Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/7FMqwcb5bqDEN3zW92TIr-SDYnM.roa
File:                     7FMqwcb5bqDEN3zW92TIr-SDYnM.roa (raw, json)
Hash identifier:          6Br1sjEK3iC93EAFJq0QpQ6rEThJNQq489wXrqhFHkM=
Subject key identifier:   EC:53:2A:C1:C6:F9:6E:A0:C4:37:7C:D6:F7:64:C8:AF:E4:83:62:73
Certificate issuer:       /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
Certificate serial:       018CC94DD590920FE9023D0B843B6F7BF42A
Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/7FMqwcb5bqDEN3zW92TIr-SDYnM.roa
Signing time:             Tue 02 Jan 2024 08:32:50 +0000
ROA not before:           Tue 02 Jan 2024 08:32:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209803
IP address blocks:        193.32.156.0/22 maxlen: 22
                          2a09:880::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4d:d5:90:92:0f:e9:02:3d:0b:84:3b:6f:7b:f4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e
        Validity
            Not Before: Jan  2 08:32:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ec532ac1c6f96ea0c4377cd6f764c8afe4836273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fb:c3:74:85:01:42:69:bf:db:d8:78:a2:53:
                    8b:4e:13:45:38:8b:07:29:80:b2:52:54:ec:a3:b6:
                    13:28:b9:31:05:2f:d4:79:43:b3:57:c2:52:f4:97:
                    25:e1:fe:d8:d6:cd:a8:3c:1a:55:6b:70:59:a1:b0:
                    c8:d8:e5:ef:5e:60:62:ff:c2:50:1c:ae:5c:85:ad:
                    13:a0:df:c5:18:3f:43:cd:bf:05:72:6e:44:8e:d4:
                    61:c7:ba:19:71:ae:09:a0:a6:23:a1:96:aa:ce:43:
                    c8:e4:d7:a3:67:81:e4:20:17:75:cc:47:01:38:9f:
                    d3:f8:cb:83:40:3a:26:0c:ad:25:e4:26:a4:4d:7a:
                    8e:12:4f:67:84:40:73:d1:cf:16:23:5d:41:e1:8d:
                    96:36:ae:6f:d0:68:7a:dd:8f:57:d3:33:45:df:e4:
                    a1:00:60:75:3e:45:98:9d:33:66:5a:83:60:0e:74:
                    d6:0e:d1:66:bb:fc:45:a4:a8:c8:c7:3c:53:62:bc:
                    1e:e1:7b:8f:88:1a:45:1c:6a:b7:65:61:a9:d3:a0:
                    f3:dd:45:66:0e:7b:2d:b8:66:0c:8e:ea:6e:69:6e:
                    11:c1:29:c8:5c:51:44:7a:6e:3c:28:cf:0d:fb:d5:
                    4a:8e:e1:e7:62:cf:06:8c:6f:13:28:55:50:ad:28:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:2A:C1:C6:F9:6E:A0:C4:37:7C:D6:F7:64:C8:AF:E4:83:62:73
            X509v3 Authority Key Identifier:
                keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/7FMqwcb5bqDEN3zW92TIr-SDYnM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.156.0/22
                IPv6:
                  2a09:880::/29

    Signature Algorithm: sha256WithRSAEncryption
         25:b3:ae:f7:96:99:57:e9:d8:97:6c:ff:c2:ef:0e:ed:aa:71:
         15:c1:86:d0:4f:01:17:93:69:64:ab:cd:73:38:8b:2b:74:f3:
         23:d0:5d:d2:2e:67:27:93:7a:e1:10:e5:67:14:eb:0c:1f:da:
         2e:c4:0c:ee:9c:fb:45:01:4f:27:91:54:b3:02:aa:f4:30:06:
         8d:ae:58:98:66:1d:89:ef:93:42:ca:c5:d8:f0:ef:97:24:ad:
         df:f3:96:ea:27:59:96:1e:e7:50:d4:9c:6a:fc:52:e4:69:38:
         e2:6e:71:0f:5a:77:5e:b1:a0:24:fe:51:b4:b7:41:bc:e6:e6:
         dc:cf:c8:1c:d7:09:0f:43:76:3c:5d:94:70:23:2d:ce:da:26:
         9d:19:4e:c6:34:dc:a1:33:1d:c7:e6:0c:3a:96:29:c5:1e:01:
         0f:fd:6b:91:b3:11:46:fe:77:f8:7a:d9:47:ea:6f:02:6d:98:
         92:a1:5b:de:b3:7b:a4:aa:c7:0d:96:c6:eb:54:7d:2b:9b:94:
         f4:2d:34:f9:e2:67:88:f7:ee:1e:73:7e:e1:35:ff:7a:fe:ee:
         75:30:9d:e5:8a:6c:96:80:bc:81:aa:22:97:dc:25:57:31:d6:
         f3:9f:ab:d7:ab:82:83:8d:7a:e1:71:93:35:32:e2:7b:15:6e:
         c8:17:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----