Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/aL93abmJW1_vuU2bV1H7fpbGAUc.roa
File:                     aL93abmJW1_vuU2bV1H7fpbGAUc.roa (raw, json)
Hash identifier:          1okHd0ERd0qgacfR9++WEWK0Fo/WxnvwQvcVf8czExo=
Subject key identifier:   68:BF:77:69:B9:89:5B:5F:EF:B9:4D:9B:57:51:FB:7E:96:C6:01:47
Certificate issuer:       /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial:       018FBA6DB33A6F5AF11A8DC580DEA582343E
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/aL93abmJW1_vuU2bV1H7fpbGAUc.roa
Signing time:             Mon 27 May 2024 14:21:42 +0000
ROA not before:           Mon 27 May 2024 14:21:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8648
IP address blocks:        194.97.192.0/19 maxlen: 19
                          2001:748:400::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ba:6d:b3:3a:6f:5a:f1:1a:8d:c5:80:de:a5:82:34:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
        Validity
            Not Before: May 27 14:21:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=68bf7769b9895b5fefb94d9b5751fb7e96c60147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:f0:27:d1:c1:7a:13:18:e9:61:f4:15:86:
                    3f:79:b1:a1:91:ab:6b:c5:b0:03:11:36:cd:ef:02:
                    28:f6:06:fe:bc:d1:7a:b9:52:57:8a:e6:fc:b6:e4:
                    85:71:1a:49:4b:c8:a6:ce:24:58:49:06:6a:7e:43:
                    45:f3:47:76:c5:93:f1:00:bb:17:06:f9:8c:34:b6:
                    ce:23:89:20:8e:54:f2:17:3e:08:eb:16:56:3b:ee:
                    b7:f1:8e:2a:e9:ae:a8:85:87:7c:3a:08:b8:96:ac:
                    03:5d:d3:89:d8:99:6a:a2:be:bb:12:a9:6b:28:a9:
                    c2:21:29:28:59:89:c3:b5:dd:20:06:ef:2e:16:35:
                    dc:c0:da:75:a7:47:ef:cf:35:1b:93:2d:46:fc:de:
                    81:c3:42:3d:47:63:a5:85:30:c8:41:59:20:d7:c9:
                    bf:90:a4:9d:64:e2:97:e8:f3:67:bb:da:92:d5:1c:
                    cd:6e:24:cb:f1:52:0a:29:62:8f:cc:9e:b9:5f:05:
                    61:e0:92:dc:e6:be:58:91:2c:bb:8a:d9:0b:7f:e5:
                    c9:77:1d:c9:e4:4d:19:7a:4d:b0:8f:46:fb:c6:e9:
                    11:d6:05:06:a3:1c:bd:8d:8d:38:8f:be:37:09:90:
                    c6:9b:31:ac:81:17:45:b7:7c:1c:b9:8c:a2:45:67:
                    69:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BF:77:69:B9:89:5B:5F:EF:B9:4D:9B:57:51:FB:7E:96:C6:01:47
            X509v3 Authority Key Identifier:
                keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/aL93abmJW1_vuU2bV1H7fpbGAUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.97.192.0/19
                IPv6:
                  2001:748:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:e0:da:ce:3e:bc:11:da:ea:c9:f1:55:32:b8:ed:70:31:ba:
         e2:58:b8:fb:52:1a:72:c9:5b:b8:ea:04:ce:5b:d6:cc:85:10:
         a7:25:7c:aa:a6:09:a6:4e:36:66:20:a5:e7:28:9a:4c:46:2e:
         1e:bc:1a:a1:b1:cc:02:a2:85:92:62:41:00:f4:c7:ca:33:8e:
         0a:f5:ab:2b:ad:99:76:81:77:c2:e7:8f:a5:e5:5b:56:3e:cd:
         ee:2c:3e:29:50:ce:cf:89:1e:76:f8:06:6e:63:36:90:d8:63:
         1f:1e:48:b8:1c:88:54:07:d9:7e:03:7f:94:17:81:4f:1b:82:
         8b:87:93:77:75:c6:bd:36:e8:8f:21:72:4b:ca:ea:d6:7c:fe:
         32:8a:89:87:fc:8a:5f:33:99:ab:5f:2f:ce:88:f1:f9:3c:f8:
         d1:3b:60:a6:27:f3:d6:e1:27:54:d1:ee:aa:97:c0:e2:1a:fe:
         4a:55:8d:fd:33:53:f5:d3:da:31:10:cd:1a:7d:dd:3e:7b:25:
         34:8b:63:63:69:57:e1:38:6d:b7:f0:c8:c0:0f:a0:2f:8f:46:
         34:38:61:4b:fb:f0:5b:96:59:28:37:87:7c:8d:a2:80:8a:d2:
         ae:f1:dc:c9:9d:fb:55:be:9b:0c:c2:84:25:ed:f1:54:0d:ff:
         1a:0a:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----