Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763313a3a2f33322d3438203d3e203531333936.roa
File:                     326131343a3763313a3a2f33322d3438203d3e203531333936.roa (raw, json)
Hash identifier:          ruOyii3jScWzPQpP5A2+VL6xUAILE+YAYlkt1DZmKZQ=
Subject key identifier:   10:57:C2:11:04:27:75:4E:97:1A:38:BD:07:D2:9A:55:73:B5:BF:87
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       06309542AC976AFFCE1D97D343F16E32958F9569
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763313a3a2f33322d3438203d3e203531333936.roa
Signing time:             Mon 27 Jul 2026 08:15:00 +0000
ROA not before:           Mon 27 Jul 2026 08:10:00 +0000
ROA not after:            Mon 26 Jul 2027 08:15:00 +0000
asID:                     51396
IP address blocks:        2a14:7c1::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:30:95:42:ac:97:6a:ff:ce:1d:97:d3:43:f1:6e:32:95:8f:95:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Jul 27 08:10:00 2026 GMT
            Not After : Jul 26 08:15:00 2027 GMT
        Subject: CN=1057C2110427754E971A38BD07D29A5573B5BF87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b1:a8:90:47:78:1f:96:21:e5:4b:76:9a:ae:
                    6d:91:4e:a7:9f:3f:20:2f:4d:cc:85:ad:83:61:0c:
                    80:67:ad:75:18:61:d3:30:9a:63:f0:7d:8f:87:12:
                    df:cb:72:73:f3:31:9a:0c:bc:5a:9f:67:b1:46:6e:
                    0d:5b:55:37:fb:b7:f4:18:95:67:c0:47:cd:76:8e:
                    0c:74:a8:90:e4:a3:94:06:65:b5:9c:de:b0:0b:42:
                    2a:8b:bc:b5:63:8f:66:ab:8a:3e:a2:70:1d:7f:2a:
                    b0:aa:5c:28:10:65:01:62:07:05:51:e8:fb:63:43:
                    0f:13:2e:8e:95:5a:68:8e:6a:65:53:f0:2e:b7:90:
                    a4:3c:f3:fb:13:ed:b0:6c:95:98:30:d4:ec:12:a6:
                    26:72:26:c6:95:c7:55:b4:b2:96:0e:46:03:0b:46:
                    ed:f0:77:10:da:d2:e3:c4:79:27:24:ed:9e:02:25:
                    7f:fb:27:a5:4d:95:a6:00:5c:0c:86:17:61:a5:1e:
                    d3:a6:07:13:36:9a:6f:cc:9b:64:75:b9:c8:25:6a:
                    06:40:0f:fc:39:1b:e6:ae:28:8e:63:c5:b8:f3:00:
                    1a:68:11:92:96:cb:13:d7:b4:04:eb:f0:8e:38:f0:
                    16:c7:15:b1:2b:51:87:12:f9:9b:bf:e6:eb:b6:3f:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:57:C2:11:04:27:75:4E:97:1A:38:BD:07:D2:9A:55:73:B5:BF:87
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763313a3a2f33322d3438203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:a4:02:e4:cc:18:9f:04:b3:33:b6:97:d9:a1:cd:44:49:
         ac:ca:af:67:a3:db:6f:64:82:72:9c:0b:06:1f:9d:80:55:b4:
         c4:69:82:09:15:7f:c3:99:9a:3f:d0:23:25:d6:76:8c:a1:63:
         69:8b:98:1f:11:c6:a6:08:56:a2:f8:53:f1:12:43:aa:31:f0:
         c5:cb:66:69:32:a1:8a:15:7d:8a:13:99:15:4e:94:6b:c0:9e:
         c4:41:23:ec:d2:5e:e4:e6:ca:e9:4e:f2:97:07:78:f9:8b:6c:
         42:17:5c:bd:e6:60:e1:39:a4:b4:b9:01:40:51:60:37:8b:3a:
         94:4e:0a:6a:dc:5a:0b:c7:be:80:fa:80:4e:5d:9b:d5:e4:bc:
         ad:d8:77:44:7a:c7:5c:6c:5d:9b:43:be:8e:b4:00:34:57:72:
         92:57:73:c0:c2:1e:6f:58:f4:f6:4d:ed:b2:e6:f1:7d:1b:71:
         24:86:5d:7e:90:9f:b8:eb:fa:31:b5:56:e2:31:2c:6f:b2:4d:
         55:0b:38:f4:ed:62:ad:81:c9:42:af:61:af:49:0b:3a:6e:1b:
         b4:86:a1:cc:75:6f:9a:ae:23:32:20:d1:b5:20:ed:47:7a:25:
         04:dd:4b:e8:fc:ce:93:6b:0a:2f:70:4d:a0:8b:1b:0f:c5:cc:
         0d:83:f6:a2
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUBjCVQqyXav/OHZfTQ/FuMpWPlWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNjA3MjcwODEwMDBaFw0yNzA3MjYwODE1MDBaMDMxMTAvBgNV
BAMTKDEwNTdDMjExMDQyNzc1NEU5NzFBMzhCRDA3RDI5QTU1NzNCNUJGODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXsaiQR3gfliHlS3aarm2RTqef
PyAvTcyFrYNhDIBnrXUYYdMwmmPwfY+HEt/LcnPzMZoMvFqfZ7FGbg1bVTf7t/QY
lWfAR812jgx0qJDko5QGZbWc3rALQiqLvLVjj2arij6icB1/KrCqXCgQZQFiBwVR
6PtjQw8TLo6VWmiOamVT8C63kKQ88/sT7bBslZgw1OwSpiZyJsaVx1W0spYORgML
Ru3wdxDa0uPEeSck7Z4CJX/7J6VNlaYAXAyGF2GlHtOmBxM2mm/Mm2R1ucglagZA
D/w5G+auKI5jxbjzABpoEZKWyxPXtATr8I448BbHFbErUYcS+Zu/5uu2P2G3AgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQUEFfCEQQndU6XGji9B9KaVXO1v4cwHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5jOi8v
cmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS8zMjYxMzEzNDNhMzc2
MzMxM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzUzMTMzMzkzNi5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
ACoUB8EwDQYJKoZIhvcNAQELBQADggEBAIQfpALkzBifBLMztpfZoc1ESazKr2ej
229kgnKcCwYfnYBVtMRpggkVf8OZmj/QIyXWdoyhY2mLmB8RxqYIVqL4U/ESQ6ox
8MXLZmkyoYoVfYoTmRVOlGvAnsRBI+zSXuTmyulO8pcHePmLbEIXXL3mYOE5pLS5
AUBRYDeLOpROCmrcWgvHvoD6gE5dm9XkvK3Yd0R6x1xsXZtDvo60ADRXcpJXc8DC
Hm9Y9PZN7bLm8X0bcSSGXX6Qn7jr+jG1VuIxLG+yTVULOPTtYq2ByUKvYa9JCzpu
G7SGocx1b5quIzIg0bUg7Ud6JQTdS+j8zpNrCi9wTaCLGw/FzA2D9qI=
-----END CERTIFICATE-----