Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763373a3a2f33322d3332203d3e203531333936.roa
File:                     326131343a3763373a3a2f33322d3332203d3e203531333936.roa (raw, json)
Hash identifier:          eA7nqlgXDpFjcppjTbrf5lOQR8RjXbBVzYX+lG0hdbs=
Subject key identifier:   BE:8A:82:BC:F2:BC:7A:A7:96:54:FA:AE:62:1A:B2:73:88:36:1C:47
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       2A76A3BAB83F9CFBB5CCACB43C9FD6E29530E4D8
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763373a3a2f33322d3332203d3e203531333936.roa
Signing time:             Fri 29 Aug 2025 12:01:19 +0000
ROA not before:           Fri 29 Aug 2025 11:56:19 +0000
ROA not after:            Fri 28 Aug 2026 12:01:19 +0000
asID:                     51396
IP address blocks:        2a14:7c7::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:76:a3:ba:b8:3f:9c:fb:b5:cc:ac:b4:3c:9f:d6:e2:95:30:e4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Aug 29 11:56:19 2025 GMT
            Not After : Aug 28 12:01:19 2026 GMT
        Subject: CN=BE8A82BCF2BC7AA79654FAAE621AB27388361C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:27:47:52:1c:96:e5:0f:98:1f:8b:7e:dd:5a:
                    74:ca:a3:f9:96:5e:ad:ed:f1:04:a1:fc:3b:35:2c:
                    1e:83:62:15:20:d4:e0:ad:0e:1d:96:3b:0e:77:70:
                    ee:fb:31:1d:16:4b:c9:c9:12:df:64:7e:64:8d:6a:
                    f2:92:73:a3:7d:ef:4a:24:43:ba:d7:37:e6:f0:77:
                    b0:f8:e4:63:08:72:b1:01:f3:91:ef:fe:44:6c:96:
                    7d:50:2c:c8:63:27:4a:47:70:8e:7c:0c:2e:b2:35:
                    c2:92:a9:f2:d3:15:8f:26:36:55:cd:80:f4:7a:ce:
                    41:3c:1f:53:af:5d:ee:e2:11:f2:fd:2c:90:8c:62:
                    9d:7a:50:4f:73:fc:0f:0f:af:b5:d3:8c:1d:75:e9:
                    64:5b:61:43:1f:b5:fd:24:cb:47:e2:d4:27:d9:bc:
                    14:d6:7a:dd:88:cf:31:cd:90:36:f4:ae:dc:a0:43:
                    ea:9a:05:7f:ad:53:8e:26:88:a2:ef:e9:99:5a:91:
                    e8:02:73:a3:cc:eb:8f:93:be:31:7f:f0:0a:0a:c8:
                    9f:1c:89:c2:ae:6f:61:d0:17:14:c0:7f:6d:03:2f:
                    cd:9b:d9:67:84:2f:96:f3:cb:8d:37:28:da:0d:b2:
                    d6:cd:bb:6e:92:e5:dd:1f:27:cb:0b:0a:1b:1b:e7:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8A:82:BC:F2:BC:7A:A7:96:54:FA:AE:62:1A:B2:73:88:36:1C:47
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763373a3a2f33322d3332203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c7::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:47:f4:63:1b:6f:9e:53:69:fa:8b:43:68:35:93:9b:ff:d1:
         bb:07:ec:5e:26:05:db:15:77:f7:52:94:40:91:25:3d:bf:48:
         58:fa:c9:44:45:dd:2d:e3:de:e7:79:60:22:7e:98:eb:e9:d5:
         42:c7:4a:21:7f:b9:e2:5e:01:59:95:4e:79:38:93:c7:6a:96:
         44:cf:4f:32:48:d2:47:eb:d0:bc:f2:cc:24:1d:7c:34:74:de:
         83:6d:d6:8b:9b:aa:03:b7:06:94:ba:8b:39:38:3a:a2:f3:9c:
         22:63:69:3b:d9:65:43:39:62:1d:8f:4c:a7:fe:64:93:fd:27:
         ab:e5:ab:60:2c:eb:c1:db:4f:5d:f8:93:58:fe:a2:c1:a0:58:
         18:11:c4:3c:e4:ef:64:9e:7b:98:e3:35:68:6c:62:74:02:50:
         64:fc:2d:f3:28:dd:c8:f5:26:39:3a:70:9b:f4:ab:ba:d2:94:
         26:23:ac:b6:a2:b8:72:30:c5:c9:3f:23:65:98:f5:d9:19:dd:
         70:92:30:9d:18:13:18:19:52:4e:45:b8:26:64:6b:bf:3d:b4:
         8f:47:b7:3f:eb:2a:a1:46:50:d5:f1:10:1d:37:b2:7a:5d:ea:
         23:b2:40:33:13:c1:6b:8e:91:ba:3a:41:5b:17:53:d5:ba:c2:
         72:a6:68:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----