Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/eYpoGzO-4F-5HtqaaIrCbBLHW1E.roa
File:                     eYpoGzO-4F-5HtqaaIrCbBLHW1E.roa (raw, json)
Hash identifier:          QkosuvNGeisX94ktyGNtIDdKPfewFJeQUSl/cDByvSQ=
Subject key identifier:   79:8A:68:1B:33:BE:E0:5F:B9:1E:DA:9A:68:8A:C2:6C:12:C7:5B:51
Certificate issuer:       /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial:       018CC794B805243EF410718EA44A84E8B73C
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/eYpoGzO-4F-5HtqaaIrCbBLHW1E.roa
Signing time:             Tue 02 Jan 2024 00:31:01 +0000
ROA not before:           Tue 02 Jan 2024 00:31:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207465
IP address blocks:        194.147.139.0/24 maxlen: 24
                          2a07:e480:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:94:b8:05:24:3e:f4:10:71:8e:a4:4a:84:e8:b7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
        Validity
            Not Before: Jan  2 00:31:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=798a681b33bee05fb91eda9a688ac26c12c75b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7a:a5:dc:86:a9:fe:f5:05:3a:98:58:67:d7:
                    9d:a5:9a:41:11:04:1f:b6:11:c5:99:44:d6:b1:83:
                    14:fb:d6:8f:df:dd:8b:e8:a5:6d:ec:4c:de:d8:9a:
                    56:a0:ff:21:6a:66:93:b0:79:6a:55:22:e5:a7:28:
                    d3:42:f4:f0:1f:cb:57:d7:a8:3e:b1:36:d9:af:be:
                    ac:75:6d:4e:8a:87:8c:b4:dc:7a:f0:70:25:90:1e:
                    9d:21:42:2e:7f:a2:5b:8c:35:92:0d:31:64:cc:be:
                    8e:33:37:40:f5:51:12:59:59:61:a4:a4:c8:2f:58:
                    0c:fe:d6:36:0b:dc:e5:a4:6f:31:5a:1c:c1:4a:dd:
                    09:fb:60:66:ff:57:72:d4:c8:50:a7:e7:41:4e:8e:
                    91:bb:b1:b9:58:c3:60:c8:91:11:f7:60:53:fd:7a:
                    e5:95:b5:ef:d8:df:01:6c:dd:ca:2f:5e:ca:5b:be:
                    a0:42:bb:b4:e1:df:c6:26:21:00:3e:b1:91:c0:f5:
                    a2:71:04:c2:a4:11:96:08:26:1a:b7:ec:65:74:18:
                    33:c8:93:f6:fd:3b:f1:fa:bf:20:5a:e1:1a:e9:60:
                    00:d2:2c:6a:0c:ca:fc:25:dd:ba:80:2e:67:26:14:
                    1f:d9:bd:2c:82:80:20:78:29:2e:29:7f:d6:6e:62:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8A:68:1B:33:BE:E0:5F:B9:1E:DA:9A:68:8A:C2:6C:12:C7:5B:51
            X509v3 Authority Key Identifier:
                keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/eYpoGzO-4F-5HtqaaIrCbBLHW1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.139.0/24
                IPv6:
                  2a07:e480:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:ed:cb:42:7d:5f:52:d5:9a:b3:2d:50:69:91:21:24:bc:39:
         18:29:07:f5:5d:f8:7b:1a:59:c8:4b:bd:38:ba:65:92:07:f4:
         2b:0b:e5:11:5d:e5:89:9e:5a:2f:69:c5:da:47:1a:6b:17:4e:
         ba:54:7f:6f:51:62:d4:e1:fb:c9:3b:a7:6d:fc:b8:66:79:ed:
         59:9d:40:22:46:d8:3e:4f:7a:46:59:ca:83:a0:b5:fb:2b:e4:
         01:a8:b7:d3:fd:7f:c3:94:17:01:61:77:81:8d:83:60:b3:74:
         e7:f7:26:53:a2:83:c2:4f:8a:b5:22:39:2e:ba:dc:f1:48:04:
         54:cd:c7:7c:f5:c0:ff:81:24:2d:68:6e:55:69:d9:f2:ca:39:
         69:61:ea:f2:98:d9:82:5e:4d:83:cd:22:d0:83:2a:0f:30:fc:
         dd:54:ca:b3:47:b0:3f:a4:68:82:eb:a7:48:e6:23:5e:de:06:
         76:8a:93:25:7b:57:36:f6:e9:a6:61:9f:c8:8f:8f:17:4e:e8:
         6e:47:48:c8:5f:5f:f4:5a:02:8e:cd:63:08:21:35:7e:36:24:
         ae:4e:ad:31:04:cc:51:03:db:7c:e8:08:ec:78:29:77:dc:e1:
         a5:e2:43:b2:44:91:a7:86:0a:15:62:71:3c:b3:64:c9:78:0c:
         0d:06:ab:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----