Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/TScQ871AvZFDluovYujHUcoya2A.roa
File:                     TScQ871AvZFDluovYujHUcoya2A.roa (raw, json)
Hash identifier:          XdJ8k0rbHu6wLKeVo+BcGrHiC4Axc2itcpWPF1zlBVU=
Subject key identifier:   4D:27:10:F3:BD:40:BD:91:43:96:EA:2F:62:E8:C7:51:CA:32:6B:60
Certificate issuer:       /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial:       018CC8DCCA8E902B2D50B74BFBFDD63ABCAD
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/TScQ871AvZFDluovYujHUcoya2A.roa
Signing time:             Tue 02 Jan 2024 06:29:22 +0000
ROA not before:           Tue 02 Jan 2024 06:29:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29551
IP address blocks:        195.200.80.0/23 maxlen: 24
                          185.37.16.0/22 maxlen: 22
                          2a00:f520::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:dc:ca:8e:90:2b:2d:50:b7:4b:fb:fd:d6:3a:bc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
        Validity
            Not Before: Jan  2 06:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4d2710f3bd40bd914396ea2f62e8c751ca326b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:6b:57:79:31:fb:dc:b0:cc:b2:79:40:ff:
                    e0:e3:d1:c5:86:86:83:ec:fa:80:29:0c:f6:d7:0e:
                    64:05:92:94:ba:43:3f:9c:d6:7b:41:eb:c3:4f:61:
                    15:cd:1b:ff:fb:47:4d:f4:49:35:4c:6a:9d:94:62:
                    06:33:bc:ed:3a:bc:25:a2:d7:7f:d5:e1:00:78:9f:
                    d4:87:d4:76:98:53:4f:32:e3:6c:54:56:55:ea:44:
                    55:ac:bb:7e:d0:98:cb:86:69:86:30:de:50:35:a9:
                    99:9e:49:db:5c:62:2c:ba:c3:76:58:2e:8f:0e:21:
                    75:f7:f4:17:df:ee:c1:ae:5f:59:26:89:75:8b:b9:
                    21:4e:47:f4:f5:ff:90:46:f4:1e:7c:99:fe:f2:c5:
                    b0:fb:47:32:9c:80:4f:b9:77:71:ed:ad:f1:7a:58:
                    a7:d0:74:c7:b4:03:17:64:c4:80:cd:3a:50:5b:cb:
                    4d:83:e7:01:fa:54:6c:11:a8:6b:bb:47:09:29:0e:
                    5e:2e:dc:28:52:ac:82:f3:ae:d5:d9:07:6e:55:7f:
                    2b:6b:c0:ff:40:9d:8f:60:64:dd:60:03:0f:8d:71:
                    46:21:ce:4b:5c:97:e6:d1:24:ee:7a:00:4e:11:f3:
                    26:fb:d9:4b:b0:90:af:64:6b:46:36:c6:2a:29:73:
                    fb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:27:10:F3:BD:40:BD:91:43:96:EA:2F:62:E8:C7:51:CA:32:6B:60
            X509v3 Authority Key Identifier:
                keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/TScQ871AvZFDluovYujHUcoya2A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.37.16.0/22
                  195.200.80.0/23
                IPv6:
                  2a00:f520::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:92:1b:2d:d3:ca:52:36:bc:d6:8a:fb:21:84:16:77:5e:7f:
         42:b0:02:6c:bd:9f:ed:31:76:d9:04:f0:68:bd:c6:d1:09:18:
         86:9c:01:a5:10:4f:41:4d:f7:d1:fd:70:3b:f6:28:24:49:d1:
         eb:f3:71:83:5d:4e:58:12:d5:da:c9:2a:01:30:35:18:28:23:
         db:22:1e:23:41:fb:70:da:d0:5f:3f:b8:bf:e0:63:d4:5b:34:
         61:59:de:67:06:75:41:f1:6b:c1:51:c8:d0:1f:03:87:82:01:
         c1:e3:be:4b:16:a6:dc:13:b2:9d:4d:7f:43:2f:2d:ce:55:65:
         30:b2:43:de:a0:de:90:fd:2d:ca:e6:43:43:d5:a0:55:22:54:
         11:9f:1d:e8:93:a7:e1:82:cd:cf:32:2e:c4:b0:99:e2:8e:1e:
         69:08:74:86:a0:43:3d:0c:a0:b5:32:6e:c9:9d:a5:f9:de:85:
         ad:fb:6b:47:02:dc:52:3f:87:1f:31:8f:0a:7e:c4:16:7d:a2:
         91:3a:e6:8d:3d:ca:4b:08:9f:a3:f5:df:be:a4:b7:e2:2d:f5:
         f7:cf:cd:89:18:25:f6:43:38:22:bd:54:2d:92:f7:d2:82:56:
         c0:06:a6:52:c8:1b:c8:b1:c1:f3:2e:8e:1c:54:0e:af:93:41:
         31:b5:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----