Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363230303a3a2f33392d3438203d3e20313939303532.roa
File:                     326131343a3763303a363230303a3a2f33392d3438203d3e20313939303532.roa (raw, json)
Hash identifier:          GUb/atZLyhqX2giWFndEYqpKF8nddgqw4asc/+BeuUk=
Subject key identifier:   C7:0C:2F:E3:C1:62:DC:83:D4:3E:4B:F9:79:C6:F8:A1:1B:68:11:83
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       7962DD933A91D32E298DF5D9AFB992CB495F1E79
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363230303a3a2f33392d3438203d3e20313939303532.roa
Signing time:             Mon 25 Aug 2025 07:38:20 +0000
ROA not before:           Mon 25 Aug 2025 07:33:20 +0000
ROA not after:            Mon 24 Aug 2026 07:38:20 +0000
asID:                     199052
IP address blocks:        2a14:7c0:6200::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:62:dd:93:3a:91:d3:2e:29:8d:f5:d9:af:b9:92:cb:49:5f:1e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Aug 25 07:33:20 2025 GMT
            Not After : Aug 24 07:38:20 2026 GMT
        Subject: CN=C70C2FE3C162DC83D43E4BF979C6F8A11B681183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:47:78:14:9c:3d:7d:15:ba:b4:d2:a0:3f:
                    eb:50:ae:54:a8:34:d7:90:49:85:0b:b1:0d:1b:b9:
                    a7:9a:28:57:f1:dd:95:cf:4b:bf:19:69:35:54:2a:
                    5c:5c:d6:cf:93:c6:64:5e:d5:10:0c:e0:cb:f4:68:
                    7a:d6:e9:bf:c5:36:8b:da:2c:f3:90:93:88:3a:69:
                    ab:d8:c1:1c:2c:74:da:7b:68:07:d1:00:99:43:b6:
                    8a:9d:01:06:fd:57:02:23:0a:4c:a2:8d:d9:db:dc:
                    1e:61:62:97:77:ef:3a:d1:27:4c:86:08:3f:4d:3c:
                    f5:ac:5a:33:13:e5:b3:19:f9:66:aa:68:c8:14:18:
                    4f:2f:90:90:c0:54:f7:fa:dc:5f:e9:40:ec:88:17:
                    9f:f6:ff:5e:d6:5f:ae:96:a6:51:ff:97:89:ff:18:
                    37:8f:9b:3c:0b:c5:a8:1d:e7:db:78:82:0b:e9:60:
                    8a:ef:2f:e0:1d:0c:d8:72:59:b4:db:0f:c3:e1:09:
                    86:46:f7:1a:63:8f:0a:4e:8d:37:ce:6e:5d:7a:35:
                    d7:c7:b4:9c:80:74:2d:fd:7c:37:98:13:3a:d5:d0:
                    d0:c9:a7:b3:b9:a6:b3:ba:fe:23:21:69:0c:44:90:
                    d8:e8:16:f7:92:be:d6:11:15:0e:4b:a6:e3:ce:7c:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0C:2F:E3:C1:62:DC:83:D4:3E:4B:F9:79:C6:F8:A1:1B:68:11:83
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363230303a3a2f33392d3438203d3e20313939303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:6200::/39

    Signature Algorithm: sha256WithRSAEncryption
         06:40:bd:c8:4b:b0:51:d6:a5:5e:21:b2:60:37:86:c4:fd:98:
         61:c9:46:db:5a:77:8e:2e:87:52:b0:b6:bf:22:71:23:a9:97:
         e6:57:eb:a6:b4:ce:a4:fc:e6:a8:97:62:92:64:61:44:dc:61:
         a7:45:c0:5d:43:fd:87:1a:95:f1:d3:9a:36:98:67:f0:34:52:
         55:45:8f:c5:83:4e:b8:4b:ba:72:86:0d:94:a7:39:81:cd:d2:
         2e:b1:e8:bf:38:a9:c8:87:42:80:7e:7e:16:9f:f1:22:e1:3f:
         4a:05:b2:7d:c2:37:71:cf:28:16:73:9b:fe:e8:fd:74:1e:df:
         59:69:33:0f:cf:10:fe:2e:43:32:67:75:ad:e8:80:f5:ad:dc:
         48:06:e2:78:c8:59:0d:5b:f9:68:0c:ed:b6:34:9c:21:43:c5:
         29:75:a6:70:96:4a:21:b5:bc:d0:45:3c:b3:88:b6:5d:e6:62:
         e1:78:e7:16:21:99:a9:09:13:c2:bd:f7:61:b7:73:15:ec:4b:
         20:22:6a:d3:a8:ec:2e:a8:bf:81:9f:41:3f:86:c8:ee:80:a4:
         9a:66:e8:94:02:63:c5:7e:77:c9:1a:f9:4f:e3:5c:a9:68:7e:
         a0:22:d2:e2:dc:8f:26:e6:fe:5d:5b:58:c9:49:a0:ef:14:1e:
         a3:61:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----