Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
File:                     326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa (raw, json)
Hash identifier:          MPR5bA9gNpyTmdLHuMEHfYiMIk6mfC2LWbO7jcnobvo=
Subject key identifier:   FC:90:E0:63:2F:5B:14:07:5A:7C:4A:78:4B:8F:01:BA:B1:42:B8:10
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       64BBDE2E6B59184E7F498DCAD01F6D5116354270
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa
Signing time:             Sat 08 Jun 2024 21:02:50 +0000
ROA not before:           Sat 08 Jun 2024 20:57:50 +0000
ROA not after:            Sat 07 Jun 2025 21:02:50 +0000
asID:                     214775
IP address blocks:        2a14:7c0:4d00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bb:de:2e:6b:59:18:4e:7f:49:8d:ca:d0:1f:6d:51:16:35:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Jun  8 20:57:50 2024 GMT
            Not After : Jun  7 21:02:50 2025 GMT
        Subject: CN=FC90E0632F5B14075A7C4A784B8F01BAB142B810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:4d:29:e5:48:fc:8a:fc:99:bf:8a:0e:ad:
                    52:e4:c4:fa:b7:51:d4:fe:42:f5:da:5d:f2:99:28:
                    21:a6:6c:57:ca:94:94:3f:62:f7:70:dd:0f:fd:a9:
                    b8:3f:d4:89:02:2f:2d:69:05:04:bd:d9:33:bb:df:
                    12:cd:18:27:01:b9:81:7d:1f:b2:2f:fb:c3:13:1e:
                    3d:a4:15:ab:51:46:3e:24:68:f0:f6:73:e6:c4:de:
                    b5:d1:ec:17:59:25:9f:d5:a4:31:59:c2:d3:30:6a:
                    7b:4f:91:11:f1:44:61:1c:c5:d4:0e:bc:6e:27:cc:
                    4c:9b:a1:13:e6:6d:5c:0c:54:72:6d:27:22:bb:15:
                    19:19:00:ed:b2:13:ae:71:48:08:65:1f:8f:b3:f9:
                    fc:46:ad:76:5c:b7:41:3c:d2:de:74:64:2e:00:00:
                    0d:75:cc:e5:ef:18:01:0e:24:e7:6c:52:24:0b:80:
                    5e:ab:8a:f7:6a:35:3a:73:e5:44:b5:6f:c6:26:c5:
                    ae:e4:5e:eb:e4:6b:c5:f7:32:11:31:4b:79:c3:c8:
                    68:26:95:b8:0a:8b:2e:1d:42:5d:de:40:b7:e9:47:
                    f1:e7:f2:b0:d9:9c:ae:8c:e0:06:5e:ea:89:34:43:
                    25:22:ee:f4:57:ce:66:89:79:5c:ef:2c:2d:47:37:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:90:E0:63:2F:5B:14:07:5A:7C:4A:78:4B:8F:01:BA:B1:42:B8:10
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346430303a3a2f34302d3438203d3e20323134373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:4d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:b0:49:e7:04:8e:3c:43:f3:dc:b0:65:84:88:72:85:d1:71:
         94:bd:41:fc:9a:91:65:a3:0c:f4:0d:f5:b5:b2:65:94:1e:8a:
         22:8a:58:0b:a1:5f:ec:52:74:50:7a:95:7f:b2:75:68:73:94:
         42:7e:a6:f3:90:93:79:59:db:f4:95:14:12:9f:0f:7a:ab:69:
         59:7d:82:0c:d4:e8:fe:4f:4b:28:dc:95:4b:7e:97:03:73:eb:
         75:fa:37:68:db:c9:85:09:cf:13:46:17:1b:48:12:eb:4e:d2:
         45:29:38:f5:3f:4d:75:3e:ff:60:ec:b5:f9:6f:2a:f5:2d:12:
         02:a8:50:f6:ac:2a:57:2b:3f:b6:89:93:2a:0e:c7:2a:30:01:
         47:26:a0:d4:7f:04:76:01:1a:12:3d:41:b1:b5:57:20:7f:c1:
         cd:e5:b2:ff:39:0d:99:5c:92:20:d1:ed:75:2e:61:6e:26:a6:
         5b:bd:69:20:b8:9a:49:45:bb:0f:af:28:f3:9f:fb:43:ed:c2:
         e2:1c:65:63:27:f4:55:64:6d:87:75:80:6f:37:22:56:a9:1d:
         96:15:1f:c4:e6:0c:b2:a7:e0:1b:a2:c8:55:00:ff:6f:b1:6a:
         44:1f:c0:de:18:06:78:70:00:17:af:81:92:c4:94:34:de:62:
         fc:95:c1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----