Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130623a396534333a3a2f33322d3332203d3e20323135343336.roa
File:                     326130623a396534333a3a2f33322d3332203d3e20323135343336.roa (raw, json)
Hash identifier:          DnRMopUbEYQno6RzsD0aQkk3JpaqfrT6SqVirHnKAaE=
Subject key identifier:   1E:4D:B6:F0:04:DD:3E:75:33:0A:37:E6:5A:FD:44:92:05:6D:8F:48
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       08077624F04F43239CDBE4E12CEB534FD4ACD0A3
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534333a3a2f33322d3332203d3e20323135343336.roa
Signing time:             Tue 28 May 2024 09:23:03 +0000
ROA not before:           Tue 28 May 2024 09:18:03 +0000
ROA not after:            Tue 27 May 2025 09:23:03 +0000
asID:                     215436
IP address blocks:        2a0b:9e43::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl
                          rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:07:76:24:f0:4f:43:23:9c:db:e4:e1:2c:eb:53:4f:d4:ac:d0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: May 28 09:18:03 2024 GMT
            Not After : May 27 09:23:03 2025 GMT
        Subject: CN=1E4DB6F004DD3E75330A37E65AFD4492056D8F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:e8:3f:29:43:32:d6:c8:17:5d:47:ba:80:
                    98:c1:90:03:7a:d1:92:c6:bb:5a:a9:e7:5c:52:eb:
                    6f:84:ba:bf:df:ea:a0:30:8e:bd:38:5e:71:8a:5e:
                    a4:f5:c8:9e:e8:09:d4:8d:01:e0:d0:e1:88:28:63:
                    d9:ee:70:fa:0e:13:85:83:24:c9:ed:60:bd:0d:de:
                    d6:37:81:78:01:1b:9b:b7:70:4e:3d:62:dc:2a:30:
                    c5:af:ec:b0:a8:30:46:68:3c:2a:96:58:99:bb:d9:
                    75:8f:95:63:16:48:5b:d7:cc:eb:c4:4a:a3:13:34:
                    b4:40:5f:ed:aa:70:90:bd:91:4e:f9:8b:d7:b8:05:
                    5d:78:e7:a1:17:3b:83:54:43:13:c9:f7:09:4a:70:
                    57:ed:73:81:2c:52:a2:30:f7:ad:9f:5c:9b:74:d8:
                    f1:a5:50:fe:3d:0a:3e:0d:c1:b1:2b:dd:94:d0:9c:
                    9d:16:5e:47:dd:75:ce:bf:27:79:69:2a:15:e7:c9:
                    ac:55:e1:e8:fb:02:42:55:c5:31:27:34:ec:ea:bd:
                    96:a6:4b:98:44:44:8b:e8:aa:17:7c:15:4d:ac:18:
                    52:64:f5:d1:42:93:ca:0d:0a:4e:90:1a:9d:8c:17:
                    43:c8:06:74:1b:94:06:7c:de:09:5c:94:ad:0d:15:
                    46:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:B6:F0:04:DD:3E:75:33:0A:37:E6:5A:FD:44:92:05:6D:8F:48
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534333a3a2f33322d3332203d3e20323135343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e43::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:81:87:09:88:55:54:e3:77:75:4e:6e:e1:1e:3d:82:ac:8b:
         9d:cf:7f:e4:1c:d4:1c:3f:fc:9d:5d:97:e1:3a:a7:7f:75:29:
         99:61:ec:f0:f3:a7:68:74:f3:3c:64:2e:16:4a:ad:de:7b:e2:
         5b:94:f1:59:6f:3b:66:8e:d8:da:11:c9:c7:ba:65:ec:de:07:
         9b:7b:2b:c2:b5:08:f7:7e:26:9b:1f:d4:b6:68:80:cc:27:6e:
         92:50:ca:36:f1:a9:6b:9c:55:d5:5d:56:16:57:8d:f4:9d:cb:
         97:a2:a5:f0:1e:1d:51:7b:f4:10:cb:8e:21:39:28:d9:d3:36:
         77:76:53:82:5c:26:f0:89:63:fc:9e:60:a4:ce:7b:eb:79:c0:
         2d:05:73:bb:b3:7f:6a:3e:71:e0:44:50:50:dc:33:69:18:35:
         1e:58:04:ec:4b:91:a6:ba:b1:00:9c:76:08:ad:88:9c:4c:f0:
         9f:05:db:12:67:92:e4:70:27:96:44:b2:39:41:d7:00:9f:15:
         cb:86:fa:3e:62:67:e8:44:9d:45:3f:81:96:2f:bd:aa:17:12:
         65:b4:ef:45:74:ff:5e:b8:2e:28:5d:53:b6:77:9b:e5:77:46:
         e0:1b:41:9f:62:0d:5c:08:5f:47:5b:d2:4b:b4:08:bf:3e:f4:
         79:eb:c1:d9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 26 16:27:30 2024 by rpki-client on console-fra.rpki-client.org