Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/QIgkonbYLvtZRLlFpSZzUhjokKY.roa
File:                     QIgkonbYLvtZRLlFpSZzUhjokKY.roa (raw, json)
Hash identifier:          D441YNc8p0FXzRIy7y83NRdv4AekmEtu4a1SEnoE1X8=
Subject key identifier:   40:88:24:A2:76:D8:2E:FB:59:44:B9:45:A5:26:73:52:18:E8:90:A6
Certificate issuer:       /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial:       018D28500E59436891E5575853C8C98AA31C
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/QIgkonbYLvtZRLlFpSZzUhjokKY.roa
Signing time:             Sat 20 Jan 2024 19:19:11 +0000
ROA not before:           Sat 20 Jan 2024 19:19:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51225
IP address blocks:        91.218.4.0/22 maxlen: 24
                          2001:7f8:94::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:28:50:0e:59:43:68:91:e5:57:58:53:c8:c9:8a:a3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
        Validity
            Not Before: Jan 20 19:19:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=408824a276d82efb5944b945a526735218e890a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:d0:b6:fd:aa:59:c0:3f:d3:d9:c8:3c:c1:
                    80:bb:f3:9a:8e:63:f5:22:73:6a:60:e8:5d:f0:03:
                    2d:67:27:f3:1c:44:99:42:d8:19:a3:5a:8e:4e:a4:
                    ee:9e:20:42:49:b9:53:b3:c1:c7:0d:d9:26:33:eb:
                    3e:08:1a:e5:96:e0:c3:a2:b6:57:84:b3:c1:b7:4d:
                    59:5d:10:5f:ee:66:11:f6:69:96:ef:76:12:76:c4:
                    44:37:23:e0:2a:5f:3f:3a:38:e4:ed:64:b5:11:3e:
                    b9:08:37:6f:51:3b:3b:59:c6:0f:af:90:c8:56:29:
                    ed:02:a9:39:04:22:b6:46:8e:96:37:55:f2:53:d4:
                    3a:a7:4f:b4:59:cc:c9:6d:86:f2:32:9f:eb:ae:49:
                    91:c3:9b:3e:7f:6b:25:9a:08:f7:02:f5:3b:b0:8e:
                    0b:b7:87:d8:c6:70:84:6c:61:77:99:c3:5f:f2:c8:
                    01:7d:94:ec:e8:f1:9b:b3:1d:ca:ed:2a:00:cc:aa:
                    11:13:b8:ff:e5:b6:ef:5f:3e:95:79:22:53:58:e3:
                    08:f3:6b:d6:71:7d:a5:22:bb:a5:ce:8c:37:49:50:
                    3b:76:f3:0e:5e:f7:b1:84:14:68:f5:59:c0:14:72:
                    ef:f0:49:ef:30:da:7a:d9:9a:80:a9:ee:fc:80:92:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:88:24:A2:76:D8:2E:FB:59:44:B9:45:A5:26:73:52:18:E8:90:A6
            X509v3 Authority Key Identifier:
                keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/QIgkonbYLvtZRLlFpSZzUhjokKY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.218.4.0/22
                IPv6:
                  2001:7f8:94::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:c5:37:c5:c9:ed:82:18:92:fe:13:9d:61:90:c6:a0:0b:
         e1:8c:a1:d6:61:01:8c:98:55:bb:09:f5:a5:aa:8b:47:0d:8e:
         bb:03:df:15:0d:91:1b:e4:8d:88:c2:32:54:b5:e9:2c:fa:58:
         38:c8:a9:ac:0b:61:c9:73:d3:63:56:2d:7e:8f:93:0e:74:b2:
         9a:8a:26:3e:af:ba:e0:2a:e1:6c:ac:01:0c:84:18:41:1b:b4:
         e3:c6:0d:91:de:1d:9a:13:44:41:70:d7:fa:13:63:65:c8:74:
         a0:e9:ca:5e:f8:cb:44:94:82:2c:82:c3:b1:dd:6b:ab:52:71:
         f0:07:b4:78:3d:ad:90:90:da:13:c3:cc:25:d2:d2:af:af:2b:
         5e:4b:64:44:ca:6a:9c:f3:57:c8:aa:7a:36:1c:0e:0c:dd:aa:
         d7:07:7c:1a:8b:a2:17:59:f3:ae:62:60:44:d5:4f:8d:11:a9:
         d9:f7:b6:4c:76:5c:94:2e:c7:a1:30:55:c5:4f:6e:93:42:76:
         13:a9:5c:ff:52:64:f2:eb:ff:72:cf:d4:ff:96:1f:68:a1:a1:
         c7:d2:2b:e1:f5:54:89:28:f9:38:38:b5:d5:82:44:1b:c8:c7:
         73:eb:7c:c6:8e:9d:c8:1e:37:8d:86:4d:be:da:ea:da:6f:d2:
         07:29:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----