Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/o3lPj9dHyMtn45tKKvoJNQrbbwQ.roa
File:                     o3lPj9dHyMtn45tKKvoJNQrbbwQ.roa (raw, json)
Hash identifier:          4wKfSCJFP/MF4I8bTD51PFFMiis09LYs8VsUzw7uy9I=
Subject key identifier:   A3:79:4F:8F:D7:47:C8:CB:67:E3:9B:4A:2A:FA:09:35:0A:DB:6F:04
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       018CC86F4FDE76E4629B4B7B0D4A04C8FDE6
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/o3lPj9dHyMtn45tKKvoJNQrbbwQ.roa
Signing time:             Tue 02 Jan 2024 04:29:47 +0000
ROA not before:           Tue 02 Jan 2024 04:29:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49810
IP address blocks:        45.84.147.0/24 maxlen: 24
                          2a04:d202::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:4f:de:76:e4:62:9b:4b:7b:0d:4a:04:c8:fd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Jan  2 04:29:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a3794f8fd747c8cb67e39b4a2afa09350adb6f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e1:5f:ed:5e:28:ab:9c:03:b6:59:51:ec:4c:
                    02:d7:79:3c:48:05:2d:21:1b:f0:db:b1:7f:79:d7:
                    b9:d2:16:c4:de:92:42:78:4e:1a:34:95:1c:63:1b:
                    cf:1a:9e:b6:e1:63:fc:b8:f0:4a:2d:23:ef:a2:6c:
                    14:13:8a:7d:09:fb:51:2b:38:c8:28:90:3f:a6:ca:
                    91:ea:a4:9b:1d:37:93:f0:95:38:22:23:f0:7e:6c:
                    8f:d3:a7:44:16:bd:be:dc:fa:b6:9b:6b:d7:6c:f9:
                    28:69:fd:8e:3c:41:27:02:38:a9:8c:ca:5a:bf:ea:
                    17:3e:a5:db:89:64:e2:23:31:1b:74:da:5e:e5:23:
                    8f:89:f7:78:2e:27:9b:48:47:63:65:1a:f4:be:63:
                    5b:f5:01:37:3d:30:50:78:71:93:56:3c:d6:b5:84:
                    3a:20:d9:97:72:17:e5:a9:8e:7c:b7:9a:a0:12:86:
                    bb:7c:9a:a1:61:cd:8f:05:fe:aa:8e:f2:70:6c:51:
                    3d:73:78:44:69:77:59:77:fc:06:2e:eb:6b:36:16:
                    f2:56:32:ee:09:4e:e7:5a:32:a3:29:e8:cd:b4:ef:
                    55:79:de:89:1b:69:f2:14:a7:ff:36:cc:d3:51:89:
                    e5:26:77:69:cc:cd:81:51:35:70:0d:b1:99:71:97:
                    0b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:79:4F:8F:D7:47:C8:CB:67:E3:9B:4A:2A:FA:09:35:0A:DB:6F:04
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/o3lPj9dHyMtn45tKKvoJNQrbbwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.147.0/24
                IPv6:
                  2a04:d202::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:e9:e2:18:f1:0f:1f:fe:cd:25:87:c9:58:5c:77:77:6f:94:
         c5:8a:d1:36:33:ca:0c:c8:a0:10:c0:81:03:63:84:1f:a0:d3:
         8b:ee:d7:01:79:01:f1:9b:18:66:3e:06:28:7c:4e:9b:40:0c:
         a0:b0:55:9c:eb:cb:3f:08:ac:26:c7:b6:a9:91:7e:4c:67:35:
         ad:a0:3d:e8:16:36:0a:d1:0b:7c:a8:66:8e:df:53:2d:5f:13:
         7d:9f:d0:78:fc:a3:79:88:c6:d7:02:65:f9:4d:a1:be:ac:4b:
         cc:90:e6:a9:5f:02:2b:a9:d8:68:c9:af:c4:df:7c:b5:67:0b:
         0e:e8:d1:83:9c:eb:d3:72:48:e3:59:fd:1e:e1:d1:30:5e:6e:
         79:a4:f3:e0:f5:56:9b:60:ed:36:ab:50:f3:31:a7:e9:96:ef:
         12:26:fe:d3:4b:9e:9f:dc:85:ad:93:68:37:f3:c0:cf:6d:de:
         d4:66:ba:ad:6e:5f:b2:48:fa:40:01:7a:64:aa:01:65:38:e7:
         0b:c8:ed:b0:b6:4e:44:42:44:2b:a2:ca:c8:49:c6:f3:9b:21:
         83:0f:26:c9:74:ae:4a:8c:e4:cd:dd:86:48:e4:81:9c:ab:a1:
         dd:af:06:ec:1f:e1:3f:73:8e:21:be:8d:04:39:d4:38:a7:c9:
         81:d1:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----