Route Origin Authorization

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/5/3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa
File:                     3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa (raw, json)
Hash identifier:          1wmjrENM/HFytQhOpXDk97HzEcXML4J8nZNxJTfhj1c=
Subject key identifier:   19:F7:7C:01:A4:1A:45:BB:72:2C:E5:FE:51:37:F3:2C:0C:26:3E:0A
Certificate issuer:       /CN=FA21395618BA2BB8D215B90F684562C4FCD86DF6
Certificate serial:       26816D69FB1DE79BEF4F78BC7C5BD2FBB60A694C
Authority key identifier: FA:21:39:56:18:BA:2B:B8:D2:15:B9:0F:68:45:62:C4:FC:D8:6D:F6
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/5/3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa
Signing time:             Tue 11 Aug 2026 17:54:18 +0000
ROA not before:           Tue 11 Aug 2026 17:49:18 +0000
ROA not after:            Tue 10 Aug 2027 17:54:18 +0000
asID:                     13527
IP address blocks:        138.185.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.crl
                          rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D7299CFEA8B3399EB248FA68518B6862CE2E88F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 10:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:81:6d:69:fb:1d:e7:9b:ef:4f:78:bc:7c:5b:d2:fb:b6:0a:69:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA21395618BA2BB8D215B90F684562C4FCD86DF6
        Validity
            Not Before: Aug 11 17:49:18 2026 GMT
            Not After : Aug 10 17:54:18 2027 GMT
        Subject: CN=19F77C01A41A45BB722CE5FE5137F32C0C263E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:d4:72:c1:d5:8b:1e:0b:d5:7c:af:04:5b:
                    49:fc:aa:18:5f:18:e3:e7:a2:af:1b:01:da:05:b0:
                    b4:eb:a3:a1:56:c0:07:2a:3e:03:e1:dc:11:18:a2:
                    e7:5f:a4:a8:db:fd:8d:e4:f9:52:1a:c8:c7:f1:dd:
                    d9:d0:f2:7c:85:c5:d4:bd:41:2d:51:8e:59:0e:92:
                    cf:58:32:c4:21:cf:d8:b3:bf:c5:14:20:ed:b2:64:
                    aa:5d:cc:80:70:b3:a7:32:eb:91:06:c9:02:eb:53:
                    52:5a:7e:4c:a5:2a:ff:71:ac:90:c4:c7:b1:ee:38:
                    65:3b:8c:13:71:ca:da:e7:8b:a8:43:a2:b5:6a:59:
                    5d:ca:ad:da:ed:d8:48:eb:f9:1f:3c:1b:65:19:76:
                    6b:96:7c:51:36:52:75:d3:6c:07:f5:96:3d:92:ff:
                    29:1d:f3:ee:93:42:7a:36:bd:16:42:c6:ac:c1:c1:
                    83:4a:b5:6f:35:c4:e2:52:2a:8d:fd:08:ed:ca:00:
                    36:20:ab:d0:f1:71:b3:a4:97:46:4e:c2:92:7d:2b:
                    22:7a:40:aa:04:05:25:66:1f:69:ed:ee:82:88:9e:
                    80:34:10:5c:3f:c9:51:9d:58:49:f0:06:68:b5:70:
                    44:4c:01:6d:7f:3f:b9:32:3d:46:e4:4c:1f:0a:8e:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:7C:01:A4:1A:45:BB:72:2C:E5:FE:51:37:F3:2C:0C:26:3E:0A
            X509v3 Authority Key Identifier:
                keyid:FA:21:39:56:18:BA:2B:B8:D2:15:B9:0F:68:45:62:C4:FC:D8:6D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/5/FA21395618BA2BB8D215B90F684562C4FCD86DF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/2/FA21395618BA2BB8D215B90F684562C4FCD86DF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/5/3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:25:7d:74:7b:27:6e:4e:99:fc:ca:08:8a:fc:9a:fa:38:fb:
         97:71:55:c9:6a:ab:5e:cc:24:b8:c9:17:ab:c7:28:4d:6e:c4:
         4c:d4:f7:f1:4a:be:be:d3:f7:5d:47:23:e8:7b:29:52:43:d0:
         9b:c3:75:6b:91:f0:2e:c9:24:83:42:28:d7:7f:d0:b4:df:37:
         90:73:a6:ce:3a:71:36:6a:17:d3:78:78:2f:98:dd:d4:ee:fa:
         8c:20:d1:ba:62:e2:12:1f:fb:d0:b5:44:c6:29:7c:62:f3:eb:
         f5:d2:11:88:8e:2e:89:3f:ed:b9:51:60:75:fd:1f:9e:35:4c:
         b0:06:28:f3:d8:00:3a:82:ac:df:72:56:29:6d:62:71:f3:13:
         49:40:2b:9b:25:24:15:b5:6e:b3:e6:df:ea:bb:e8:de:f3:6b:
         db:f3:44:49:0a:fc:f2:e4:38:7c:5f:07:c8:3a:1c:a9:57:8d:
         ee:83:c5:0a:43:cf:1a:35:93:1f:91:e1:88:c1:d8:e0:24:85:
         34:c3:96:7f:07:96:fa:17:44:46:dd:3c:b6:c6:fd:16:fa:d6:
         95:48:fc:de:fa:e7:c3:37:08:56:58:24:4a:5e:8d:3e:1a:97:
         e5:b0:f7:54:af:ff:16:53:15:9a:3d:8a:7e:64:5a:d9:03:10:
         ea:23:44:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:47:42 2026 by rpki-client