Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/69HawLzQbexBxUZppKfj7rlKQXo.roa
File:                     69HawLzQbexBxUZppKfj7rlKQXo.roa (raw, json)
Hash identifier:          47HUDGj5/pHytV4qq1cWq9+0iurr6scSwj12BU1YNj4=
Subject key identifier:   EB:D1:DA:C0:BC:D0:6D:EC:41:C5:46:69:A4:A7:E3:EE:B9:4A:41:7A
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       018CCA2B5BEF4B6EAB4B18F1F1DA3FFCCC35
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/69HawLzQbexBxUZppKfj7rlKQXo.roa
Signing time:             Tue 02 Jan 2024 12:34:48 +0000
ROA not before:           Tue 02 Jan 2024 12:34:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62468
IP address blocks:        185.223.165.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:5b:ef:4b:6e:ab:4b:18:f1:f1:da:3f:fc:cc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  2 12:34:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ebd1dac0bcd06dec41c54669a4a7e3eeb94a417a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7b:19:82:2c:96:57:86:91:eb:83:c4:e8:b9:
                    f0:7a:33:81:b8:b2:54:17:87:07:2f:c7:93:99:81:
                    51:5e:89:ec:6d:97:57:99:af:a7:f2:6d:6d:7a:20:
                    ea:14:87:19:db:83:a0:84:51:35:7d:a2:60:a3:cd:
                    32:99:12:20:55:54:5b:13:6c:5d:5b:e7:54:f4:25:
                    22:d7:76:aa:14:45:21:ff:81:97:88:cc:16:f3:88:
                    85:e1:9d:8f:de:75:f3:de:21:ad:31:26:22:c3:c4:
                    24:e1:b1:75:22:62:ec:b4:d6:1c:15:97:8d:79:f2:
                    49:30:39:91:aa:03:78:e4:96:cc:3f:be:c1:ce:41:
                    5a:f5:4e:5b:2e:a8:9b:46:f6:42:63:ec:e4:6e:24:
                    f7:69:ad:84:34:1d:b9:9b:a3:ca:62:5a:67:29:4a:
                    9d:69:56:db:ba:1f:78:73:4e:7f:8c:6e:79:da:ee:
                    89:52:87:b9:fa:20:dc:0e:a8:7e:9c:fa:5f:41:5a:
                    00:6d:de:fd:74:5f:a3:91:43:8f:85:cc:81:cf:da:
                    90:89:18:08:7f:ba:73:84:b6:c3:ea:25:b5:96:f7:
                    20:a9:f0:7e:e0:b4:f3:9f:80:3a:23:51:86:69:8c:
                    62:7f:c2:73:75:af:75:f8:a0:b8:06:97:5a:61:d6:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D1:DA:C0:BC:D0:6D:EC:41:C5:46:69:A4:A7:E3:EE:B9:4A:41:7A
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/69HawLzQbexBxUZppKfj7rlKQXo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:82:57:2c:ed:f9:a8:73:a8:82:9f:3d:29:5c:3c:8d:82:
         f6:ad:89:c0:b2:ad:39:46:88:c1:87:ab:07:31:85:06:0d:15:
         15:72:87:53:40:9f:15:ed:44:79:1e:2a:b0:1b:b8:9c:7c:1c:
         d1:5f:51:62:12:74:66:34:19:29:44:7b:a6:b1:67:1d:09:35:
         8c:5d:ee:f6:95:f9:cd:9c:ab:41:be:ac:84:6f:cd:dc:76:fa:
         73:b2:4c:f9:af:67:fa:24:04:d1:35:25:39:1a:34:02:e6:17:
         8f:27:3b:83:ae:07:61:0b:b5:53:35:18:96:ca:5f:49:2e:86:
         f0:ee:76:e3:81:48:32:12:11:7f:18:86:88:91:7f:a9:7e:05:
         79:cf:1a:f3:ce:c5:88:e0:64:1b:38:33:de:7d:d1:41:88:04:
         31:a9:a2:a4:d3:f1:de:9c:64:28:2c:0a:e4:18:bc:ff:88:e5:
         ed:57:44:48:dc:be:2e:3d:99:7a:db:98:94:1b:5c:36:2e:d8:
         c2:d2:d7:75:1f:ad:41:91:b8:72:0d:0c:09:3c:0b:08:6a:83:
         2e:d1:8a:b4:f4:43:1d:05:72:3e:14:08:93:13:fc:60:e9:eb:
         ff:26:d7:0e:f0:87:5b:c3:9c:8d:c5:db:c9:46:9e:69:1a:0c:
         f4:27:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----