Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/DFf5N4eR-Sp0PVShYeEAvYoUQeA.roa
File:                     DFf5N4eR-Sp0PVShYeEAvYoUQeA.roa (raw, json)
Hash identifier:          +2AUaYD6NQ8cJUZUKmoXPPWae2+gQsufz1Pdu0/B1vQ=
Subject key identifier:   0C:57:F9:37:87:91:F9:2A:74:3D:54:A1:61:E1:00:BD:8A:14:41:E0
Certificate issuer:       /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial:       018D6C72C19132FE34D2C9E860F3CC19B67F
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/DFf5N4eR-Sp0PVShYeEAvYoUQeA.roa
Signing time:             Sat 03 Feb 2024 00:51:16 +0000
ROA not before:           Sat 03 Feb 2024 00:51:16 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215581
IP address blocks:        2a13:cc82::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 10:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:6c:72:c1:91:32:fe:34:d2:c9:e8:60:f3:cc:19:b6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
        Validity
            Not Before: Feb  3 00:51:16 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0c57f9378791f92a743d54a161e100bd8a1441e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:2b:b1:0c:af:97:60:5e:e6:66:f4:19:d1:
                    68:0d:8e:cd:19:a6:b4:cb:8b:47:63:28:06:ef:31:
                    61:86:17:2b:7f:05:ec:ca:0a:35:04:c6:c4:e2:f2:
                    15:f7:ef:d9:f2:b6:16:5f:d9:b2:51:de:91:77:a3:
                    c8:9c:1e:f5:2b:bd:ce:cf:ed:74:61:5d:ee:c6:95:
                    cf:e7:2b:80:8a:11:d6:b8:de:cf:e5:47:2a:24:4b:
                    62:fa:43:63:0f:88:44:94:31:73:63:a2:0f:52:d1:
                    11:1e:1a:1b:13:a3:fe:59:c1:53:4e:05:5c:5f:d1:
                    6d:78:1a:37:69:e9:95:e7:bf:8c:d0:7f:c4:be:48:
                    ac:e4:28:f2:d0:16:af:f9:73:4f:ad:4d:44:dd:7a:
                    db:4a:1c:cd:11:17:f7:61:6c:31:20:b5:89:13:54:
                    c4:93:8d:f5:a2:88:4a:cb:64:88:6f:ae:65:0f:89:
                    b3:25:07:07:2b:c5:0d:8a:dd:99:6b:49:b5:28:ba:
                    77:d1:56:68:1a:c8:72:b9:af:83:a7:a9:4d:c8:cf:
                    9e:a0:51:c7:c6:3f:eb:0a:56:42:1d:61:31:38:c1:
                    36:4f:ab:0c:f9:39:57:2f:d0:78:ff:84:28:df:fc:
                    e0:e9:b2:e2:ed:a0:0e:b5:2b:5c:a7:8c:b2:7e:39:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:F9:37:87:91:F9:2A:74:3D:54:A1:61:E1:00:BD:8A:14:41:E0
            X509v3 Authority Key Identifier:
                keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/DFf5N4eR-Sp0PVShYeEAvYoUQeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:cc82::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:be:f5:10:8e:46:a8:37:08:47:74:b6:3a:56:89:2d:9a:
         21:99:43:5f:1e:23:84:b5:1a:7f:8c:1e:9a:5a:ec:f2:2d:2a:
         8a:35:55:ee:2c:69:7a:c9:40:6d:05:57:b4:e9:c9:df:6b:6d:
         09:22:fa:f5:fa:8d:9f:72:f7:05:0f:f9:4d:0b:24:bc:33:34:
         38:ab:43:4a:c0:13:2c:f2:e7:a6:bb:8b:60:7c:e5:28:90:95:
         c1:e0:7c:3c:ee:63:ba:03:81:6c:4d:b4:6d:36:8e:6b:45:fc:
         d8:c7:37:de:34:34:55:f9:a4:ef:16:a2:ce:ba:c3:c4:d1:66:
         43:54:3e:12:63:01:a3:0e:a3:64:77:6c:57:86:a0:5a:d5:c4:
         4e:30:ad:4d:36:aa:de:38:4f:a3:2c:79:a2:43:4e:71:7b:00:
         b7:82:63:1b:e7:11:c9:f0:57:5b:d5:d3:bc:5a:86:e2:c1:7d:
         14:d9:99:8d:19:6e:4c:10:9d:0c:98:ae:eb:ae:64:10:39:c0:
         59:cf:11:5f:2c:9f:94:57:f2:3e:ed:1a:b0:41:62:26:33:fd:
         8d:4e:8e:35:ec:3c:43:a0:bb:ce:8b:3e:c7:b7:0c:d3:82:e0:
         fa:12:e3:df:32:68:9c:f1:c0:64:31:1b:01:ee:45:b9:bd:3d:
         5e:b7:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----