Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/G6BsdX_ASRv5UfeZ_LVtsi2ysPQ.roa
File:                     G6BsdX_ASRv5UfeZ_LVtsi2ysPQ.roa (raw, json)
Hash identifier:          BIlmtFAUtfTY6xyYjebr7YUkwWc3FO00wIhOBo91H1Y=
Subject key identifier:   1B:A0:6C:75:7F:C0:49:1B:F9:51:F7:99:FC:B5:6D:B2:2D:B2:B0:F4
Certificate issuer:       /CN=c5ae064626f5ceb7eea0df8fd01c10dd4af82d7d
Certificate serial:       01932F607230F2B5150B14245BFAC561DDCB
Authority key identifier: C5:AE:06:46:26:F5:CE:B7:EE:A0:DF:8F:D0:1C:10:DD:4A:F8:2D:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/G6BsdX_ASRv5UfeZ_LVtsi2ysPQ.roa
Signing time:             Fri 15 Nov 2024 10:31:09 +0000
ROA not before:           Fri 15 Nov 2024 10:31:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212855
IP address blocks:        93.157.140.0/24 maxlen: 24
                          2001:67c:f8c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2f:60:72:30:f2:b5:15:0b:14:24:5b:fa:c5:61:dd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ae064626f5ceb7eea0df8fd01c10dd4af82d7d
        Validity
            Not Before: Nov 15 10:31:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1ba06c757fc0491bf951f799fcb56db22db2b0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f5:04:84:98:39:59:14:94:93:f3:63:6c:f7:
                    b4:fd:40:2e:ff:e6:42:07:8e:00:7e:97:a9:96:fc:
                    eb:ac:9b:10:17:18:9c:70:0e:0c:b6:9f:18:61:c4:
                    99:ce:ac:50:c5:6b:65:bf:10:42:d3:53:32:27:eb:
                    22:be:0a:a1:cc:76:8b:42:da:bc:b6:18:bc:fe:1d:
                    74:99:1d:92:dd:06:81:8b:80:80:ae:1a:53:0c:57:
                    f1:44:c1:67:d6:fe:f7:c5:b8:da:28:ac:4d:32:86:
                    5c:5d:10:33:71:29:6e:2a:1c:28:e2:64:0d:dd:82:
                    a4:e7:91:2f:b3:dc:99:9e:46:88:d7:1e:60:7a:2b:
                    0a:d9:f1:f3:96:a8:00:0e:a5:14:11:d4:76:d0:86:
                    de:f6:71:13:a9:0b:75:b6:1b:10:38:f4:78:0f:30:
                    78:e6:68:1b:55:f2:78:73:19:9c:c6:63:8b:86:34:
                    41:a8:d2:80:35:a9:19:cf:39:9c:31:c4:17:64:5f:
                    ff:0d:86:6e:6e:4a:09:6e:71:74:fe:e8:06:12:e8:
                    7a:84:5d:95:82:f0:bb:79:d5:4e:58:c9:6c:2a:cf:
                    be:21:ac:77:eb:c5:75:67:b7:43:5d:c1:e5:62:f3:
                    0a:25:ab:61:6e:9b:c7:2e:a1:e1:74:99:0c:3b:d6:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A0:6C:75:7F:C0:49:1B:F9:51:F7:99:FC:B5:6D:B2:2D:B2:B0:F4
            X509v3 Authority Key Identifier:
                keyid:C5:AE:06:46:26:F5:CE:B7:EE:A0:DF:8F:D0:1C:10:DD:4A:F8:2D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/G6BsdX_ASRv5UfeZ_LVtsi2ysPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c56ca0-c15d-4993-bb65-861591339602/1/xa4GRib1zrfuoN-P0BwQ3Ur4LX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.157.140.0/24
                IPv6:
                  2001:67c:f8c::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:85:ac:09:c1:9e:7e:f2:cd:c7:0d:db:bc:a6:f4:78:24:
         63:f1:7f:71:7d:ef:89:67:e6:f2:10:14:2c:cf:d2:52:0f:55:
         bf:44:97:00:5b:f3:cf:c6:38:e8:d4:03:a9:e5:15:c2:89:09:
         c4:ed:11:5b:53:0a:1a:f5:3a:a3:6e:4c:9c:52:5b:63:e1:ad:
         5e:54:b0:27:41:21:e2:f9:39:8c:9e:e7:23:b2:14:6b:d9:97:
         f2:1d:1c:92:08:80:42:ef:31:2a:a8:31:37:fe:09:ea:2a:e0:
         3b:d6:40:bf:bd:3e:e1:3c:91:35:f5:0e:a2:0a:ce:50:b3:a6:
         17:1c:75:f5:8a:95:8b:b7:f1:da:ab:6f:20:32:1c:10:ef:12:
         4d:29:82:37:80:6b:73:05:c9:fa:7b:2e:05:29:a5:49:e8:3e:
         7a:1e:03:79:11:84:7d:19:35:d1:c4:f5:a2:7a:6e:bb:f0:58:
         e6:0f:84:46:ae:fb:8f:43:00:20:e9:7e:ac:d8:a4:38:71:c8:
         f2:19:77:ad:8f:b6:af:64:19:fa:5a:a9:76:ba:69:4f:f8:02:
         f3:5e:0b:d3:a6:5c:0b:a7:3a:60:ff:87:d5:47:d3:09:d6:86:
         ae:df:68:d2:f5:af:11:be:6c:72:53:0c:1a:a6:c0:28:1d:8f:
         83:48:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----