Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130623a396534363a3a2f33322d3332203d3e20323135353331.roa
File:                     326130623a396534363a3a2f33322d3332203d3e20323135353331.roa (raw, json)
Hash identifier:          23g18AMT8gulup6FbzG2FVZb8Reg/U54JbHfoINAYpI=
Subject key identifier:   C9:1E:78:79:87:57:BE:20:BE:AD:CC:A1:CC:49:91:5F:3D:41:87:EC
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       06433D56A83EA3C235210625DE5B7D2B8DE59A33
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534363a3a2f33322d3332203d3e20323135353331.roa
Signing time:             Tue 04 Jun 2024 18:20:05 +0000
ROA not before:           Tue 04 Jun 2024 18:15:05 +0000
ROA not after:            Tue 03 Jun 2025 18:20:05 +0000
asID:                     215531
IP address blocks:        2a0b:9e46::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl
                          rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:43:3d:56:a8:3e:a3:c2:35:21:06:25:de:5b:7d:2b:8d:e5:9a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: Jun  4 18:15:05 2024 GMT
            Not After : Jun  3 18:20:05 2025 GMT
        Subject: CN=C91E78798757BE20BEADCCA1CC49915F3D4187EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:d0:3b:dd:f5:2e:99:4b:ff:8e:19:51:67:
                    e6:43:27:f7:ff:43:f3:e2:17:08:78:ed:a7:85:fe:
                    60:b4:30:31:d0:2f:95:12:dd:3d:5d:9a:43:5a:6d:
                    01:0e:eb:b9:0c:1f:ba:86:6b:4a:65:60:89:a0:5a:
                    0b:23:d5:77:1b:bd:f6:46:62:cc:0e:76:41:0e:62:
                    d0:af:b5:51:f8:a8:89:8d:6a:75:52:14:bf:77:a8:
                    93:7d:6c:90:44:d8:de:b0:04:2d:44:37:71:5a:38:
                    a1:d8:8c:f6:40:77:4d:b1:a2:7d:92:61:b7:f9:90:
                    76:2d:03:11:b2:00:d5:83:57:2b:82:66:36:62:c5:
                    fd:58:91:b3:94:48:8e:e0:26:72:f8:4d:5e:33:4f:
                    50:fe:84:3e:c1:6a:4d:27:8a:0c:bb:cb:4c:7a:4f:
                    dd:10:c0:14:6e:14:04:a4:1b:3c:12:ae:16:e0:de:
                    ec:3f:d7:1e:da:ea:cf:71:10:e0:8c:c5:cb:7a:46:
                    90:6a:3d:9c:c5:bb:13:bc:cb:23:d6:5d:15:8e:da:
                    21:45:7c:52:03:0c:10:ae:b3:0d:2f:70:16:53:9b:
                    4c:c1:2d:2e:b2:7e:8a:8a:90:20:71:82:8d:57:31:
                    74:cd:d7:a7:ca:8e:cc:d0:f4:76:5c:d6:ea:4c:3f:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1E:78:79:87:57:BE:20:BE:AD:CC:A1:CC:49:91:5F:3D:41:87:EC
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534363a3a2f33322d3332203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e46::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:5b:6c:d5:32:3d:ad:c6:36:e3:58:22:57:24:1b:15:01:63:
         c5:d8:bc:32:4b:72:16:a7:d3:0f:60:6c:ee:33:e4:21:f3:7d:
         3c:a6:56:9f:c2:d4:b9:8b:2b:9b:2d:df:a5:57:2a:1b:69:fe:
         93:d3:d3:50:14:79:f9:97:0c:99:2d:80:a0:59:07:a9:6d:a7:
         ab:41:19:b4:23:4a:d7:4a:9f:1c:81:49:e4:a9:ce:21:49:f1:
         83:b7:e2:26:9c:6b:5e:62:ca:37:53:e5:64:40:96:59:e5:92:
         f6:7e:4b:89:f5:ee:b4:b2:e6:47:78:d9:97:ea:f8:04:60:7f:
         62:b1:b6:6f:8c:92:e5:82:90:7a:69:d6:1e:a3:06:d2:fa:c7:
         26:4d:41:98:a2:09:42:8b:a7:13:6d:74:89:30:cc:24:07:4c:
         3f:32:c7:b0:1f:7a:92:13:0d:28:09:fd:41:7b:45:d6:bf:2a:
         40:f0:1e:a7:7a:83:e3:c7:d2:93:65:30:a5:3a:e8:fc:d7:0d:
         51:8a:69:a0:8f:f3:d4:d8:ee:81:03:46:65:64:02:30:97:e0:
         31:8b:54:32:50:dc:4e:a4:28:cb:af:b6:40:ac:f5:51:30:f4:
         9d:15:17:c3:97:ff:39:e0:af:b7:7a:7b:d3:75:00:32:73:2f:
         66:95:20:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 1 05:06:07 2024 by rpki-client on console-ams.rpki-client.org