Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/AlbroHoldings/1/326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa
File:                     326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (raw, json)
Hash identifier:          USTVdSCvegqPgodq2qJ/TrRaouzku37y/ZiugIkqh8w=
Subject key identifier:   B5:4E:6D:74:8B:D6:EC:66:FF:65:3B:62:8A:0D:3A:BC:F7:F6:43:D2
Certificate issuer:       /CN=24315263C7866029FD5A13E5D92A3B0F8EF09BA1
Certificate serial:       2BD0E1371255E6E30035948EB4B93FB6FF7F7293
Authority key identifier: 24:31:52:63:C7:86:60:29:FD:5A:13:E5:D9:2A:3B:0F:8E:F0:9B:A1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/24315263C7866029FD5A13E5D92A3B0F8EF09BA1.cer
Subject info access:      rsync://rpki.cc/repo/AlbroHoldings/1/326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa
Signing time:             Sat 05 Jul 2025 11:58:48 +0000
ROA not before:           Sat 05 Jul 2025 11:53:48 +0000
ROA not after:            Sat 04 Jul 2026 11:58:48 +0000
asID:                     214762
IP address blocks:        2a07:54c1:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.cc/repo/AlbroHoldings/1/24315263C7866029FD5A13E5D92A3B0F8EF09BA1.crl
                          rsync://rpki.cc/repo/AlbroHoldings/1/24315263C7866029FD5A13E5D92A3B0F8EF09BA1.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/24315263C7866029FD5A13E5D92A3B0F8EF09BA1.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d0:e1:37:12:55:e6:e3:00:35:94:8e:b4:b9:3f:b6:ff:7f:72:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24315263C7866029FD5A13E5D92A3B0F8EF09BA1
        Validity
            Not Before: Jul  5 11:53:48 2025 GMT
            Not After : Jul  4 11:58:48 2026 GMT
        Subject: CN=B54E6D748BD6EC66FF653B628A0D3ABCF7F643D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:0e:4f:49:ed:3c:93:4a:e4:b9:5e:dd:bc:
                    cc:0f:8d:1e:ce:12:9e:40:5f:9d:22:26:5f:b7:af:
                    f9:b9:63:61:c7:03:f1:5a:91:5b:ba:66:a1:03:08:
                    63:41:01:27:73:0f:90:1b:46:f5:26:4e:6d:f9:72:
                    1e:b5:bd:e2:fd:5d:08:c8:91:39:e6:f2:7f:63:05:
                    9f:4d:39:f9:73:fd:d2:15:60:1c:47:0e:b0:9c:dd:
                    21:08:5a:76:96:74:a9:e9:7e:6d:8a:17:48:e1:f8:
                    5e:d6:2c:66:5d:c6:f8:60:c7:4d:d6:a3:77:17:d5:
                    fb:1e:f5:36:e7:d6:b7:e0:2f:dc:f2:8b:f3:39:64:
                    96:f0:57:6f:10:9d:cf:22:5c:a4:24:2a:f7:55:0a:
                    3e:30:49:5d:71:cd:f5:3f:d1:2a:8c:2d:93:a8:6c:
                    db:54:09:14:be:05:bf:83:fb:f4:f4:3d:c3:5d:46:
                    2a:38:e0:bf:0d:59:1e:83:b5:b6:39:3a:ce:3d:a8:
                    fa:0a:64:e5:b2:01:3f:f5:29:96:5d:88:fc:01:ff:
                    61:28:33:8d:dd:5c:06:0f:48:f2:96:37:e3:4c:30:
                    8b:a2:e1:26:a4:21:98:9d:1d:bd:55:3c:8c:50:12:
                    b6:50:93:a3:7e:62:ed:92:ce:16:0c:f0:0f:57:88:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4E:6D:74:8B:D6:EC:66:FF:65:3B:62:8A:0D:3A:BC:F7:F6:43:D2
            X509v3 Authority Key Identifier:
                keyid:24:31:52:63:C7:86:60:29:FD:5A:13:E5:D9:2A:3B:0F:8E:F0:9B:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/AlbroHoldings/1/24315263C7866029FD5A13E5D92A3B0F8EF09BA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/24315263C7866029FD5A13E5D92A3B0F8EF09BA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/AlbroHoldings/1/326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:c000::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:ba:a0:fd:e1:4b:cc:15:17:a3:9b:87:2c:91:03:bb:4c:
         9a:59:ba:df:55:bc:26:50:ab:78:49:eb:21:8e:2b:3b:3a:6d:
         24:78:1e:95:51:18:c1:06:ef:31:38:77:ba:7b:43:54:0f:c1:
         78:9c:82:fc:e3:8b:99:32:c6:a9:3d:39:8d:68:1d:c9:bc:f9:
         e8:b5:f6:0f:7f:02:ad:f8:85:81:6a:8e:a2:d1:0f:12:04:ba:
         a0:9d:60:9c:6b:5a:91:c0:49:4e:e5:aa:db:34:bf:ec:8e:eb:
         d6:b2:0f:f1:2f:e5:78:1f:36:54:b5:f4:1b:e4:a0:76:5c:d8:
         4e:18:47:9e:38:0d:ee:53:a9:ee:07:01:b3:61:5a:d4:22:b9:
         7c:3f:46:be:5d:4e:be:8e:88:4c:52:a8:93:7e:f0:16:ca:7d:
         f9:76:a1:df:bf:b5:50:9c:69:a4:3a:fa:19:40:17:c8:d8:89:
         3e:ee:8e:1c:47:06:f5:a5:4d:d5:9e:52:0e:f7:96:c4:7f:3b:
         e2:b3:48:ad:19:ae:44:ca:aa:ee:0b:07:62:c6:47:52:52:c8:
         c1:83:34:a3:4c:49:9f:aa:11:80:9a:bd:a2:6f:9d:8c:82:df:
         09:88:7d:44:d4:b1:99:fa:b0:55:06:69:9b:ec:8f:52:ec:bc:
         ef:a0:c9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:59:27 2025 by rpki-client