Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa
File:                     326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (raw, json)
Hash identifier:          sgRTwSyhVCQpHRZOTXhgdGYd5BzW5V4pFBW18sNeqlE=
Subject key identifier:   FC:3B:75:BC:25:6F:F3:60:37:FE:E6:57:F3:6A:C4:5F:62:D4:3F:A6
Certificate issuer:       /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial:       56526C55F646B9445E46B4392C7A404472722A2C
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa
Signing time:             Sat 14 Jun 2025 19:19:30 +0000
ROA not before:           Sat 14 Jun 2025 19:14:30 +0000
ROA not after:            Sat 13 Jun 2026 19:19:30 +0000
asID:                     215365
IP address blocks:        2a14:7c0:1000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
                          rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:52:6c:55:f6:46:b9:44:5e:46:b4:39:2c:7a:40:44:72:72:2a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
        Validity
            Not Before: Jun 14 19:14:30 2025 GMT
            Not After : Jun 13 19:19:30 2026 GMT
        Subject: CN=FC3B75BC256FF36037FEE657F36AC45F62D43FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:03:49:ea:4e:21:4d:2d:77:dc:2d:83:9d:63:
                    eb:3a:34:9c:f3:8c:31:45:be:81:77:e9:75:d9:c2:
                    2d:6e:1f:8e:11:e4:cf:a3:ec:ff:b8:28:92:ed:54:
                    9d:f4:63:54:56:1a:2d:a1:2a:d2:c0:f1:1d:06:93:
                    e3:4c:ae:98:9b:a6:c6:e8:89:09:93:c7:3d:3c:b6:
                    c0:83:88:88:a8:56:be:f1:01:6c:bb:45:06:ce:90:
                    e8:2e:8f:e2:6f:30:98:48:4f:b7:10:d9:c2:d2:a9:
                    a6:d7:7e:0c:82:47:b2:ac:ad:30:3d:b4:5a:a7:d1:
                    98:af:cc:41:0e:f9:d9:d1:b2:e5:04:e1:bb:26:00:
                    d7:c8:84:db:54:53:3a:91:c8:81:0e:88:1d:73:1c:
                    cc:1c:73:78:98:96:0e:5d:9d:76:f5:02:08:a5:7a:
                    86:4f:b6:d9:6f:d5:60:e7:66:f5:22:3a:2b:07:c2:
                    cf:b5:aa:55:e6:55:73:1b:3c:e8:6c:1d:6c:16:60:
                    58:77:01:4a:23:d5:6e:bd:85:31:b4:70:db:71:6b:
                    90:7d:2f:86:fc:84:4c:e2:54:d2:73:56:8b:8a:6a:
                    59:79:73:3c:b9:ee:4a:ae:d6:fd:e0:dc:c9:66:28:
                    d8:6d:b8:48:ea:69:72:8c:33:23:4c:c0:98:02:e9:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3B:75:BC:25:6F:F3:60:37:FE:E6:57:F3:6A:C4:5F:62:D4:3F:A6
            X509v3 Authority Key Identifier:
                keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1000::/38

    Signature Algorithm: sha256WithRSAEncryption
         86:eb:53:f8:6b:f9:97:f3:a3:2d:0c:9a:fc:e1:ce:e2:88:f9:
         3a:23:12:c1:ca:6c:73:ad:22:2f:de:b9:cf:3d:40:d5:f9:7a:
         06:38:d4:07:99:e2:6f:85:eb:68:e4:5f:ac:86:5d:ed:a6:d2:
         a8:43:c4:83:6c:74:e5:91:76:0b:bf:1a:b4:95:5f:5d:76:a9:
         9b:30:dc:1b:33:d5:64:23:b5:a3:1a:92:bf:1a:a5:b9:40:c2:
         55:74:94:4d:c1:e7:c2:d6:1b:5b:49:4d:01:ae:15:2b:fc:3a:
         e5:ba:69:a0:58:4d:f7:da:9a:e5:53:cc:ab:f2:ce:f6:44:ad:
         67:3a:1a:4e:4f:8c:01:ff:8e:2d:90:f6:5f:3d:aa:a5:9b:3a:
         55:62:cf:d7:11:68:a4:13:d5:55:29:60:83:b0:81:f4:e8:33:
         6e:d1:47:d4:ff:32:40:80:e9:ad:f3:9f:a4:a7:44:6d:09:0d:
         9e:23:0b:8f:f0:ee:ab:69:f2:e5:84:e1:19:fc:33:aa:03:2e:
         93:c7:36:0f:db:3a:c8:74:01:bf:e8:be:4f:f5:71:05:8c:a5:
         2b:55:ec:4b:4e:14:3b:73:29:84:3a:18:0f:80:4d:74:26:03:
         a8:5d:14:3f:4f:81:2c:7e:e5:6c:5c:cc:51:e6:d4:04:6c:f2:
         25:3b:6c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:18:44 2025 by rpki-client