Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/b73aRq0A-pAMgIzrdSvpYNP9oAw.roa
File:                     b73aRq0A-pAMgIzrdSvpYNP9oAw.roa (raw, json)
Hash identifier:          oYODdVSBImSF+ZKOOsfVp92N5sKNuhep7PVVO7TfsRE=
Subject key identifier:   6F:BD:DA:46:AD:00:FA:90:0C:80:8C:EB:75:2B:E9:60:D3:FD:A0:0C
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       018CC2DB60F8105BC0373F588024C63E8F29
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/b73aRq0A-pAMgIzrdSvpYNP9oAw.roa
Signing time:             Mon 01 Jan 2024 02:30:06 +0000
ROA not before:           Mon 01 Jan 2024 02:30:06 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34665
IP address blocks:        2a12:a340::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:60:f8:10:5b:c0:37:3f:58:80:24:c6:3e:8f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Jan  1 02:30:06 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6fbdda46ad00fa900c808ceb752be960d3fda00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:a8:16:11:56:ee:82:3b:19:71:ca:9f:ec:
                    a6:e0:0a:d8:e1:d8:49:54:d8:5b:5c:68:f2:a7:ab:
                    ac:fb:2f:ce:c3:90:48:93:8c:77:01:a3:cd:22:c6:
                    e0:84:19:16:e5:c7:de:b9:2d:25:88:b2:86:4c:c6:
                    83:14:b2:79:99:4a:c6:4a:72:a9:75:fa:66:39:a1:
                    c5:cc:2c:2a:bc:c1:cc:ce:1d:10:6f:82:01:14:2f:
                    c2:a5:71:84:9a:a4:24:a9:14:fb:89:05:ea:1a:70:
                    5e:1f:9d:87:ee:bf:e7:e9:e8:94:2d:47:cc:63:cf:
                    02:fb:8c:ef:26:08:be:5b:6f:6e:93:e0:26:5d:b8:
                    7a:0b:a7:b0:2a:e3:8c:d8:da:ad:2e:c5:fa:e8:2a:
                    74:69:2d:a9:d6:52:3d:b7:99:f2:b1:23:18:43:3f:
                    c3:e4:9e:c7:c7:50:d4:9c:85:8e:24:29:42:55:5b:
                    1d:7b:ed:a1:ba:5b:44:75:1f:19:aa:88:5f:49:f3:
                    2b:be:ae:a9:e9:4d:7a:c4:f5:49:a2:fd:af:93:b7:
                    84:dc:1f:87:5c:07:d7:e8:3f:00:33:c1:bf:ae:60:
                    ef:32:d0:19:fc:57:07:fb:dc:62:0d:5c:fa:35:7b:
                    fd:5a:32:de:f1:dc:47:7f:20:c2:ac:bf:6f:9a:c6:
                    5d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BD:DA:46:AD:00:FA:90:0C:80:8C:EB:75:2B:E9:60:D3:FD:A0:0C
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/b73aRq0A-pAMgIzrdSvpYNP9oAw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a340::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:f8:aa:14:e5:f8:39:26:7f:06:57:d0:1f:9d:8d:c0:e2:25:
         16:d4:58:fb:3e:f8:b8:60:01:66:98:73:e9:ff:d4:9e:1b:a7:
         aa:a7:eb:d0:d1:d7:cb:68:ca:84:30:8a:0b:1a:c0:d2:e3:16:
         3d:b1:6b:27:6b:5a:5a:63:eb:c6:df:88:6e:bc:5c:4b:c8:5b:
         b7:75:44:53:ed:24:d5:a9:94:6c:9b:1c:27:c1:de:e3:30:f0:
         5a:44:68:b2:96:03:de:b3:3f:92:16:5b:68:fb:e1:07:36:c3:
         96:09:b9:46:8f:39:ce:3e:c4:49:e1:fc:19:ea:90:c4:0c:cc:
         ca:12:26:04:ad:12:07:78:d2:4b:f3:24:68:73:9e:9c:90:ed:
         53:08:16:8e:7a:ab:23:3d:47:77:e7:e5:f2:58:cd:6e:66:3d:
         18:e2:0f:97:dd:ae:39:54:6b:bc:80:7f:67:ef:c3:51:aa:8e:
         b0:70:96:a0:45:b3:f2:99:4d:5b:ec:70:fb:8a:b8:a7:64:89:
         85:93:f5:56:f8:70:20:b7:f4:43:20:b4:a3:5f:d7:e1:78:11:
         06:b9:a0:a6:45:d8:57:f5:d0:ef:8a:f4:fe:fd:f5:48:e3:84:
         02:f7:7a:f1:c0:a2:1f:6b:2d:70:d8:ab:7b:d5:82:1d:3b:91:
         dc:09:33:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----