Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aM4b72fwLxyWaNtXeAtL52Pnye0.roa
File:                     aM4b72fwLxyWaNtXeAtL52Pnye0.roa (raw, json)
Hash identifier:          7IidiQ1Si8IpF8MC68ohP1xPnBUSRwZ8orCRTORWeYg=
Subject key identifier:   68:CE:1B:EF:67:F0:2F:1C:96:68:DB:57:78:0B:4B:E7:63:E7:C9:ED
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       018CCA2B55088967862D3A7536C67A945638
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aM4b72fwLxyWaNtXeAtL52Pnye0.roa
Signing time:             Tue 02 Jan 2024 12:34:46 +0000
ROA not before:           Tue 02 Jan 2024 12:34:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48105
IP address blocks:        185.142.141.0/24 maxlen: 32
                          2a06:7a04::/43 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:55:08:89:67:86:2d:3a:75:36:c6:7a:94:56:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  2 12:34:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=68ce1bef67f02f1c9668db57780b4be763e7c9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:8b:43:9f:7d:73:bd:42:6f:d0:45:bc:ad:
                    3b:7a:29:e1:9e:23:be:08:c0:54:78:b8:9e:d1:24:
                    5a:0b:05:7f:a6:e0:94:4e:f6:b2:8b:39:d8:6c:e7:
                    7d:cd:96:50:1b:b5:ec:ef:4a:79:e2:57:58:d7:3c:
                    b7:c8:a5:fb:5a:cd:5c:20:55:e4:db:e1:c8:70:4b:
                    61:65:75:f5:f8:c2:9e:73:9b:b3:53:25:02:11:09:
                    e7:da:18:ef:0d:a5:d8:02:63:c3:4b:a3:f6:38:e6:
                    07:48:7e:4f:9b:93:d4:18:f9:86:0e:74:bb:df:e2:
                    55:27:72:66:6c:1e:35:b9:e3:6b:a7:d3:e6:60:7d:
                    94:e6:7e:39:bd:33:a7:c6:19:00:b2:9f:24:ce:e0:
                    79:62:98:7c:c5:91:3a:4c:d5:2c:d0:38:11:a6:f7:
                    75:71:66:85:3c:87:d7:62:75:ae:ed:e6:3d:20:6e:
                    02:fb:cf:41:76:b3:50:de:28:c1:1a:eb:44:01:87:
                    41:3d:05:26:ee:b6:16:20:f6:6f:eb:55:0e:b5:52:
                    da:99:cf:e8:8a:e4:96:39:9b:05:47:0e:0b:0d:2b:
                    b4:5c:1c:12:82:6e:6b:a2:2d:9b:0b:5b:8a:73:53:
                    20:fd:8b:75:a3:9d:b7:6b:79:af:3c:92:14:d7:e7:
                    99:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CE:1B:EF:67:F0:2F:1C:96:68:DB:57:78:0B:4B:E7:63:E7:C9:ED
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/aM4b72fwLxyWaNtXeAtL52Pnye0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.141.0/24
                IPv6:
                  2a06:7a04::/43

    Signature Algorithm: sha256WithRSAEncryption
         ce:56:70:a6:a1:15:bc:d0:5b:b0:4e:f1:a8:e7:fa:47:46:19:
         8d:2b:32:cc:90:6c:4e:3d:dc:88:11:7c:1b:bf:3c:53:1d:6c:
         e3:37:5f:5e:4a:c8:1b:79:96:64:25:3c:74:68:39:a9:42:0d:
         e2:10:86:e3:6c:b6:af:ea:b0:9d:89:33:d6:31:6a:1b:9d:1c:
         4a:04:ca:ca:30:00:4b:23:71:c9:a6:2a:de:bd:da:76:0e:6c:
         ca:90:6c:8e:63:bd:46:75:98:2b:a0:b6:d3:69:3f:64:7c:df:
         2d:44:5a:f0:c8:18:9f:65:85:14:ab:98:8e:5c:03:9f:e3:58:
         54:c1:aa:77:3a:f4:80:be:08:90:c0:4d:61:3d:c8:17:a1:f0:
         33:42:31:30:7a:09:78:c4:b1:fd:16:84:b2:1d:f9:8e:d5:e3:
         ef:50:69:76:fc:f1:d3:1a:15:12:dc:5d:34:2e:aa:d1:09:bf:
         7e:11:af:c5:d6:fb:12:09:e9:f0:90:1e:7e:bc:84:35:51:6d:
         46:2c:e8:f6:20:5c:37:e9:68:8b:60:11:bb:83:eb:eb:05:f0:
         9d:c3:1a:27:24:13:42:60:04:9e:0f:c4:f4:32:cf:24:6d:3a:
         0b:78:27:71:8d:22:10:de:d9:bf:ae:5a:9e:08:bb:b8:2d:e9:
         ba:dd:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----