Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/n0m62i3DR3LjgqHx-5XJLQKY6L4.roa
File:                     n0m62i3DR3LjgqHx-5XJLQKY6L4.roa (raw, json)
Hash identifier:          99mDwyhN6MkxvMwx+iX7RkDxhZGG9oMQxrMRXk9TV78=
Subject key identifier:   9F:49:BA:DA:2D:C3:47:72:E3:82:A1:F1:FB:95:C9:2D:02:98:E8:BE
Certificate issuer:       /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial:       018CC50035D5A5E1590A5021E05674B21A22
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/n0m62i3DR3LjgqHx-5XJLQKY6L4.roa
Signing time:             Mon 01 Jan 2024 12:29:34 +0000
ROA not before:           Mon 01 Jan 2024 12:29:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48761
IP address blocks:        185.172.48.0/24 maxlen: 24
                          185.172.49.0/24 maxlen: 24
                          2a03:2100:45::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:00:35:d5:a5:e1:59:0a:50:21:e0:56:74:b2:1a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
        Validity
            Not Before: Jan  1 12:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9f49bada2dc34772e382a1f1fb95c92d0298e8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2d:44:03:21:65:d0:6e:dd:5c:4f:f8:14:2e:
                    a6:5d:81:63:b3:91:ea:fe:2f:24:b2:46:9f:f6:5c:
                    eb:f8:d1:ea:5d:74:b3:ea:79:9d:f6:92:d2:62:73:
                    dd:83:e5:13:52:54:34:4f:00:5d:50:98:93:fb:d4:
                    5d:7a:b6:80:06:21:12:9b:28:75:b0:aa:e1:ec:41:
                    fe:5b:b4:22:56:40:56:fa:4d:61:16:ab:e2:05:1c:
                    39:b0:87:30:c5:f0:46:18:3b:00:de:36:8d:99:80:
                    ca:44:69:ae:54:fd:35:0a:0b:d0:ee:70:43:3f:83:
                    d1:4f:c3:04:6d:ea:84:bb:ef:a6:f3:e0:03:4e:01:
                    1a:9d:e6:ad:4d:3a:a6:92:df:84:bd:06:2c:e8:5b:
                    15:d4:3f:a4:58:93:d4:78:19:c8:5f:de:ce:c6:a8:
                    62:b5:fd:83:63:a5:4a:92:01:68:76:96:0d:4f:fe:
                    ef:bc:27:66:68:64:31:8e:14:25:42:12:ea:26:46:
                    c3:7d:59:b0:5c:82:23:eb:bf:73:8c:48:f0:c1:c7:
                    6a:c7:2a:33:85:b5:17:d0:cb:aa:60:31:64:1d:2b:
                    08:68:d7:32:18:c4:96:81:0e:0e:82:3a:6a:ca:bb:
                    48:64:c9:60:0c:ee:5f:16:53:01:ee:f7:ea:73:d1:
                    a2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:49:BA:DA:2D:C3:47:72:E3:82:A1:F1:FB:95:C9:2D:02:98:E8:BE
            X509v3 Authority Key Identifier:
                keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/n0m62i3DR3LjgqHx-5XJLQKY6L4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.172.48.0/23
                IPv6:
                  2a03:2100:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:23:78:8a:bd:df:82:fb:b2:6a:01:de:54:6e:b7:db:b6:
         d6:1f:89:bd:f1:c5:04:75:d9:f3:fc:2f:91:4d:08:2b:01:11:
         e1:3c:5a:cf:b3:58:62:45:03:64:42:b4:23:3e:6d:ef:3a:52:
         3e:9f:d7:2a:e9:5c:8a:b7:05:eb:e5:0d:df:e0:cf:30:f8:32:
         2f:89:1d:4a:2b:41:e8:45:3c:aa:08:55:9e:15:2e:69:91:ba:
         38:20:af:c8:ef:73:2d:fd:4d:70:91:29:cf:00:62:cc:b6:30:
         e7:19:b2:78:53:50:34:f1:bf:8d:66:05:ff:50:50:f8:b7:d0:
         bb:e5:69:17:be:99:a1:4b:9b:18:be:06:3d:33:0b:90:9c:65:
         6e:f7:68:eb:70:a5:16:37:f8:8c:47:f2:f4:66:d0:c8:d0:fb:
         19:30:09:6b:a9:b8:c9:1d:4b:2a:24:1f:66:62:a7:da:62:21:
         f5:9a:a1:f6:7f:12:64:e3:09:c8:91:96:8c:9b:cd:ee:2f:57:
         9d:d1:c8:ec:33:ea:fb:b8:22:07:5d:d1:cd:f7:9c:02:bc:72:
         8a:84:2b:b4:1b:65:e7:de:1d:a9:25:d6:36:83:2d:e0:0f:29:
         03:75:45:64:25:54:75:74:5f:57:50:ad:5f:9b:da:bc:e4:94:
         76:57:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----