Route Origin Authorization

$ rpki-client -vvvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a35303a3a2f34342d3438203d3e20323139303332.roa
File:                     326131343a3763303a35303a3a2f34342d3438203d3e20323139303332.roa (raw, json)
Hash identifier:          P8hhNsyV9BwOf8+LubIrMyrNhCXbxTqzvQGmdwD+f30=
Subject key identifier:   30:B4:C5:03:DB:11:52:9C:54:6F:65:67:49:90:F1:FD:DF:FE:91:49
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       504A8F5AC68572DA9EDDF3DAF0F447D71B39B03F
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a35303a3a2f34342d3438203d3e20323139303332.roa
Signing time:             Mon 19 Oct 2026 19:41:31 +0000
ROA not before:           Mon 19 Oct 2026 19:36:31 +0000
ROA not after:            Mon 18 Oct 2027 19:41:31 +0000
asID:                     219032
IP address blocks:        2a14:7c0:50::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 19:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4a:8f:5a:c6:85:72:da:9e:dd:f3:da:f0:f4:47:d7:1b:39:b0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Oct 19 19:36:31 2026 GMT
            Not After : Oct 18 19:41:31 2027 GMT
        Subject: CN=30B4C503DB11529C546F65674990F1FDDFFE9149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:46:a8:30:a0:92:a5:66:2e:e7:14:d2:3a:
                    86:8d:4a:ae:1a:bf:92:a4:dd:3e:e7:63:3d:8a:81:
                    66:70:78:af:b5:0e:2f:08:78:12:63:50:b6:c6:db:
                    dd:8d:19:81:19:42:59:fa:93:30:47:d0:4f:2b:61:
                    30:85:8d:01:64:62:61:8d:d8:ab:8b:2e:ff:7e:b5:
                    ae:18:2d:f4:93:b6:9f:9c:98:72:38:58:2e:26:a8:
                    c1:34:60:99:8f:dd:83:0b:9b:7b:be:02:77:20:25:
                    8e:bd:a3:5c:49:2e:5f:53:65:0f:90:e2:3a:12:79:
                    4f:af:20:2c:f5:66:ff:c5:a7:0c:b1:a2:2f:70:bf:
                    dc:06:60:3a:6d:55:da:46:13:ad:bd:0a:cd:59:57:
                    6d:40:71:9f:ad:bd:ec:59:ca:a2:2f:e1:bd:f8:6d:
                    6c:73:d6:43:b6:5e:7a:e7:6c:e2:d9:2a:be:ce:c6:
                    11:d1:6c:ef:e4:e8:cf:f5:2b:10:a2:5c:00:13:30:
                    a1:3d:98:ef:80:9c:93:92:4b:7c:bf:62:a9:73:fe:
                    d4:99:3d:b6:a8:23:dd:65:30:d8:4d:d6:75:96:ac:
                    5a:3f:14:e2:48:36:ea:26:b2:00:c7:7b:10:09:2d:
                    a6:7f:f5:9f:39:b6:7d:8e:e8:20:2b:a3:14:ee:b7:
                    9d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B4:C5:03:DB:11:52:9C:54:6F:65:67:49:90:F1:FD:DF:FE:91:49
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a35303a3a2f34342d3438203d3e20323139303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:53:e0:60:5e:96:a7:a4:ae:95:f4:72:74:a5:be:ea:c1:f2:
         d8:f5:7c:1e:04:d9:8a:35:dd:73:02:9a:0b:dd:b0:a2:8f:c0:
         f8:56:ea:63:13:02:41:80:70:c9:5e:9b:51:c3:96:6d:59:a8:
         0d:5d:1f:d9:d0:57:d0:a8:8a:95:7a:a3:e2:c8:91:0d:af:2d:
         2a:5d:3e:b8:6a:35:1f:fe:3a:21:ba:04:33:01:0d:fa:0e:d6:
         bd:77:f0:80:cd:cd:31:4a:08:53:37:2c:65:d5:f3:31:7a:5a:
         67:f5:e1:f4:23:d1:2e:bd:b3:5a:d9:0b:79:37:04:a0:1c:6e:
         56:e6:55:74:78:89:b9:23:8d:0c:e3:46:d5:5b:70:11:2f:f5:
         85:a0:9a:52:be:79:e7:c5:f1:7a:34:89:34:8b:34:39:66:3f:
         13:95:67:3d:ca:ea:a5:21:2f:73:03:46:c1:d1:41:fa:3d:c8:
         55:7a:d8:88:0b:07:d6:97:ec:8f:c9:83:33:95:84:0f:0e:7c:
         3a:88:15:81:ba:b5:39:5f:d3:3e:65:18:c1:1e:14:9d:be:1c:
         61:80:a4:30:53:61:46:ec:14:55:c4:7f:93:f6:13:2a:d9:40:
         ba:3c:9e:80:fa:24:25:f4:62:1a:8e:f7:b7:06:db:c3:6e:81:
         a0:24:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:13 2026 by rpki-client