Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/9fTPGn9Yt0q5MdJskAWM5GGdq6E.roa
File:                     9fTPGn9Yt0q5MdJskAWM5GGdq6E.roa (raw, json)
Hash identifier:          SBz9J1OrDB0TE5K1IbEbCH/aHUATQs6SW2MbuBZNBP4=
Subject key identifier:   F5:F4:CF:1A:7F:58:B7:4A:B9:31:D2:6C:90:05:8C:E4:61:9D:AB:A1
Certificate issuer:       /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial:       018CC26D34F2DF8F9FE8AB430F1E3D84C71D
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/9fTPGn9Yt0q5MdJskAWM5GGdq6E.roa
Signing time:             Mon 01 Jan 2024 00:29:46 +0000
ROA not before:           Mon 01 Jan 2024 00:29:46 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42810
IP address blocks:        87.237.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:34:f2:df:8f:9f:e8:ab:43:0f:1e:3d:84:c7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
        Validity
            Not Before: Jan  1 00:29:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f5f4cf1a7f58b74ab931d26c90058ce4619daba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1a:8f:1d:d9:26:97:74:b2:2c:4d:de:39:ee:
                    03:c9:c3:b9:e4:50:37:2e:d0:ef:b8:8d:eb:e0:ab:
                    20:62:51:e3:9d:54:9a:32:56:dc:a1:74:c3:a6:4d:
                    35:67:76:ec:f6:b0:8c:64:f0:d5:2d:ab:cd:c2:ed:
                    ca:c1:e6:ce:e5:ba:ad:60:c7:1e:66:16:0a:72:50:
                    1e:f2:c3:e1:09:d5:ec:96:df:58:72:0b:25:49:42:
                    6e:26:89:a4:ed:86:2d:84:72:2e:4b:fb:b4:8b:5c:
                    80:83:e6:89:52:9c:cf:99:30:51:c4:32:fe:61:d0:
                    1e:82:75:86:84:06:f2:c6:4b:7b:3a:df:54:c8:89:
                    76:28:4b:22:8c:a8:d6:be:28:5a:1c:cd:1d:0a:f7:
                    dd:9c:57:52:d3:f1:de:67:9f:7c:f8:d0:de:12:43:
                    b0:54:39:4a:de:51:52:c2:62:e8:03:7f:da:da:9b:
                    d1:65:6f:b0:aa:73:d6:db:eb:15:cc:cf:56:22:80:
                    8f:f7:97:b6:68:34:e4:8d:25:78:3b:12:33:92:d3:
                    42:db:0d:5e:24:18:72:a9:52:85:45:2d:e3:99:ce:
                    84:42:90:46:cc:0c:5d:ab:9c:1f:1b:63:5e:93:74:
                    76:3f:b9:16:30:99:ea:6c:f6:eb:ca:a7:55:d0:87:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F4:CF:1A:7F:58:B7:4A:B9:31:D2:6C:90:05:8C:E4:61:9D:AB:A1
            X509v3 Authority Key Identifier:
                keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/9fTPGn9Yt0q5MdJskAWM5GGdq6E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.237.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:db:a8:42:09:66:bc:f7:6f:c4:a8:8c:c2:cb:18:c3:40:a9:
         ae:ac:d7:ae:c3:d3:7a:64:66:fd:c5:91:e3:3f:75:7c:0a:84:
         77:9e:2a:3a:14:86:b3:97:93:9a:97:ab:31:50:06:e7:9a:5e:
         9f:71:80:10:8f:cb:33:e5:f0:31:6c:05:10:a7:dc:83:b3:5c:
         c6:e5:0c:2e:4f:ba:6e:22:b5:e0:48:9a:17:ab:bc:c0:9b:25:
         6b:27:d9:d7:1c:ea:42:ca:a9:64:57:c7:2b:1c:b7:5a:9a:a9:
         a2:a3:6a:a8:65:8b:57:4f:81:05:60:a5:ad:4c:ac:dd:50:ee:
         95:ee:eb:25:f0:71:f2:96:a4:e8:52:20:f0:c3:4b:76:9b:c1:
         10:28:68:9e:a1:eb:6c:16:5b:62:ee:a4:9c:8a:af:60:85:30:
         04:24:6b:ea:e1:31:8f:3b:35:5c:0a:49:23:03:a7:fc:3c:23:
         e0:c1:10:ba:24:9c:06:36:cf:a8:d9:c9:f0:a2:2a:4e:2f:21:
         6e:4e:71:d4:c3:9b:e1:ba:fe:f9:e6:c2:9f:65:29:59:70:43:
         2b:60:be:24:a1:1b:a3:6d:f9:09:30:1a:4b:26:bd:93:83:46:
         da:69:e0:b2:f4:70:63:f4:9e:c2:de:e4:28:13:db:86:84:2c:
         bf:2a:9d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----