Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130663a363238303a3a2f32392d3438203d3e20323136313536.roa
File:                     326130663a363238303a3a2f32392d3438203d3e20323136313536.roa (raw, json)
Hash identifier:          ztWXgs0oNubUGK9xaOoCKY2p8Hn2Yv2zmhKcjpV24bA=
Subject key identifier:   87:82:C6:52:75:7A:CE:A9:77:A7:D3:01:25:32:02:54:08:C7:6A:68
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       429F7230B7C83E04E8600DF433EA27C9A6229D7B
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/0/326130663a363238303a3a2f32392d3438203d3e20323136313536.roa
Signing time:             Tue 28 May 2024 13:20:24 +0000
ROA not before:           Tue 28 May 2024 13:15:24 +0000
ROA not after:            Tue 27 May 2025 13:20:24 +0000
asID:                     216156
IP address blocks:        2a0f:6280::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl
                          rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:34:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9f:72:30:b7:c8:3e:04:e8:60:0d:f4:33:ea:27:c9:a6:22:9d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: May 28 13:15:24 2024 GMT
            Not After : May 27 13:20:24 2025 GMT
        Subject: CN=8782C652757ACEA977A7D3012532025408C76A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:15:26:08:8e:3e:34:ff:df:ef:da:54:cc:
                    ee:4f:5c:f0:87:ba:dc:72:4a:83:5b:f2:0d:bc:b4:
                    ac:97:5c:7a:73:db:95:79:a3:77:fc:29:88:aa:0d:
                    1f:ea:94:b3:9b:7b:e1:23:3f:7c:0b:81:0f:7f:17:
                    b1:1c:c5:88:8e:d8:05:44:bb:69:3e:f4:d2:9c:3a:
                    14:d1:ef:dd:f1:5b:da:33:a2:c1:37:16:c0:2f:1c:
                    a8:df:c9:28:9b:39:13:0d:6c:8a:c4:50:41:de:c9:
                    a7:d9:b1:9a:28:1d:97:56:40:f5:18:f4:db:96:a4:
                    87:83:e3:bb:9e:e2:4f:80:92:d5:92:54:3a:e3:e4:
                    0e:90:31:43:3f:05:05:db:df:f0:01:fe:52:59:e0:
                    c6:5a:f5:2e:21:f7:73:75:34:0b:89:1f:c2:d5:d9:
                    72:1f:61:1a:8e:e3:bf:a7:9f:83:fe:47:cb:60:19:
                    9f:e3:b3:7a:ba:0b:03:2a:f6:25:f0:e2:ff:04:db:
                    fa:96:ce:c6:e4:33:55:f9:77:51:5f:63:90:42:07:
                    08:16:8a:79:41:5a:ab:be:32:d2:37:98:5f:0c:7c:
                    af:bb:90:18:f8:3e:55:4d:d2:c9:eb:6c:81:02:d3:
                    ae:90:41:06:2a:75:87:d9:1d:32:47:0a:0d:ca:b0:
                    46:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:C6:52:75:7A:CE:A9:77:A7:D3:01:25:32:02:54:08:C7:6A:68
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130663a363238303a3a2f32392d3438203d3e20323136313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280::/29

