Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/VrK7ZVHiEAAleDsf3-N7X3zJShY.roa
File:                     VrK7ZVHiEAAleDsf3-N7X3zJShY.roa (raw, json)
Hash identifier:          7FPOAR4JEvP6rC10M+5J0vKZ4rT0pM34/ZK+NClyv94=
Subject key identifier:   56:B2:BB:65:51:E2:10:00:25:78:3B:1F:DF:E3:7B:5F:7C:C9:4A:16
Certificate issuer:       /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial:       018CC5DC745E44882C95A683BDB5375E4671
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/VrK7ZVHiEAAleDsf3-N7X3zJShY.roa
Signing time:             Mon 01 Jan 2024 16:30:08 +0000
ROA not before:           Mon 01 Jan 2024 16:30:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202516
IP address blocks:        193.58.164.0/22 maxlen: 22
                          2a0c:9540::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:dc:74:5e:44:88:2c:95:a6:83:bd:b5:37:5e:46:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
        Validity
            Not Before: Jan  1 16:30:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=56b2bb6551e2100025783b1fdfe37b5f7cc94a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6e:2d:1c:e3:be:43:e0:50:17:70:73:88:43:
                    e2:28:90:b5:5a:db:55:ad:c8:05:c6:2f:de:9a:02:
                    74:17:9a:56:41:79:56:6f:cc:2e:3e:b6:53:9c:4c:
                    0a:47:c7:57:6c:8c:fd:33:ec:a5:d6:48:fd:86:6b:
                    2d:d1:fb:a0:5c:cf:cd:2d:99:ac:ae:ae:4c:92:c1:
                    0f:28:b8:f8:b1:e7:ee:21:30:08:8a:fb:f4:12:ee:
                    9f:5a:82:76:6c:da:d2:1f:60:ca:e1:e4:7d:09:aa:
                    7d:b4:88:9a:6a:63:53:4c:63:77:76:48:68:c4:62:
                    5f:1a:c0:29:3c:3c:29:50:8d:e9:be:12:48:c1:2a:
                    5d:e7:a2:39:f0:05:40:be:ab:94:86:5a:6e:5f:df:
                    73:ae:8f:ba:31:94:a9:bf:d3:0e:18:75:1a:58:f8:
                    fd:46:a3:49:54:a5:80:d1:f9:61:e4:e4:e6:30:47:
                    e4:65:69:66:f2:10:6b:19:87:ab:b3:d8:bb:27:22:
                    9c:ff:17:aa:ab:89:91:a5:4f:ac:95:e1:6e:7c:61:
                    e1:28:b6:a7:ba:81:e6:cd:2e:68:d0:b4:ec:16:2f:
                    39:c7:1c:72:1c:aa:09:07:79:b4:56:74:72:1f:20:
                    5c:e0:6c:99:ba:9b:30:10:18:fa:5e:85:3c:bc:76:
                    4d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B2:BB:65:51:E2:10:00:25:78:3B:1F:DF:E3:7B:5F:7C:C9:4A:16
            X509v3 Authority Key Identifier:
                keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/VrK7ZVHiEAAleDsf3-N7X3zJShY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.164.0/22
                IPv6:
                  2a0c:9540::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:10:01:30:7e:80:0d:06:fd:b7:9b:a4:36:46:b0:da:a4:79:
         8c:9d:c7:8f:3c:57:95:96:bd:e9:ab:dc:ce:87:10:3c:6c:ca:
         ae:d2:d4:1d:05:5c:d7:23:b1:b5:d3:20:f3:e4:de:96:27:52:
         3b:ff:66:89:7d:4f:99:b8:ba:04:5d:24:f9:b1:88:bb:d3:e5:
         21:bd:4d:52:1a:f7:3f:9c:8a:f7:ea:1b:e4:bf:7a:20:58:fb:
         c0:9a:ba:d3:4a:24:25:18:58:4d:fd:04:e5:0d:53:a7:0a:83:
         07:cc:c2:70:2b:4c:2a:78:23:0c:4f:37:71:d2:ac:bf:19:92:
         01:17:7e:92:33:01:03:71:f8:69:92:10:e0:d4:b6:71:df:e8:
         b6:90:a1:32:80:c8:b1:f0:1d:8f:3d:b2:1f:7c:b7:c8:73:73:
         bb:98:8f:d7:a7:24:19:aa:25:68:13:4f:4e:26:d4:61:2f:f6:
         58:1b:32:6e:45:10:fb:05:fd:57:f1:8f:f4:a8:78:5c:88:57:
         84:78:e5:db:c1:0b:65:eb:82:32:b7:98:02:23:5d:30:3a:ed:
         66:eb:2f:f1:6d:83:26:c0:92:2f:17:4b:db:41:cc:a6:a1:6a:
         05:62:e0:2d:60:7d:19:cd:05:21:91:37:9c:eb:c3:56:73:9d:
         30:54:dd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----