Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/AIolZwn60CwfmKTqrqjmTVotYAc.roa
File:                     AIolZwn60CwfmKTqrqjmTVotYAc.roa (raw, json)
Hash identifier:          jxzV6iRCJhB50eDSMhUt+C6EMYG83aVo/Sgm6Eqk6eU=
Subject key identifier:   00:8A:25:67:09:FA:D0:2C:1F:98:A4:EA:AE:A8:E6:4D:5A:2D:60:07
Certificate issuer:       /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial:       019330062A4AB4F02E700F25EB215BBD82BD
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/AIolZwn60CwfmKTqrqjmTVotYAc.roa
Signing time:             Fri 15 Nov 2024 13:32:10 +0000
ROA not before:           Fri 15 Nov 2024 13:32:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213044
IP address blocks:        45.154.217.0/24 maxlen: 24
                          2a0a:d6c0:217::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:30:06:2a:4a:b4:f0:2e:70:0f:25:eb:21:5b:bd:82:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
        Validity
            Not Before: Nov 15 13:32:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=008a256709fad02c1f98a4eaaea8e64d5a2d6007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:91:fb:4a:af:bb:11:79:ad:71:aa:49:97:
                    c3:d3:94:c6:e5:f8:53:39:65:00:ec:f1:25:e6:c4:
                    bf:9d:32:de:2f:70:87:74:e1:bc:0d:3e:76:3f:49:
                    de:42:e7:32:08:09:63:db:e5:ef:67:db:df:b8:5a:
                    a3:dd:fa:46:8b:b9:ce:f1:c4:24:fe:0a:0b:ce:aa:
                    af:f6:70:9a:b5:45:43:c0:79:40:67:7a:c5:c5:8f:
                    b2:f7:b3:bc:ad:c8:e4:5c:3b:d4:40:66:d4:16:51:
                    16:96:a2:ab:e9:d9:9c:c6:ea:73:9d:81:4c:2c:c8:
                    94:b5:6e:05:1f:58:78:08:9c:d1:a0:1a:10:e0:3c:
                    89:b3:59:cc:d5:e1:5a:84:f7:55:95:94:ba:70:3c:
                    62:a5:34:d8:e3:44:43:ee:27:f2:0b:b8:37:5d:f1:
                    3f:be:de:70:3b:21:1d:ff:de:83:d8:f9:d1:12:2a:
                    5c:dc:25:11:6d:2d:ea:45:55:ae:e2:08:64:ae:ae:
                    33:87:f9:79:d4:4d:ad:78:37:a0:08:a1:4d:51:8c:
                    f1:7d:3c:7f:cd:13:8d:47:26:6e:a3:2e:ae:39:7f:
                    21:b8:ff:f9:96:56:9b:97:64:41:a8:5b:4a:98:23:
                    ca:87:e9:d7:ce:bb:64:2f:04:66:06:41:5b:3b:a1:
                    69:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8A:25:67:09:FA:D0:2C:1F:98:A4:EA:AE:A8:E6:4D:5A:2D:60:07
            X509v3 Authority Key Identifier:
                keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/AIolZwn60CwfmKTqrqjmTVotYAc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.217.0/24
                IPv6:
                  2a0a:d6c0:217::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:2d:bb:5d:76:99:f5:93:b4:54:96:46:e4:22:b6:65:a6:7a:
         88:92:4c:00:20:c1:e3:a8:f1:d1:8a:d7:06:83:ff:ba:48:ff:
         c5:6b:e6:f2:1c:05:a2:3e:06:35:8c:64:08:64:4b:29:b0:f4:
         a8:c9:58:3f:dd:07:a2:d9:14:11:57:2c:c6:9c:6e:30:86:bf:
         aa:d5:a6:c9:1a:aa:d8:41:ce:66:66:3c:42:87:d0:a4:c8:a2:
         c1:b6:a3:f3:ba:d3:5e:9b:b6:34:12:9d:77:f1:91:82:5d:de:
         bb:57:94:79:42:0e:c4:1f:32:86:0d:b2:85:6f:f3:ec:4e:a4:
         e0:ba:c6:09:71:2e:47:2b:80:58:ff:de:b8:4d:71:1f:1b:8e:
         e6:99:5f:35:f0:54:81:f8:63:68:fd:70:da:8e:d3:58:9e:76:
         3a:ec:46:66:ab:02:70:e7:8a:b3:47:c6:0e:38:18:a6:b9:bc:
         cf:be:c7:e8:5c:2a:57:ca:70:70:c4:39:01:50:9b:53:b8:54:
         93:bc:16:f2:0e:c9:9f:56:16:05:94:b9:51:4a:20:af:27:24:
         55:ba:fb:ba:45:e7:da:c3:47:41:21:2a:56:54:e2:b0:fa:98:
         fb:f0:b9:a6:7d:46:df:18:47:7e:02:2f:9e:6b:eb:da:92:90:
         34:ad:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----