 21
                          2a00:bac0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:bc:de:2d:5b:93:33:12:88:7b:2e:75:fa:f8:fd:93:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9057470fd56f1b773b2e40abaee79f9966e4436
        Validity
            Not Before: Sep  4 11:49:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10509dbb80f4bce00387d168018d846c1c346644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:7d:d5:8f:9b:45:71:9e:18:ee:98:a0:2f:
                    ed:1c:d1:e9:01:65:6a:73:95:10:ca:42:db:b4:3e:
                    95:7c:6b:ab:ae:0c:fd:05:52:1b:a8:86:6e:7f:b6:
                    25:77:a7:ad:07:b8:d0:34:82:ed:de:a4:d9:ab:88:
                    8d:63:55:0b:0e:c2:be:b3:7e:e4:11:1a:a1:47:c1:
                    b3:2e:f6:6c:9e:6b:a1:b6:a7:8e:40:13:4e:5b:39:
                    61:d1:c8:2c:e5:d4:41:dd:37:a1:a0:82:3b:da:b8:
                    73:5b:5c:ce:f6:37:21:71:84:54:80:01:96:cc:f6:
                    27:7c:9d:f9:26:5f:59:d8:a8:54:ed:65:47:e6:e5:
                    de:6a:10:c5:41:b1:a6:e4:24:8b:8e:b1:d3:c5:a8:
                    97:ae:ce:9e:9c:cb:af:08:1b:0c:73:57:d9:6b:2c:
                    de:cf:b3:46:5d:54:20:c9:b4:ce:9a:98:2b:19:70:
                    6e:0b:ba:75:27:a4:d0:ac:64:59:27:a5:38:8e:05:
                    1b:3f:c3:4c:9e:db:7f:5e:cb:1c:44:a7:a2:00:1d:
                    48:a1:39:df:22:ca:8c:d1:07:6c:47:0d:a3:1d:d2:
                    3d:2d:fb:a9:bf:13:6b:2c:92:c5:50:e6:68:83:23:
                    4b:26:c9:ca:87:7a:87:67:ce:64:42:1d:3d:1d:53:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:50:9D:BB:80:F4:BC:E0:03:87:D1:68:01:8D:84:6C:1C:34:66:44
            X509v3 Authority Key Identifier:
                keyid:E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/EFCdu4D0vOADh9FoAY2EbBw0ZkQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.138.192.0/21
                IPv6:
                  2a00:bac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:2f:71:15:41:28:ee:ac:f3:b0:81:dc:89:be:d9:f4:3a:
         3d:ae:e6:00:06:69:99:56:37:26:12:60:64:07:84:4b:17:83:
         9e:3e:c9:c1:98:f5:66:d7:93:f4:d5:a7:1e:5d:ca:fe:62:d0:
         d3:5f:11:e7:2c:0a:b3:95:cf:95:0a:42:2e:74:85:c5:5f:69:
         b1:d7:77:03:72:74:b0:85:79:3f:4f:9f:3f:4a:07:ee:c1:76:
         3a:a6:d6:66:9c:01:d6:c2:a9:93:88:5d:95:ef:e7:75:27:d0:
         26:78:97:e5:82:d1:ca:15:e4:76:73:7c:9d:4a:84:cb:6c:d3:
         05:1c:c6:48:53:30:5f:47:bf:83:ca:44:14:54:58:7e:12:6e:
         24:c7:34:e7:fa:38:ea:a9:c1:4d:cb:7c:74:b4:9f:df:88:87:
         c3:f0:eb:49:8a:45:24:b5:16:2d:2b:c5:82:77:05:18:6b:73:
         76:f7:de:83:2a:3f:8a:6d:ed:dc:54:8d:59:d3:5d:35:0e:20:
         c3:7f:66:4d:bb:14:9e:f0:06:ff:6e:7f:13:c3:46:ce:a3:75:
         53:3d:07:73:40:92:08:cf:6b:a5:ed:1d:5d:99:59:87:85:df:
         04:d8:7b:33:bc:09:11:43:25:c6:b4:c6:ef:e8:b4:7f:d5:2a:
         d8:54:0f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----