Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/jSLF_A9L9ELRB9RsH7f0udPcMMA.roa
File:                     jSLF_A9L9ELRB9RsH7f0udPcMMA.roa (raw, json)
Hash identifier:          qWO1EyfcS4xdLbTRRH/M2h0GOpjTGNP12+CAazFk2a8=
Subject key identifier:   8D:22:C5:FC:0F:4B:F4:42:D1:07:D4:6C:1F:B7:F4:B9:D3:DC:30:C0
Certificate issuer:       /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial:       0191C1D8077D9E4F1F858505193BEB38C43F
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/jSLF_A9L9ELRB9RsH7f0udPcMMA.roa
Signing time:             Thu 05 Sep 2024 11:00:45 +0000
ROA not before:           Thu 05 Sep 2024 11:00:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12552
IP address blocks:        185.18.84.0/22 maxlen: 22
                          2a03:f440::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c1:d8:07:7d:9e:4f:1f:85:85:05:19:3b:eb:38:c4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
        Validity
            Not Before: Sep  5 11:00:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8d22c5fc0f4bf442d107d46c1fb7f4b9d3dc30c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:f8:32:4e:ae:9d:ab:e6:a0:9a:55:e8:a5:
                    a3:a2:00:d0:7b:c6:ea:70:d2:a3:ba:06:eb:9a:18:
                    e8:f4:2e:cb:4c:80:3e:7e:97:99:d3:c4:d3:73:ca:
                    d1:32:6a:ad:48:18:e2:d2:47:c8:b3:c5:10:f7:fe:
                    60:1f:58:b7:1e:3c:c7:d8:79:99:be:6a:8a:f8:51:
                    58:11:97:a0:87:f4:60:95:a6:53:88:73:c5:7f:d9:
                    2f:8f:4e:03:c5:9f:ce:d3:2c:db:80:c3:a7:85:6f:
                    5c:2c:20:19:04:e3:da:fc:97:d0:82:e9:69:0a:41:
                    a6:7c:10:27:12:07:1c:72:48:fa:64:3d:ce:7f:fb:
                    86:87:1f:be:e2:2f:db:6f:99:ff:78:24:e8:09:81:
                    c2:dc:ab:57:98:a9:e2:57:56:3e:e7:40:99:4e:ef:
                    fa:ba:1c:99:18:ac:81:eb:72:23:64:4c:41:9a:96:
                    bf:9b:9e:23:22:80:ac:d4:37:65:a1:ed:ec:9a:89:
                    35:9f:87:f0:76:05:2d:26:72:d1:8e:5a:93:dc:e0:
                    4f:b9:34:41:ab:f5:a0:e8:bc:e3:54:d4:16:ea:d9:
                    5d:c4:49:0b:94:2f:5b:60:56:db:75:13:1d:e4:35:
                    01:56:3a:c0:6d:24:d6:31:92:92:7b:32:bd:94:dd:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:22:C5:FC:0F:4B:F4:42:D1:07:D4:6C:1F:B7:F4:B9:D3:DC:30:C0
            X509v3 Authority Key Identifier:
                keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/jSLF_A9L9ELRB9RsH7f0udPcMMA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.18.84.0/22
                IPv6:
                  2a03:f440::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:6c:71:97:7f:25:9a:bb:9d:ef:f4:bc:29:b6:2e:1e:2a:f8:
         23:58:9d:c2:8a:37:33:0e:24:a9:d1:37:68:fe:02:7f:7b:39:
         ac:94:58:64:e1:f4:97:ca:4d:c3:88:90:a9:a2:61:11:8b:3e:
         59:78:78:a5:2a:4d:a2:56:cd:61:8b:bb:3b:cc:3c:19:97:12:
         a7:7c:37:4e:95:2f:71:2a:f2:61:a4:e6:6e:b1:87:bb:0d:1b:
         0a:8f:fd:7e:7b:75:a4:b2:92:c4:bc:8f:18:6b:c9:0b:c1:e5:
         f9:7c:73:d6:fe:42:ce:3a:8a:0a:8b:86:28:d3:5e:16:16:de:
         e5:99:3f:22:54:6d:58:ff:b6:64:3c:11:0a:8a:39:ab:8b:1c:
         ea:9e:cd:b8:85:28:24:1d:12:69:38:43:a2:90:c2:be:82:8c:
         0d:91:30:e5:ed:19:07:86:66:76:b9:e9:60:25:48:54:8a:83:
         0a:0e:5a:e3:2b:78:e3:8d:88:8f:29:d3:aa:55:b5:2f:82:42:
         48:81:ef:72:cb:e7:00:16:93:c5:aa:4a:c1:d7:81:c8:03:2a:
         14:df:ac:72:e4:1c:9b:c5:30:93:21:6a:dd:37:cd:93:e0:e9:
         ae:05:c0:de:ab:82:77:df:7f:e6:75:fe:7a:36:d8:2d:e6:2b:
         e9:8b:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----