Route Origin Authorization

$ rpki-client -vvf rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e203331383938.roa
File:                     326131343a373538333a663466343a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          KH22wDmA2byYdP2XNZy41HJrAI1yt8J6RyUn0qbhFj0=
Subject key identifier:   A4:EA:64:3C:41:D7:1E:2B:0E:B0:4D:B3:9B:42:DF:24:C7:93:40:DD
Certificate issuer:       /CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229
Certificate serial:       49273A17D97B99FFC6ECDD488329DC086237929A
Authority key identifier: E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer
Subject info access:      rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e203331383938.roa
Signing time:             Mon 22 Sep 2025 23:53:44 +0000
ROA not before:           Mon 22 Sep 2025 23:48:44 +0000
ROA not after:            Mon 21 Sep 2026 23:53:44 +0000
asID:                     31898
IP address blocks:        2a14:7583:f4f4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl
                          rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/B149F23A3E99C4760297DD7104B400C835D86D19.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B149F23A3E99C4760297DD7104B400C835D86D19.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 11:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:27:3a:17:d9:7b:99:ff:c6:ec:dd:48:83:29:dc:08:62:37:92:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229
        Validity
            Not Before: Sep 22 23:48:44 2025 GMT
            Not After : Sep 21 23:53:44 2026 GMT
        Subject: CN=A4EA643C41D71E2B0EB04DB39B42DF24C79340DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:a7:36:7c:27:a9:2b:aa:b2:19:ef:61:e6:
                    78:76:f4:42:b5:09:56:7b:aa:f8:e3:21:9f:79:97:
                    d3:a8:ac:48:a1:ad:c5:84:c0:94:6e:78:e8:00:8b:
                    c8:2e:ba:25:57:62:4b:40:0c:9a:64:9d:7c:62:ca:
                    1f:5b:7c:73:fd:ac:25:d4:37:68:3d:8e:d0:3d:0c:
                    dd:db:cb:1b:e6:97:df:18:1e:c9:3e:68:a0:de:29:
                    b9:46:d2:ad:6c:2e:2f:bf:cb:5d:ec:10:9c:85:7b:
                    90:dd:f1:a3:6b:a7:c4:54:24:83:c9:f0:95:e3:90:
                    ae:b8:91:fe:6c:77:f1:6a:04:c8:b6:05:f8:7f:c2:
                    5f:f9:79:16:22:67:a0:41:69:5b:cb:e4:ee:b2:02:
                    dd:71:49:61:77:a6:f9:09:5f:b0:41:9f:eb:01:8d:
                    13:0e:b0:f9:f7:d3:3c:f9:68:53:a6:91:8e:4c:fd:
                    74:aa:71:2e:29:6d:e4:5e:65:f9:0f:68:31:4e:6d:
                    a8:5e:36:5f:12:9f:3d:bc:76:2d:fc:de:07:09:86:
                    4a:90:11:6f:19:c4:b2:06:a5:4e:96:b2:87:91:3e:
                    eb:64:df:cd:b4:9c:1b:ee:27:cd:a6:91:2d:49:4f:
                    7c:de:00:e2:78:d0:b7:76:90:5c:30:64:62:e7:e1:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EA:64:3C:41:D7:1E:2B:0E:B0:4D:B3:9B:42:DF:24:C7:93:40:DD
            X509v3 Authority Key Identifier:
                keyid:E2:D8:06:3C:20:C5:FF:1C:1C:1A:CC:3A:D4:E9:D0:C0:C8:64:82:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/2/E2D8063C20C5FF1C1C1ACC3AD4E9D0C0C8648229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ruinet.work/repo/CowGrassland/0/326131343a373538333a663466343a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f4f4::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:88:a0:66:7d:21:f3:99:e6:d7:e6:05:5a:91:ca:26:79:43:
         d1:80:c6:37:a4:e5:81:62:36:03:7b:c6:fa:59:1c:02:3b:79:
         85:ae:3f:50:74:4b:8d:37:5a:c8:9a:1d:0e:98:a2:14:68:d5:
         fb:12:bb:ce:9b:06:2e:69:af:69:b9:79:e6:4b:12:ab:49:80:
         12:c4:5c:02:3a:d2:59:4c:a3:45:93:72:aa:ed:e8:fe:80:f7:
         e3:2c:bb:8e:e3:02:dc:75:8b:c6:67:1c:cf:10:34:6b:99:7d:
         9b:ed:de:de:3c:b8:3a:b8:d4:60:0b:d5:59:c2:e7:ff:a3:bf:
         12:dd:c4:b1:ba:88:20:a8:36:57:34:05:cb:5c:00:e8:a3:b3:
         52:4f:3e:7d:fb:ed:3f:5a:5e:28:b5:7c:e4:25:bc:fd:d3:b1:
         dd:56:67:56:79:41:40:c6:50:17:d7:e6:92:5b:f9:d1:d7:02:
         f7:9f:b6:69:9d:a1:d2:f3:2d:56:3c:70:f3:22:b0:0d:2d:69:
         d5:0d:0c:c4:f0:bc:4a:51:ce:14:fd:dc:75:12:51:0f:b1:08:
         85:e6:13:b3:27:6b:19:71:02:ed:94:df:d1:69:81:6a:e9:17:
         57:d9:60:20:54:ad:14:26:c3:df:b8:3c:5f:08:db:1c:a2:cb:
         6b:b9:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:03:55 2025 by rpki-client