Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a356530303a3a2f34302d3438203d3e20323131393035.roa
File:                     326131343a3763303a356530303a3a2f34302d3438203d3e20323131393035.roa (raw, json)
Hash identifier:          XxnF7cZij2i6lazve0M9zujc8ACCHa78zzJVMG7fp0c=
Subject key identifier:   99:9F:E3:1A:4F:21:6F:60:1A:36:7D:B3:A4:E0:05:C6:49:E1:BA:31
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       78ED2D52F1EFEDF7A9C423FD8C6EB23297F144DB
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a356530303a3a2f34302d3438203d3e20323131393035.roa
Signing time:             Mon 27 Jul 2026 08:14:59 +0000
ROA not before:           Mon 27 Jul 2026 08:09:59 +0000
ROA not after:            Mon 26 Jul 2027 08:14:59 +0000
asID:                     211905
IP address blocks:        2a14:7c0:5e00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ed:2d:52:f1:ef:ed:f7:a9:c4:23:fd:8c:6e:b2:32:97:f1:44:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Jul 27 08:09:59 2026 GMT
            Not After : Jul 26 08:14:59 2027 GMT
        Subject: CN=999FE31A4F216F601A367DB3A4E005C649E1BA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:98:a9:7c:c7:fb:bc:45:72:5b:29:b6:19:
                    45:62:ec:0a:72:f4:7b:47:50:ec:c4:85:65:89:9c:
                    a3:eb:e3:66:17:d7:af:c4:ea:e7:66:9e:14:5a:50:
                    7e:f5:d1:d7:e8:e4:c5:0a:69:f1:c6:e1:fe:61:90:
                    ab:7d:3e:a1:47:bb:58:5c:dd:d2:d3:d6:5c:09:2f:
                    14:0b:0b:71:7d:c6:fc:ea:e5:90:38:4a:4f:39:c1:
                    56:d3:ef:e7:19:e0:e9:89:aa:82:7a:91:bc:66:c0:
                    0f:b8:e9:ea:de:3d:49:63:30:e7:3b:56:15:fd:a8:
                    6f:af:22:f6:47:a8:38:af:5e:c4:fb:ae:81:64:ea:
                    96:0f:ba:7e:b5:76:ab:7d:06:76:da:d0:3d:b1:18:
                    68:03:a3:fd:be:11:c6:70:a2:6c:7c:c4:0b:9f:dd:
                    cb:24:3b:d9:67:49:42:79:00:6c:02:f3:0a:89:2a:
                    3a:f5:24:df:0e:87:6b:44:60:f9:79:ce:2c:df:b1:
                    9b:0e:7a:04:67:01:ed:e1:36:05:c4:ef:f5:b0:92:
                    25:47:8a:18:cc:69:d7:48:f5:bd:38:d7:98:1b:ee:
                    a1:02:a2:2b:79:cd:c0:50:36:be:c1:80:f4:56:bf:
                    c2:ea:27:3e:ab:2e:69:03:73:e4:0a:fb:ef:35:55:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9F:E3:1A:4F:21:6F:60:1A:36:7D:B3:A4:E0:05:C6:49:E1:BA:31
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a356530303a3a2f34302d3438203d3e20323131393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:5e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:50:31:51:f7:1c:6c:47:2b:5d:85:9f:d2:85:7e:16:e2:da:
         a0:a3:cc:28:d8:26:d4:de:b7:f0:bd:3f:c0:04:ee:a6:1c:71:
         f0:c9:b4:a1:c5:b5:55:4b:1d:1e:bf:91:4f:16:93:75:d1:7b:
         6f:69:3c:d4:ab:31:72:cb:df:ce:a9:2e:86:32:cb:36:65:68:
         52:d9:37:2b:83:c4:e5:55:08:e0:27:1e:e7:32:4d:bb:0e:87:
         c6:bb:bd:ab:14:c9:e4:77:64:d3:5f:87:82:3c:e5:c0:79:a2:
         6e:55:43:33:dd:30:ce:84:4b:aa:dd:5a:53:b5:c8:9b:b0:c1:
         8b:6a:8f:5f:62:32:8f:69:30:15:c4:6f:e9:4b:6b:db:e3:8c:
         c9:b5:1f:42:25:42:b5:78:1f:ba:d9:c4:a7:63:56:b9:cf:20:
         4a:c3:b2:b7:81:70:68:2a:0d:28:49:6b:6e:6d:98:d1:10:a8:
         91:ee:18:8b:6e:89:79:5a:f9:9e:7b:be:fe:fa:db:6e:8a:09:
         1c:93:99:9e:cf:63:fe:e4:5d:2b:4f:47:80:f5:ea:a6:12:23:
         3a:40:6f:0a:f0:9a:3d:7f:12:34:eb:2e:d5:c8:79:8e:d4:ad:
         f2:6e:08:cd:36:48:f7:6c:b8:d4:8f:ab:5e:74:6e:96:07:da:
         ac:6b:67:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:04:08 2026 by rpki-client