Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/SGDJ0k5iGc1y6l3qGDsnSwUUrSI.roa
File:                     SGDJ0k5iGc1y6l3qGDsnSwUUrSI.roa (raw, json)
Hash identifier:          qruLv7GbD/rjHFFTvxf0rS+ZwmlvivgrQTS6Bw6Bpfw=
Subject key identifier:   48:60:C9:D2:4E:62:19:CD:72:EA:5D:EA:18:3B:27:4B:05:14:AD:22
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       018CC64AEB2263E5FD5AB1B2CEFC3E36350D
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/SGDJ0k5iGc1y6l3qGDsnSwUUrSI.roa
Signing time:             Mon 01 Jan 2024 18:30:47 +0000
ROA not before:           Mon 01 Jan 2024 18:30:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208602
IP address blocks:        2a09:e1c1:effe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Apr 2024 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:eb:22:63:e5:fd:5a:b1:b2:ce:fc:3e:36:35:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  1 18:30:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4860c9d24e6219cd72ea5dea183b274b0514ad22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f8:20:ff:4e:ab:62:20:06:06:9e:50:1f:6c:
                    3a:00:51:bb:a5:78:d2:63:67:92:06:ab:7e:0a:41:
                    87:ff:33:7e:b6:79:5b:ac:2f:37:5c:e5:b9:48:c1:
                    a8:af:dd:5b:37:d7:d5:6c:04:63:46:7b:57:b4:38:
                    9b:e3:73:f0:03:76:df:e6:64:82:9c:5d:a5:83:07:
                    e2:37:7c:64:7c:d2:ee:f4:ee:78:44:87:c2:14:cf:
                    9c:04:25:56:80:fa:0c:d3:e0:c6:21:6f:4f:1d:3d:
                    bf:81:e6:9a:ca:15:86:5d:ad:33:bf:4c:b9:29:e1:
                    d5:2e:8d:f6:61:70:a2:c9:c4:28:bd:54:c5:96:88:
                    11:a7:4f:38:83:e6:65:35:c0:e4:ae:5f:20:74:52:
                    2f:d2:d1:f8:96:d3:9e:10:48:c1:6e:18:31:48:bf:
                    84:27:14:c1:e8:f6:e0:59:82:a5:b5:d5:ae:4b:81:
                    9c:6d:1e:d9:1e:cb:34:8c:48:1b:33:4c:a3:0b:a5:
                    e9:76:42:f9:c6:9b:cb:e8:cc:56:48:0e:67:84:d4:
                    8c:3d:90:48:91:16:16:19:25:32:e2:e1:70:1d:08:
                    8d:91:8e:10:af:ef:a7:4f:a7:00:0b:73:6a:84:b2:
                    fe:a7:22:3d:7b:8b:b6:bd:97:2f:f6:d0:df:6f:b5:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:60:C9:D2:4E:62:19:CD:72:EA:5D:EA:18:3B:27:4B:05:14:AD:22
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/SGDJ0k5iGc1y6l3qGDsnSwUUrSI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:e1c1:effe::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:dc:2c:e2:88:da:db:ed:80:8a:89:aa:27:e1:6b:ee:a5:ea:
         6e:cc:b3:a2:5d:4c:a5:6e:9e:a3:03:55:9c:a7:4d:36:f3:84:
         4f:57:69:28:83:98:31:7b:3b:c5:b0:89:45:d4:7a:db:50:74:
         2b:3e:ef:73:de:33:9b:6b:0a:70:a4:f4:ba:91:f1:e3:dc:e5:
         03:61:f9:3b:e2:94:f2:66:66:57:2b:9d:0d:90:74:e3:66:e4:
         4d:54:1d:59:e5:ce:3b:fc:92:2f:de:3f:d1:67:74:6b:94:50:
         9f:ec:a3:3d:a8:a6:06:7d:8c:74:51:87:8d:4c:de:3f:6c:42:
         34:32:9a:da:c8:74:81:8b:53:16:a5:97:c1:64:c3:73:b4:81:
         8c:53:c7:7b:47:5e:de:c6:9d:3e:e2:e4:10:21:70:5d:ec:d0:
         13:89:29:71:4c:bb:b5:70:6c:37:ac:55:ca:98:e7:9b:b2:ea:
         14:95:76:61:ff:0f:a1:be:e6:58:48:a2:a0:d1:36:63:05:cc:
         6a:8a:5a:3a:de:60:a8:1f:b0:31:f1:1b:54:b7:66:34:a1:b5:
         4b:94:38:09:f6:fc:95:9c:64:d9:e9:0a:02:75:8a:37:2c:0e:
         25:46:8c:14:3c:01:a9:c9:d2:d0:6a:4a:96:cc:79:3e:55:03:
         67:aa:44:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----