Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/DovyyqVNM1Yv1WR3opt7bjVPV60.roa
File:                     DovyyqVNM1Yv1WR3opt7bjVPV60.roa (raw, json)
Hash identifier:          MMKbNd6X10r738VgtkT1l7h3QoZlN9vZ5YBsOZ/oecI=
Subject key identifier:   0E:8B:F2:CA:A5:4D:33:56:2F:D5:64:77:A2:9B:7B:6E:35:4F:57:AD
Certificate issuer:       /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial:       018CC94D5C00D53EB230DC7A1F90F5BC622B
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/DovyyqVNM1Yv1WR3opt7bjVPV60.roa
Signing time:             Tue 02 Jan 2024 08:32:19 +0000
ROA not before:           Tue 02 Jan 2024 08:32:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35044
IP address blocks:        2001:67c:484::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:5c:00:d5:3e:b2:30:dc:7a:1f:90:f5:bc:62:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
        Validity
            Not Before: Jan  2 08:32:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0e8bf2caa54d33562fd56477a29b7b6e354f57ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cb:c5:3c:f2:1d:cc:de:91:c5:79:7d:30:09:
                    d0:d6:1f:1f:ca:76:38:ac:9d:70:f7:e9:60:04:63:
                    ab:f2:ef:af:59:67:13:28:a2:87:0f:32:72:2c:5b:
                    d9:dc:54:f9:53:8b:8f:2c:04:c8:48:21:02:38:c5:
                    74:e8:26:23:2c:79:18:03:90:3b:7c:df:c5:87:f5:
                    48:d4:74:07:9d:32:30:30:30:e8:b6:11:16:dc:41:
                    d1:e6:2e:f2:2d:fa:19:12:53:b0:b3:3c:db:1d:e4:
                    02:e7:05:6f:e7:89:db:38:c9:ad:b9:32:61:23:3e:
                    04:7e:f4:d1:db:50:b3:56:d3:fe:9b:c8:cc:49:63:
                    2b:81:f5:6e:8b:5f:c0:47:9a:9b:7b:e3:58:c0:01:
                    15:fb:bd:92:12:b4:f8:02:b1:60:5e:02:dd:d1:09:
                    59:d2:b9:9b:b2:79:26:5c:1a:a9:c9:0a:0b:18:8a:
                    22:4e:30:b5:ab:dd:61:92:a5:cb:cb:79:a2:7b:cb:
                    68:d4:98:8b:7e:41:ba:30:25:a9:32:01:d1:31:0f:
                    be:8c:54:e9:b9:b2:82:9f:ab:ac:1b:52:34:d4:6c:
                    5a:bb:69:62:bc:7c:f5:f1:34:90:c8:fb:6a:8a:58:
                    c9:ef:91:84:11:92:ac:78:44:5b:06:bb:96:5a:e5:
                    76:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8B:F2:CA:A5:4D:33:56:2F:D5:64:77:A2:9B:7B:6E:35:4F:57:AD
            X509v3 Authority Key Identifier:
                keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/DovyyqVNM1Yv1WR3opt7bjVPV60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:484::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:95:a9:6f:ba:ca:85:bf:a7:39:37:5d:cb:64:32:0e:64:ba:
         40:ef:35:f5:f6:35:c8:38:1a:5b:08:73:d6:09:8b:82:bc:5d:
         d1:2b:28:f9:ec:d4:1b:67:1e:e9:b2:dd:65:5b:a8:03:c9:f3:
         49:00:df:24:0d:0f:f1:3d:fb:a1:e5:84:e4:89:5e:88:11:f8:
         a3:b5:de:7f:bc:bc:cf:03:d2:a2:b4:90:e9:1c:c5:b3:34:99:
         60:e0:4d:e0:ac:4f:3c:35:58:a0:10:76:59:68:a9:7e:75:1e:
         a3:59:65:01:ca:07:60:f5:a5:5e:39:83:b8:10:6b:fe:14:66:
         7e:46:90:35:92:c8:60:12:7a:f3:1c:a2:e2:43:ec:71:4f:35:
         ee:42:aa:04:23:59:42:42:36:c9:e9:ea:a1:9f:24:e0:21:80:
         16:d7:b9:f4:24:f8:39:1d:e4:25:87:26:25:66:21:20:c6:d0:
         1f:57:65:d3:0c:c6:39:9b:ff:da:18:33:f4:1c:9f:22:aa:20:
         20:67:d5:2d:78:42:4c:a8:a7:db:c3:4c:b2:54:1d:f0:54:1c:
         f1:6b:50:f8:98:a5:2a:a5:b0:ad:24:e0:55:5d:ac:4c:c8:94:
         66:99:44:6d:58:52:ca:42:4c:bd:d8:34:1e:e6:48:e4:15:23:
         d0:6f:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----