Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763313a3a2f33322d3332203d3e20323135353331.roa
File:                     326131343a3763313a3a2f33322d3332203d3e20323135353331.roa (raw, json)
Hash identifier:          p0+lkV2a3DR4LYNx71sp2x153JOKHGtMit1ZjaorGts=
Subject key identifier:   0B:8B:99:DE:93:8A:36:06:1A:68:FE:43:46:11:E2:2D:2C:13:EC:23
Certificate issuer:       /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
Certificate serial:       53A0A1444EA7C098973D645E7CAC0B487470F780
Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763313a3a2f33322d3332203d3e20323135353331.roa
Signing time:             Tue 29 Apr 2025 18:19:20 +0000
ROA not before:           Tue 29 Apr 2025 18:14:20 +0000
ROA not after:            Tue 28 Apr 2026 18:19:20 +0000
asID:                     215531
IP address blocks:        2a14:7c1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl
                          rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Jun 2025 18:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a0:a1:44:4e:a7:c0:98:97:3d:64:5e:7c:ac:0b:48:74:70:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
        Validity
            Not Before: Apr 29 18:14:20 2025 GMT
            Not After : Apr 28 18:19:20 2026 GMT
        Subject: CN=0B8B99DE938A36061A68FE434611E22D2C13EC23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:07:8e:05:a5:69:88:ff:e5:3e:a5:1a:ed:
                    5d:60:80:b7:e5:c5:81:a8:43:18:fe:7f:4c:db:41:
                    8e:b5:76:ab:7c:1c:7c:a8:40:46:d2:b3:5f:1c:a6:
                    9a:9d:78:aa:f1:fa:df:c6:72:88:90:0f:a9:c3:33:
                    9b:f0:df:db:47:77:76:31:f1:2c:ac:ab:9a:01:02:
                    0b:01:19:a6:77:c4:15:e3:74:72:d9:4b:a7:31:c4:
                    4a:5c:0d:16:09:8f:9f:47:36:08:af:3e:0c:00:af:
                    0a:1c:7e:8b:9d:a6:b5:4f:cf:12:40:cf:31:b6:bf:
                    e5:ee:62:cf:99:ce:8e:bb:6f:8b:08:e9:be:5e:5e:
                    7b:fd:2b:2c:72:01:b1:4b:fd:20:6d:67:3e:7f:56:
                    e4:90:4e:8c:23:17:68:8f:8e:f4:a7:4a:52:0a:56:
                    3b:ae:51:d0:de:2e:47:61:89:65:68:e3:d1:29:c2:
                    d2:cd:2f:74:62:24:cf:3b:02:51:f2:c0:34:8b:09:
                    e6:c8:f1:ab:d5:63:b1:1a:59:b9:e3:29:f0:b0:58:
                    53:0f:d2:44:fd:42:a8:6c:14:a1:4c:40:50:67:fe:
                    de:a9:60:36:8b:a5:8f:a3:53:a1:b0:d5:e9:00:38:
                    4d:ec:b6:06:c5:8e:9f:80:c5:7c:e6:8f:60:b6:a8:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8B:99:DE:93:8A:36:06:1A:68:FE:43:46:11:E2:2D:2C:13:EC:23
            X509v3 Authority Key Identifier:
                keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763313a3a2f33322d3332203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:4d:cb:30:ab:2d:0c:c6:db:53:06:2b:47:d3:ff:19:62:
         53:1a:5f:67:16:8b:1d:49:ad:05:9e:09:8c:d5:35:36:f5:8f:
         1a:1e:48:1f:5e:ce:dd:7b:bb:55:a6:7f:34:28:8c:a2:58:cf:
         36:4e:e6:66:c5:d6:f8:1b:72:de:57:10:65:81:b0:59:8a:35:
         89:96:1d:d1:6b:59:53:12:04:0b:d8:db:75:c0:3f:ee:83:d7:
         be:18:34:0b:1e:e2:04:28:2e:f2:22:a0:e1:df:56:d3:43:22:
         5a:ed:60:91:5b:d2:03:58:ee:95:87:91:50:45:a2:fe:5b:ea:
         7f:16:6a:82:76:9e:3a:03:42:1b:4a:57:85:5e:ed:5a:86:11:
         65:72:1e:0b:cd:c8:46:8c:1b:72:7f:31:51:7a:53:d3:e6:68:
         53:a2:3b:0d:46:bf:16:1e:05:5e:47:3e:e3:f0:ad:d5:f0:4c:
         dc:3c:c9:96:d2:51:49:a5:20:0d:42:3f:f8:6f:dd:c0:52:63:
         52:3d:f5:65:85:d1:c4:17:22:4c:d1:3d:ac:7e:c0:7a:d9:ae:
         1c:5c:8a:d7:9a:4d:0c:eb:ae:56:52:99:6c:4f:6c:33:87:99:
         1d:16:58:6f:a8:5a:91:57:97:09:e3:8e:02:46:98:ab:c0:17:
         9a:15:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:10:19 2025 by rpki-client