Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
File:                     326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa (raw, json)
Hash identifier:          PSoOSEfw0oZ2RdAZs2WpD6XgQ889tzdjTrBSkn4G3c0=
Subject key identifier:   CB:A2:7A:8D:2B:94:7E:15:FC:55:AA:2C:BE:E3:C6:3A:75:1E:6E:8C
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       739395259C8963671DEF65A84CE5ADB8FB4B7C37
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa
Signing time:             Tue 28 May 2024 15:02:55 +0000
ROA not before:           Tue 28 May 2024 14:57:55 +0000
ROA not after:            Tue 27 May 2025 15:02:55 +0000
asID:                     215292
IP address blocks:        2a14:7c0:1800::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 21:43:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:93:95:25:9c:89:63:67:1d:ef:65:a8:4c:e5:ad:b8:fb:4b:7c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: May 28 14:57:55 2024 GMT
            Not After : May 27 15:02:55 2025 GMT
        Subject: CN=CBA27A8D2B947E15FC55AA2CBEE3C63A751E6E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:d4:19:00:5c:d0:e9:19:78:64:96:c3:ba:
                    4e:61:3b:8d:56:ad:2b:86:cc:de:65:82:32:f8:a5:
                    eb:3a:d1:8e:27:b5:b3:c3:c1:97:16:92:8e:50:94:
                    3f:ff:eb:a9:e3:e7:fe:6f:da:99:79:8d:7e:d3:2c:
                    2d:ff:05:b9:74:49:53:c9:a5:fe:f1:e9:f1:7d:d8:
                    00:27:d2:6c:fd:7b:a2:3b:7f:aa:f0:10:6e:0d:3c:
                    e0:e1:4c:c4:da:57:4b:a6:43:17:62:1a:24:37:f5:
                    0c:51:c6:49:e6:74:6c:24:ae:7b:29:6f:7d:dd:80:
                    b7:d8:8a:9e:ec:eb:3a:68:80:96:d6:2b:41:5b:c9:
                    b6:1f:bc:25:ea:34:07:39:65:3d:9a:d2:14:f0:ee:
                    cb:07:ef:40:30:0b:12:43:98:7e:5c:5c:58:85:42:
                    f5:5b:ff:c6:68:00:82:fe:06:71:53:a3:1c:4d:73:
                    88:86:22:54:ff:2f:98:eb:9e:34:6c:93:d8:05:65:
                    fb:4d:92:67:1e:f6:76:69:59:54:bb:f1:40:91:f9:
                    ec:ee:b5:f3:24:ed:80:fe:da:b1:12:6f:ac:1d:ca:
                    a3:29:38:ae:41:f0:a7:45:84:85:d3:8c:2b:a5:b5:
                    df:8c:88:b3:43:52:02:a3:cb:ae:6b:34:2e:ca:69:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A2:7A:8D:2B:94:7E:15:FC:55:AA:2C:BE:E3:C6:3A:75:1E:6E:8C
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a313830303a3a2f33382d3438203d3e20323135323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:5b:56:7d:12:f8:21:44:df:f5:39:27:dc:f9:0f:b0:7f:
         35:31:c2:dd:3a:e3:a2:65:d1:e1:c8:ed:dd:c4:d6:90:73:1a:
         b5:59:c6:b8:3c:7f:ad:31:16:da:f1:dd:41:d4:dc:b4:2f:b1:
         6a:c0:54:79:2c:91:cc:fc:8d:e2:32:b5:7d:36:1b:a2:8e:fe:
         0d:99:42:3d:4d:35:6f:08:37:62:aa:f6:11:bd:57:18:5c:18:
         57:7b:74:a8:9e:8d:48:19:ae:ff:6d:f3:8b:0f:13:95:38:89:
         79:a4:2e:94:a4:1b:38:de:41:2c:33:49:c2:f4:61:6b:a1:ba:
         eb:47:be:b2:70:2c:b5:8b:0f:a1:ce:89:51:c3:53:4a:fd:b4:
         67:c6:ed:4b:bf:6b:62:e7:7e:b2:6f:7c:b8:99:25:11:01:9f:
         bd:5e:88:48:a7:a4:fc:fb:a5:39:25:f9:21:f4:49:d2:62:00:
         39:0c:44:21:76:4a:43:e9:5f:2f:4f:67:8d:1e:09:be:75:03:
         10:54:f5:d8:bd:f9:07:ae:6a:a7:0f:4c:43:10:82:a6:4c:a4:
         1f:d3:51:69:8f:fb:c7:68:78:4c:03:ef:60:2c:8a:6a:ec:59:
         d6:87:d2:35:76:d1:d1:30:2e:15:b6:52:93:75:31:08:b4:6d:
         cc:d6:9a:7e
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUc5OVJZyJY2cd72WoTOWtuPtLfDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNDA1MjgxNDU3NTVaFw0yNTA1MjcxNTAyNTVaMDMxMTAvBgNV
BAMTKENCQTI3QThEMkI5NDdFMTVGQzU1QUEyQ0JFRTNDNjNBNzUxRTZFOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7tQZAFzQ6Rl4ZJbDuk5hO41W
rSuGzN5lgjL4pes60Y4ntbPDwZcWko5QlD//66nj5/5v2pl5jX7TLC3/Bbl0SVPJ
pf7x6fF92AAn0mz9e6I7f6rwEG4NPODhTMTaV0umQxdiGiQ39QxRxknmdGwkrnsp
b33dgLfYip7s6zpogJbWK0FbybYfvCXqNAc5ZT2a0hTw7ssH70AwCxJDmH5cXFiF
QvVb/8ZoAIL+BnFToxxNc4iGIlT/L5jrnjRsk9gFZftNkmce9nZpWVS78UCR+ezu
tfMk7YD+2rESb6wdyqMpOK5B8KdFhIXTjCultd+MiLNDUgKjy65rNC7KaSehAgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUy6J6jSuUfhX8VaosvuPGOnUebowwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzEzODMwMzAzYTNhMmYzMzM4MmQzNDM4MjAzZDNlMjAzMjMxMzUzMjM5
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgIqFAfAGDANBgkqhkiG9w0BAQsFAAOCAQEACz5bVn0S+CFE
3/U5J9z5D7B/NTHC3TrjomXR4cjt3cTWkHMatVnGuDx/rTEW2vHdQdTctC+xasBU
eSyRzPyN4jK1fTYboo7+DZlCPU01bwg3Yqr2Eb1XGFwYV3t0qJ6NSBmu/23ziw8T
lTiJeaQulKQbON5BLDNJwvRha6G660e+snAstYsPoc6JUcNTSv20Z8btS79rYud+
sm98uJklEQGfvV6ISKek/PulOSX5IfRJ0mIAOQxEIXZKQ+lfL09njR4JvnUDEFT1
2L35B65qpw9MQxCCpkykH9NRaY/7x2h4TAPvYCyKauxZ1ofSNXbR0TAuFbZSk3Ux
CLRtzNaafg==
-----END CERTIFICATE-----