Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/uhSfXdPQPlwfFlxM6hNM-VWeNWs.roa
File:                     uhSfXdPQPlwfFlxM6hNM-VWeNWs.roa (raw, json)
Hash identifier:          h6pp+w0qcgP8oQF03SUgrN85tF8IGhhjoXo8KNk68Jc=
Subject key identifier:   BA:14:9F:5D:D3:D0:3E:5C:1F:16:5C:4C:EA:13:4C:F9:55:9E:35:6B
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       018D08D4A0C3F12D34ADF24E1CC32942C2FA
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/uhSfXdPQPlwfFlxM6hNM-VWeNWs.roa
Signing time:             Sun 14 Jan 2024 16:36:08 +0000
ROA not before:           Sun 14 Jan 2024 16:36:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215730
IP address blocks:        185.125.50.0/24 maxlen: 24
                          2a0e:d604:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:08:d4:a0:c3:f1:2d:34:ad:f2:4e:1c:c3:29:42:c2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Jan 14 16:36:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ba149f5dd3d03e5c1f165c4cea134cf9559e356b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:43:35:e8:1b:04:c1:6e:13:bd:80:04:54:
                    15:3a:13:42:88:f4:ef:96:42:73:12:6c:71:6d:f8:
                    6e:98:dd:d7:e1:e5:39:30:ca:6b:6c:1b:c0:aa:be:
                    a6:2a:76:4d:65:fa:ff:ec:db:4e:38:b0:ba:44:ab:
                    36:bf:ee:96:cc:d1:4b:6e:f9:b2:99:01:1d:02:a0:
                    4b:68:24:ee:c0:17:d3:e5:a9:16:5a:8a:86:b6:31:
                    6b:c0:61:db:d2:5c:dd:3f:05:7f:06:90:9d:ea:a0:
                    c0:8c:f8:7a:5e:02:ee:33:ce:31:d3:b3:ca:39:93:
                    17:1a:68:01:c9:9d:12:16:9f:23:ee:c2:da:f0:69:
                    e1:b4:8e:af:a9:6c:dd:db:aa:56:dc:40:53:49:d7:
                    6d:04:96:93:f6:df:2e:41:ee:0d:f0:e2:47:65:f6:
                    2d:eb:4f:8e:20:af:5f:9a:e3:d5:aa:fb:83:fd:f8:
                    62:02:ba:4f:7d:1b:a2:e3:39:95:01:a0:39:af:4a:
                    52:94:fd:7d:c2:5e:22:4b:39:cb:ac:a1:e9:39:17:
                    e6:18:95:6c:ac:18:2f:09:51:44:ed:c2:f7:88:9a:
                    50:9a:48:c8:6d:fe:6c:9f:f4:48:d8:12:da:84:87:
                    f6:fa:57:a8:a2:e5:dd:d6:80:07:d1:1a:1b:ad:af:
                    e9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:14:9F:5D:D3:D0:3E:5C:1F:16:5C:4C:EA:13:4C:F9:55:9E:35:6B
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/uhSfXdPQPlwfFlxM6hNM-VWeNWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.125.50.0/24
                IPv6:
                  2a0e:d604:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:36:a6:b4:70:30:17:17:80:23:83:8f:7f:87:50:23:f8:71:
         c4:a8:89:23:22:6b:af:0d:32:58:9f:91:48:69:ca:de:e9:b8:
         67:2f:22:22:94:4a:07:a7:b9:c6:a0:e9:56:ed:03:83:0f:da:
         3c:10:5f:0d:9b:f2:ef:23:53:df:8b:d5:8a:7f:d8:77:0c:e0:
         f6:7c:13:74:44:d0:ef:db:f3:ef:32:13:47:4e:80:32:37:d0:
         e2:ac:5e:ae:a1:9a:f6:b8:bb:22:a0:1b:8c:30:ae:38:d9:e6:
         f9:91:26:f4:15:54:d8:ce:5e:e8:75:71:f2:83:9d:27:fd:06:
         cf:e9:3e:40:2f:3e:c5:fe:89:e0:4e:f6:e5:71:d7:8b:7b:fa:
         d5:f1:00:e4:b7:05:d0:e1:b4:6c:bb:99:b9:95:6f:f0:ba:aa:
         c1:9b:0c:bf:1d:b4:6d:b9:a2:60:76:c4:12:85:fd:d5:d1:87:
         96:dc:29:59:09:11:c9:f7:43:4e:dd:0c:9b:9f:07:2c:b3:b9:
         dc:62:ec:5e:9f:31:12:c5:5e:d3:58:69:3e:12:92:a7:18:db:
         73:c4:87:e7:51:e4:44:51:f6:eb:fe:8a:71:70:92:56:5b:3b:
         2a:2e:54:d0:12:23:31:70:db:90:c0:fe:55:de:94:fb:04:03:
         c6:a9:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----