Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa
File:                     34352e382e3133322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier:          bDJpJXMnAgJExatH1yxl2+QfJuGWzdFwnr+6dn4Ij/Y=
Subject key identifier:   40:4E:72:2F:02:A9:7B:C8:F6:88:C4:53:31:A5:B0:68:28:BF:43:0B
Certificate issuer:       /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial:       141CFBC35F1CEE89C567C465B659B0B7E8D31F0F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa
Signing time:             Mon 26 Feb 2024 08:52:44 +0000
ROA not before:           Mon 26 Feb 2024 08:47:44 +0000
ROA not after:            Mon 24 Feb 2025 08:52:44 +0000
asID:                     51167
IP address blocks:        45.8.132.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1c:fb:c3:5f:1c:ee:89:c5:67:c4:65:b6:59:b0:b7:e8:d3:1f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
        Validity
            Not Before: Feb 26 08:47:44 2024 GMT
            Not After : Feb 24 08:52:44 2025 GMT
        Subject: CN=404E722F02A97BC8F688C45331A5B06828BF430B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:0b:76:ac:59:a4:df:07:e2:95:55:ca:4f:
                    1f:59:5d:b0:99:7c:82:55:fe:75:f6:75:c4:fc:cc:
                    75:26:aa:58:d5:aa:12:4f:93:71:4d:30:50:0b:cf:
                    eb:be:78:d4:f7:a0:9d:df:74:6b:30:73:b0:da:e8:
                    37:a3:99:5c:d7:d2:d4:6e:b6:d2:57:8c:88:39:3c:
                    81:c7:43:a7:6c:0c:dc:f8:ac:f4:1b:c0:13:0a:12:
                    b0:4d:fc:22:95:8e:74:30:7c:09:4d:a1:79:17:53:
                    56:ea:4c:a4:a0:cb:c1:dd:b5:f7:d6:3f:22:45:10:
                    11:11:91:c3:73:98:c0:04:e4:ed:d2:03:4e:1f:a1:
                    72:8b:b5:06:21:08:dd:27:51:31:b9:af:24:5a:58:
                    ae:44:e8:36:99:d3:ba:57:35:91:9c:b9:e2:21:d1:
                    a9:7e:a8:83:bd:c4:56:39:39:2e:d1:32:7e:fb:f4:
                    64:1e:f8:b7:99:f2:bd:a3:9b:6b:62:51:24:d6:02:
                    5d:3b:d5:e1:13:cf:1e:bb:d0:92:d2:d8:5d:9b:0d:
                    9d:89:20:ac:8a:fc:a9:ae:6c:17:7e:47:01:22:e3:
                    a0:52:ab:91:93:a1:43:11:08:bd:85:ee:ff:f0:18:
                    86:07:78:ae:08:5c:ac:63:74:aa:bc:b2:0c:1d:13:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:72:2F:02:A9:7B:C8:F6:88:C4:53:31:A5:B0:68:28:BF:43:0B
            X509v3 Authority Key Identifier:
                keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:ff:6f:22:7e:aa:77:91:ec:b0:f6:85:24:ad:97:98:7a:
         65:f8:89:f4:07:d9:12:4a:d9:b1:78:ad:48:e3:80:79:55:da:
         6a:bd:ad:35:15:30:c8:95:dd:fa:fe:d1:61:95:71:ef:8d:63:
         37:bf:b0:cb:43:22:3f:7c:4e:bf:7c:15:97:aa:a8:d2:d4:4c:
         35:cc:bf:64:8d:ec:c5:e4:19:35:7b:73:ac:5b:1e:71:13:b8:
         c9:1b:bb:94:8b:6c:39:93:e5:14:43:3d:14:d8:d3:ef:85:cc:
         43:18:f3:74:2f:18:0a:51:e7:79:92:45:fb:b6:62:f7:66:3a:
         4c:0d:a5:7f:5d:4b:2d:e6:7f:55:27:84:7a:37:62:e1:86:60:
         0a:1a:50:b8:fc:01:72:48:49:af:3d:01:f0:b0:74:99:eb:05:
         27:23:c8:c1:07:d6:1e:58:4a:44:b2:02:6c:87:da:bf:dd:d7:
         3a:73:4d:fd:0d:5d:31:2a:33:97:dd:53:70:22:ec:82:2b:87:
         6a:fb:a7:19:99:4c:2d:4d:aa:44:3d:7f:7a:36:0b:bb:ee:8d:
         0f:49:b1:23:ab:d1:5f:47:cb:32:e2:50:45:f8:3a:46:cb:d1:
         b2:00:f5:20:8f:7a:2c:71:72:9f:dc:d3:df:e8:5c:f3:b8:dd:
         4a:5a:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----