    Signature Algorithm: sha256WithRSAEncryption
         45:37:59:a1:5a:10:fd:54:f6:59:bd:d0:8b:d7:74:2f:57:45:
         9f:d7:ef:93:14:af:09:12:02:b8:44:ee:d9:d2:a5:d5:5d:df:
         98:a2:0c:a4:99:1a:d3:b7:68:e8:83:97:71:d1:d3:42:05:f9:
         d2:dd:07:8b:2f:cc:58:81:ab:d9:e1:85:37:80:6b:81:04:94:
         39:02:0c:e7:6c:0b:d0:1c:04:37:4f:a6:d6:04:fe:c8:1e:56:
         92:73:37:8d:e8:bd:ea:d0:83:35:ec:71:fb:ba:88:e8:08:5d:
         22:5c:d4:a9:22:5b:e6:9b:1d:ec:70:1c:99:8d:3d:bc:48:ec:
         21:36:d1:34:b5:08:53:84:7c:ed:69:f6:ef:6f:fe:ca:39:5b:
         4a:19:7e:63:19:1c:5a:5a:a0:aa:d5:19:e2:b2:21:12:62:4b:
         ae:c0:68:25:72:64:cf:2d:b3:62:e8:59:d2:b2:a0:40:89:9a:
         e8:79:be:02:35:3c:86:d7:63:c6:f7:52:27:89:8d:90:3f:18:
         97:a4:7a:61:e0:b3:a0:2c:03:2b:f4:91:99:64:24:06:8b:90:
         44:5b:47:3e:9b:77:76:5d:68:9e:49:b8:a8:b6:7a:5c:75:f2:
         54:79:29:9b:5a:fa:1d:aa:19:95:b7:3b:07:4a:2e:d6:50:f2:
         0b:10:31:57
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUQp9yMLfIPgToYA30M+onyaYinXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E3RUNCNDZGNTEzRDU0MjUxNEUwNzdFMjY2MjRFNDMx
NTNFN0YyQzAeFw0yNDA1MjgxMzE1MjRaFw0yNTA1MjcxMzIwMjRaMDMxMTAvBgNV
BAMTKDg3ODJDNjUyNzU3QUNFQTk3N0E3RDMwMTI1MzIwMjU0MDhDNzZBNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQxUmCI4+NP/f79pUzO5PXPCH
utxySoNb8g28tKyXXHpz25V5o3f8KYiqDR/qlLObe+EjP3wLgQ9/F7EcxYiO2AVE
u2k+9NKcOhTR793xW9ozosE3FsAvHKjfySibORMNbIrEUEHeyafZsZooHZdWQPUY
9NuWpIeD47ue4k+AktWSVDrj5A6QMUM/BQXb3/AB/lJZ4MZa9S4h93N1NAuJH8LV
2XIfYRqO47+nn4P+R8tgGZ/js3q6CwMq9iXw4v8E2/qWzsbkM1X5d1FfY5BCBwgW
inlBWqu+MtI3mF8MfK+7kBj4PlVN0snrbIEC066QQQYqdYfZHTJHCg3KsEaRAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUh4LGUnV6zql3p9MBJTICVAjHamgwHwYDVR0j
BBgwFoAUen7LRvUT1UJRTgd+JmJOQxU+fywwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMC83QTdFQ0I0NkY1MTNENTQyNTE0RTA3N0UyNjYyNEU0MzE1M0U3RjJD
LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3
NTVjOTFiZTNmOWQvMi83QTdFQ0I0NkY1MTNENTQyNTE0RTA3N0UyNjYyNEU0MzE1
M0U3RjJDLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzALhmVyc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzAvMzI2MTMwNjYzYTM2
MzIzODMwM2EzYTJmMzIzOTJkMzQzODIwM2QzZTIwMzIzMTM2MzEzNTM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA
AjAHAwUDKg9igDANBgkqhkiG9w0BAQsFAAOCAQEARTdZoVoQ/VT2Wb3Qi9d0L1dF
n9fvkxSvCRICuETu2dKl1V3fmKIMpJka07do6IOXcdHTQgX50t0Hiy/MWIGr2eGF
N4BrgQSUOQIM52wL0BwEN0+m1gT+yB5WknM3jei96tCDNexx+7qI6AhdIlzUqSJb
5psd7HAcmY09vEjsITbRNLUIU4R87Wn272/+yjlbShl+YxkcWlqgqtUZ4rIhEmJL
rsBoJXJkzy2zYuhZ0rKgQIma6Hm+AjU8htdjxvdSJ4mNkD8Yl6R6YeCzoCwDK/SR
mWQkBouQRFtHPpt3dl1onkm4qLZ6XHXyVHkpm1r6HaoZlbc7B0ou1lDyCxAxVw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org