Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a343830303a3a2f34302d3438203d3e20323139343734.roa
File:                     326131343a3763303a343830303a3a2f34302d3438203d3e20323139343734.roa (raw, json)
Hash identifier:          YdyuTPYmMFLyCGjcSUy7fK8Ggmc0QqZHK5im9rTUTK4=
Subject key identifier:   14:B6:77:85:55:A7:D8:22:34:E8:2F:5F:38:95:EC:38:53:47:D4:2F
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       72CE4117382844EDE5327819B715EE87E637506A
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a343830303a3a2f34302d3438203d3e20323139343734.roa
Signing time:             Wed 10 Jun 2026 19:58:39 +0000
ROA not before:           Wed 10 Jun 2026 19:53:39 +0000
ROA not after:            Wed 09 Jun 2027 19:58:39 +0000
asID:                     219474
IP address blocks:        2a14:7c0:4800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ce:41:17:38:28:44:ed:e5:32:78:19:b7:15:ee:87:e6:37:50:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Jun 10 19:53:39 2026 GMT
            Not After : Jun  9 19:58:39 2027 GMT
        Subject: CN=14B6778555A7D82234E82F5F3895EC385347D42F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:7d:89:20:68:b5:0e:1d:57:50:dc:d3:d4:
                    64:62:8d:ef:a2:b7:fd:48:2e:8c:83:61:88:00:8b:
                    c2:23:a5:33:9e:2b:5d:13:07:60:ba:8b:41:be:68:
                    ae:77:e3:dd:6a:97:3d:4b:01:38:c9:c6:31:98:ca:
                    c9:2d:30:38:98:80:58:93:14:6d:fd:8f:3f:9a:cf:
                    b0:a2:01:c4:e0:6c:db:9d:74:d6:75:29:9b:68:20:
                    b9:ba:e6:f7:67:af:7c:5f:a4:18:d6:44:23:90:b8:
                    52:cf:a6:a9:4e:08:9b:91:7c:b1:79:c7:1c:7a:ea:
                    73:a0:cb:f3:a6:d8:37:1d:4c:b5:89:1a:2b:48:66:
                    b2:10:65:71:c0:c7:9b:7c:a4:08:d1:97:a3:61:5f:
                    22:13:f6:b1:40:e9:e6:46:49:64:e2:3f:f6:d5:bc:
                    75:fc:b4:ba:05:3c:5e:42:ff:b2:86:ca:6a:ca:42:
                    2e:2b:cd:a0:6f:60:06:39:b8:d9:11:64:2d:ae:2b:
                    8c:93:56:39:3b:20:46:4d:cc:e9:3d:d1:c2:1b:53:
                    a3:b2:3c:c8:5b:fd:a2:b2:7c:08:86:15:ad:79:6c:
                    ce:74:97:1d:b4:b4:10:f5:f2:b5:30:e5:84:8b:d4:
                    98:e0:7c:dc:8e:f6:0c:b4:57:33:90:e0:48:65:7b:
                    8e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B6:77:85:55:A7:D8:22:34:E8:2F:5F:38:95:EC:38:53:47:D4:2F
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a343830303a3a2f34302d3438203d3e20323139343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:01:6b:b1:f7:83:f9:26:2e:ae:15:96:ef:cd:39:40:4d:
         02:e8:3a:c1:c3:cb:58:d7:59:c1:d4:9d:f6:e3:4a:48:96:d9:
         5b:99:85:b9:d4:fc:9d:89:53:fd:d1:c8:ff:8b:86:5d:29:4d:
         7e:53:c5:8b:52:1b:5b:96:99:7e:8f:df:9a:91:a7:e5:db:ad:
         e9:b8:8a:0c:3f:96:d6:ac:66:fa:73:5a:25:c1:d3:f3:aa:08:
         4d:5f:06:ec:ec:2d:6d:9d:c6:e2:0c:fa:af:b1:2b:9d:e7:aa:
         03:92:a9:c9:7c:6c:a6:dd:69:4c:d3:e5:9a:fb:13:6e:f8:47:
         72:a9:f4:c6:92:b8:3a:80:1b:26:99:47:7e:3c:26:05:44:66:
         ba:93:e2:78:da:e9:a9:a0:05:fc:3f:16:dd:49:6c:5a:f8:33:
         59:ba:5f:fa:a7:57:8b:c9:a3:8c:ef:71:ff:b9:7e:4c:ff:08:
         94:9c:ed:85:97:16:c7:86:b4:4d:7d:8e:91:23:4d:47:87:29:
         92:60:e2:d8:23:ae:1f:b8:d5:86:12:83:8f:6b:56:34:a1:a9:
         2f:2a:74:9e:c8:48:38:0a:bd:f7:06:ec:f2:69:96:f3:bf:2b:
         23:63:cf:57:f3:8b:ac:87:1e:93:ed:62:c3:da:71:55:18:b3:
         c3:02:97:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:28:26 2026 by rpki-client