Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa
File:                     OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa (raw, json)
Hash identifier:          LJC/RrSECoNqowsXs03UcOteY4G71Po9yCm7BzQtUyw=
Subject key identifier:   39:71:E2:3E:F4:BA:1D:DD:90:76:47:C4:12:CE:C2:21:86:05:A1:CB
Certificate issuer:       /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial:       018CC5014D1C306CE73C003D105911AE542F
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa
Signing time:             Mon 01 Jan 2024 12:30:45 +0000
ROA not before:           Mon 01 Jan 2024 12:30:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48258
IP address blocks:        91.209.53.0/24 maxlen: 24
                          2001:67c:2488::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:4d:1c:30:6c:e7:3c:00:3d:10:59:11:ae:54:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
        Validity
            Not Before: Jan  1 12:30:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3971e23ef4ba1ddd907647c412cec2218605a1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d5:6d:d9:c4:36:00:3c:ed:16:7d:cf:2e:f6:
                    1b:c8:a9:a4:ae:71:b0:cf:69:a1:d4:19:7a:df:78:
                    93:25:b6:46:7a:65:5d:b9:37:b3:0a:90:5a:b8:aa:
                    8d:8f:ff:7b:7e:ce:d9:60:9a:e3:f6:3e:bf:df:86:
                    d5:8d:72:3b:13:b8:c0:01:ab:0f:f6:0b:bf:e1:56:
                    cc:df:c0:a0:4f:7e:a0:90:44:78:e4:26:1a:1c:35:
                    5f:e4:da:c9:86:87:c0:46:d0:3c:62:f5:60:a1:06:
                    60:e2:25:d9:36:4c:f0:8e:28:40:04:f7:fc:69:9e:
                    6e:12:22:bd:b4:12:2b:2e:ac:fe:1c:6a:5e:d3:bc:
                    e2:d0:25:3d:22:52:ae:0a:07:74:1b:5d:a0:a0:98:
                    3e:ba:ee:9a:e2:9b:b2:9c:32:ae:6a:2f:44:25:9b:
                    84:77:3b:c8:1e:cf:4d:96:dd:30:ef:81:2d:76:f5:
                    9c:56:cb:26:f9:77:21:07:c8:7a:8d:f6:c2:8b:b5:
                    10:77:49:84:c2:8f:03:11:67:67:19:12:88:79:09:
                    87:76:4a:c5:42:95:37:0a:9e:c5:88:05:38:19:d8:
                    cc:61:cd:fd:61:10:ab:8e:d6:99:65:bb:34:33:87:
                    51:ce:e7:9a:af:4e:6d:f0:f4:1e:e4:9b:8e:57:7a:
                    4b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:71:E2:3E:F4:BA:1D:DD:90:76:47:C4:12:CE:C2:21:86:05:A1:CB
            X509v3 Authority Key Identifier:
                keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/OXHiPvS6Hd2QdkfEEs7CIYYFocs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.209.53.0/24
                IPv6:
                  2001:67c:2488::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:68:9f:56:d2:e4:63:5e:46:a0:a6:4d:04:3d:97:20:98:18:
         82:7e:83:18:e8:cd:bf:9a:fb:df:b4:cd:3b:4d:89:5f:fc:43:
         e3:eb:6e:d3:bd:19:aa:65:ca:41:80:56:99:69:ab:92:d6:4d:
         ba:d6:53:54:88:d5:34:fa:f4:39:b4:bf:cf:56:58:36:de:2a:
         42:3d:08:ca:e7:0e:39:26:84:4f:31:a1:d8:9e:a7:01:73:57:
         ab:64:eb:7e:3e:75:c8:3b:0b:44:d4:ad:12:1f:d4:e4:84:59:
         3e:39:cf:ef:9d:72:59:f4:43:47:bc:60:c5:13:f0:57:89:b2:
         99:cd:7f:38:fb:a7:1d:19:72:d2:76:4e:ec:bb:78:a0:8c:a5:
         a3:45:cc:91:1b:0f:90:b3:52:a7:c0:f6:66:1a:dc:c9:af:9d:
         81:b4:e2:44:a6:8b:7f:5b:b1:e7:43:0c:13:1c:42:11:7e:d7:
         c8:07:e4:c6:c3:3b:a1:46:c3:54:10:f0:0c:21:0d:03:1e:ef:
         5d:b3:44:a7:03:06:38:84:c7:ff:9b:11:17:98:91:68:0a:38:
         bf:da:10:d2:0e:6e:79:7a:26:be:ab:64:4e:84:42:a4:fd:a6:
         09:62:51:d1:01:3f:22:0a:3c:64:64:b8:96:9b:f2:f8:4e:f2:
         2e:b0:15:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----