Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/EBUtWqJt77CR3-i9CS-0XzsshBY.roa
File:                     EBUtWqJt77CR3-i9CS-0XzsshBY.roa (raw, json)
Hash identifier:          UkSlDLe5yOd1kafp3m6pk14Hxj9qaRLrWQelUo9sg+E=
Subject key identifier:   10:15:2D:5A:A2:6D:EF:B0:91:DF:E8:BD:09:2F:B4:5F:3B:2C:84:16
Certificate issuer:       /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial:       018CCA29F85732F5FF0524EDE0B42B43790D
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/EBUtWqJt77CR3-i9CS-0XzsshBY.roa
Signing time:             Tue 02 Jan 2024 12:33:17 +0000
ROA not before:           Tue 02 Jan 2024 12:33:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199297
IP address blocks:        2a13:79c7:1520::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:f8:57:32:f5:ff:05:24:ed:e0:b4:2b:43:79:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
        Validity
            Not Before: Jan  2 12:33:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10152d5aa26defb091dfe8bd092fb45f3b2c8416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b6:31:ed:1a:a5:ef:6a:cb:c7:7e:40:2b:b9:
                    bf:5f:95:af:62:d4:ff:6c:b9:63:a3:ba:f1:d7:5c:
                    88:3d:f6:59:ad:88:42:11:7b:df:1f:41:01:c8:f3:
                    07:32:fc:04:e2:ee:8e:3b:e9:26:ed:e4:18:85:76:
                    e8:1a:27:49:63:0d:65:c0:39:94:f2:ed:a5:cd:aa:
                    6d:ad:82:f1:76:a9:85:48:04:62:82:9f:b1:9c:09:
                    74:37:f0:3f:55:40:18:c4:e4:cb:f6:6e:f2:85:f2:
                    53:21:46:62:63:ec:ec:ad:8e:71:fc:51:80:09:0f:
                    21:ee:6c:3a:d2:34:e5:7f:dc:72:cc:20:79:68:c4:
                    80:e7:c1:8a:52:fe:a0:98:f9:92:77:ff:3e:73:b3:
                    9b:96:8a:b0:c1:4e:83:dc:c2:25:51:cb:1c:fe:93:
                    ef:e6:6c:5c:ec:77:63:76:57:d3:86:e3:6f:a8:79:
                    3d:8d:19:d7:27:da:8a:1b:54:bc:58:87:bd:6d:f2:
                    43:31:0e:1b:22:60:66:e7:3c:05:22:f6:ef:e2:b7:
                    68:b7:dc:26:ce:da:78:30:a3:0a:a4:eb:b1:ef:41:
                    77:0c:ed:d4:95:2b:64:cd:f8:8a:f4:7f:18:87:ee:
                    f9:81:75:6f:3c:b7:4a:48:c3:fb:07:df:52:f1:e1:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:15:2D:5A:A2:6D:EF:B0:91:DF:E8:BD:09:2F:B4:5F:3B:2C:84:16
            X509v3 Authority Key Identifier:
                keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/EBUtWqJt77CR3-i9CS-0XzsshBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:79c7:1520::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:db:46:ff:da:eb:cb:6f:19:d7:6f:d2:d9:ee:49:e9:f3:dc:
         ed:3d:9a:7b:c0:0f:4c:1f:1a:cb:3d:c7:69:b0:a6:4d:b8:d6:
         a0:3b:66:ea:63:69:4e:82:56:39:a6:d4:e0:cf:2c:ed:05:91:
         53:a9:6c:66:ab:0a:fb:78:40:b1:f7:52:48:2a:73:ea:ed:af:
         c5:dc:98:c2:39:55:ea:45:85:72:07:53:1f:62:45:b7:40:65:
         f7:af:47:cf:87:57:ed:0c:26:52:b6:ae:0a:7f:06:d9:df:df:
         07:c5:3a:56:b0:6b:86:21:d0:1f:dc:4d:c9:d8:f9:f5:28:2e:
         91:2f:9a:95:b2:97:37:d1:3b:9c:fa:38:8f:be:4c:d1:75:a1:
         bd:bb:ec:20:20:a4:2b:9d:d3:37:11:bd:93:30:e5:41:4c:e5:
         b9:62:29:36:41:13:f4:61:86:3f:72:c4:05:dc:e5:aa:ae:96:
         e2:30:d4:57:07:6b:58:a7:e8:7a:6e:c9:9b:9c:2b:64:b3:cf:
         ea:d2:d8:f7:6e:67:13:44:b3:42:11:0e:bd:c7:d6:07:e5:cf:
         ca:23:96:76:f7:f3:43:6c:0a:ed:84:7f:11:ff:12:40:1e:5b:
         f3:5f:d2:25:dc:b4:ce:0f:ad:86:af:fd:7d:89:ee:43:43:87:
         f7:e8:c3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----