Route Origin Authorization

$ rpki-client -vvf rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e20323131353735.roa
File:                     326131343a373538333a663466343a3a2f34382d3438203d3e20323131353735.roa (raw, json)
Hash identifier:          4UisgTTPQr9Oiu3tiR4XXTWhq+IolL6PZuhuLd1Hrt4=
Subject key identifier:   77:E9:50:85:6F:F5:CB:75:5A:B2:7A:0C:CF:83:D0:E3:16:15:78:13
Certificate issuer:       /CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229
Certificate serial:       05EAE521F3C8BCA2706265040F546960F01576EE
Authority key identifier: E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer
Subject info access:      rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e20323131353735.roa
Signing time:             Mon 22 Sep 2025 23:53:43 +0000
ROA not before:           Mon 22 Sep 2025 23:48:43 +0000
ROA not after:            Mon 21 Sep 2026 23:53:43 +0000
asID:                     211575
IP address blocks:        2a14:7583:f4f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl
                          rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 17:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ea:e5:21:f3:c8:bc:a2:70:62:65:04:0f:54:69:60:f0:15:76:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229
        Validity
            Not Before: Sep 22 23:48:43 2025 GMT
            Not After : Sep 21 23:53:43 2026 GMT
        Subject: CN=77E950856FF5CB755AB27A0CCF83D0E316157813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:2d:ba:32:66:2b:bb:fa:7a:8f:9c:0a:08:
                    fc:f6:47:e6:05:74:41:1f:d2:d3:f9:b8:61:f6:31:
                    e6:3b:e8:e0:bb:ff:63:9b:bd:45:de:47:cc:e3:ac:
                    62:d5:cb:97:1e:66:a3:fc:4b:1d:5e:70:ca:a0:36:
                    65:49:be:7b:7b:83:ed:e0:39:8d:3c:b7:68:98:86:
                    2e:6c:5b:3b:f9:54:e8:a0:28:bd:57:04:d5:b0:e2:
                    2a:4c:1b:03:e1:6f:e3:be:c9:e6:36:22:95:c0:e6:
                    96:96:22:a5:69:87:a8:da:66:16:ad:8c:94:c3:e7:
                    e7:e9:80:17:be:c1:3c:cf:9f:ea:87:62:7c:84:0e:
                    4d:9d:51:af:dc:78:40:1c:8e:2e:05:8d:a2:eb:24:
                    e7:57:df:24:22:c9:82:b5:16:8e:70:7d:63:50:3a:
                    33:11:98:81:e1:95:e1:12:af:8d:54:f8:45:a6:cd:
                    c9:31:d5:d7:d8:9f:a2:58:6b:fb:1a:16:8d:23:d4:
                    50:1b:fc:37:0c:90:bb:af:ab:53:26:71:29:e7:b3:
                    34:8f:a7:50:a4:90:d7:93:c0:26:ed:b8:39:ec:6d:
                    4c:86:4f:4d:08:fc:a6:f9:f2:f3:88:76:ab:b9:9a:
                    cd:10:f3:26:51:1a:19:51:72:90:e7:1e:15:71:ac:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E9:50:85:6F:F5:CB:75:5A:B2:7A:0C:CF:83:D0:E3:16:15:78:13
            X509v3 Authority Key Identifier:
                keyid:E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e20323131353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f4f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:28:5f:1a:3d:1d:b3:e7:0d:49:da:53:de:e4:b6:d8:ad:40:
         00:a4:d9:34:99:de:27:c3:89:9b:fe:ac:29:d1:83:60:1f:cb:
         7d:26:f3:ef:e7:c0:4b:23:85:2e:b3:90:2e:d9:c0:67:1c:ae:
         2f:59:cb:f8:1b:d5:91:62:18:a5:b3:9b:d1:81:04:6c:31:79:
         49:a1:ce:a2:b0:4a:38:60:88:0f:71:f4:6e:92:22:e8:3a:47:
         0d:70:b6:16:5b:27:51:31:86:22:9f:5b:f4:f5:1f:1c:68:f1:
         4c:69:4e:25:36:aa:b4:82:03:39:d9:29:66:11:d5:c4:10:a9:
         87:37:2f:8f:66:40:f0:11:d6:e3:7b:2a:76:68:79:15:45:1c:
         a9:25:d7:b5:f5:9d:de:99:2e:63:11:a0:95:12:b4:73:62:53:
         c3:15:b9:cd:7d:d0:9b:87:f0:93:23:0d:9c:47:4c:db:b0:2f:
         4c:df:4e:6b:15:f8:57:7f:c4:1e:5b:07:50:d5:a1:cd:81:21:
         7e:d1:f6:ba:98:cd:cc:16:8b:ec:55:99:b6:a2:5a:48:68:9c:
         fc:b9:4f:71:7d:f9:74:d8:2b:fc:a3:92:d5:e5:2c:a0:a9:5a:
         8d:6c:04:5e:9e:e9:7b:4f:7c:be:44:31:76:73:06:33:ef:64:
         65:2b:c6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:00:21 2025 by rpki-client