Route Origin Authorization

$ rpki-client -vvvf rpki.as219412.net/repo/axel-vir/1/326130643a643930343a633130303a3a2f34342d3434203d3e20323138373538.roa
File:                     326130643a643930343a633130303a3a2f34342d3434203d3e20323138373538.roa (raw, json)
Hash identifier:          kgU4htAll1xYANRg7OM0+aLovDYzbV6/VsYUGy9/GuU=
Subject key identifier:   59:AD:75:B5:1B:D1:CC:4C:49:23:85:C3:91:BC:63:06:AE:43:D0:0B
Certificate issuer:       /CN=31D88CB143D07059AA4AFB0F208630E599269338
Certificate serial:       23715F4E1BD84C752432ABB0ECB6E09E927E2B6E
Authority key identifier: 31:D8:8C:B1:43:D0:70:59:AA:4A:FB:0F:20:86:30:E5:99:26:93:38
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/31D88CB143D07059AA4AFB0F208630E599269338.cer
Subject info access:      rsync://rpki.as219412.net/repo/axel-vir/1/326130643a643930343a633130303a3a2f34342d3434203d3e20323138373538.roa
Signing time:             Mon 19 Oct 2026 21:25:35 +0000
ROA not before:           Mon 19 Oct 2026 21:20:35 +0000
ROA not after:            Mon 18 Oct 2027 21:25:35 +0000
asID:                     218758
IP address blocks:        2a0d:d904:c100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.as219412.net/repo/axel-vir/1/31D88CB143D07059AA4AFB0F208630E599269338.crl
                          rsync://rpki.as219412.net/repo/axel-vir/1/31D88CB143D07059AA4AFB0F208630E599269338.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/31D88CB143D07059AA4AFB0F208630E599269338.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 03:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:71:5f:4e:1b:d8:4c:75:24:32:ab:b0:ec:b6:e0:9e:92:7e:2b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31D88CB143D07059AA4AFB0F208630E599269338
        Validity
            Not Before: Oct 19 21:20:35 2026 GMT
            Not After : Oct 18 21:25:35 2027 GMT
        Subject: CN=59AD75B51BD1CC4C492385C391BC6306AE43D00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:95:2f:3e:6b:d9:e6:10:34:eb:d1:dd:a1:
                    b6:0b:08:88:c3:f4:82:d8:58:4a:fc:b6:c9:3b:50:
                    e8:a3:38:74:84:57:7e:df:db:c7:92:dd:11:56:ce:
                    08:dd:8d:01:da:88:04:e6:29:1c:5a:97:50:3a:91:
                    74:95:3e:94:a8:7a:b9:a2:6b:60:c6:3b:03:9f:0d:
                    43:a0:6e:dd:e7:47:07:ff:b3:37:1f:f6:b4:1b:c5:
                    50:11:95:2b:19:65:c5:5f:67:10:08:b6:62:cf:3b:
                    3e:b0:ff:8d:f0:2b:8c:e5:f9:75:74:3a:c1:51:73:
                    e9:d0:cc:3a:bb:a9:04:b9:74:04:6b:aa:2e:84:73:
                    38:bb:40:18:90:4c:df:12:16:fd:60:30:12:69:d7:
                    44:0b:d7:7c:1d:90:6b:0e:1b:80:32:b1:c6:9d:d7:
                    8a:ee:01:ce:87:e6:a3:f9:6f:0a:55:0f:a3:be:8a:
                    98:9c:a6:b7:a4:b8:df:00:e2:bf:ba:b7:05:9b:9d:
                    bf:bc:70:a5:a3:5c:fb:8f:32:31:e7:49:1e:ee:d8:
                    d8:c0:71:fd:73:1a:73:c2:b5:1f:2e:61:63:b2:ae:
                    ce:f9:41:6a:33:d0:8d:95:bc:49:e8:11:07:c1:d7:
                    37:a2:cd:c4:6b:97:e7:9f:1d:6a:23:16:30:c2:db:
                    21:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AD:75:B5:1B:D1:CC:4C:49:23:85:C3:91:BC:63:06:AE:43:D0:0B
            X509v3 Authority Key Identifier:
                keyid:31:D8:8C:B1:43:D0:70:59:AA:4A:FB:0F:20:86:30:E5:99:26:93:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.as219412.net/repo/axel-vir/1/31D88CB143D07059AA4AFB0F208630E599269338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/31D88CB143D07059AA4AFB0F208630E599269338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.as219412.net/repo/axel-vir/1/326130643a643930343a633130303a3a2f34342d3434203d3e20323138373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:d904:c100::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:06:ed:cb:35:72:a7:c3:a3:5a:90:71:a1:df:f5:cc:82:f3:
         46:54:ab:61:e6:f8:23:9e:7b:f9:b9:d9:5f:18:19:eb:0b:f3:
         58:f5:46:72:89:da:85:00:fc:e9:8e:51:c5:76:28:7c:23:3e:
         a4:1e:6e:f8:cc:ce:f3:c6:8d:69:89:9c:80:7c:3a:17:ca:77:
         e5:1e:e7:88:36:bd:f0:e6:fe:57:62:92:54:14:9b:d5:d8:d7:
         d8:87:54:9a:47:fd:6f:e7:13:c7:b9:91:bb:d5:73:86:3e:75:
         0a:0d:d1:40:60:7b:1d:89:ee:da:fe:de:fd:ba:2b:18:52:5c:
         69:e7:ac:69:4c:56:fc:c4:0d:f8:21:6f:29:65:3f:30:28:c3:
         85:91:c0:4f:79:19:2f:e9:8a:fa:1d:f4:b6:d2:cd:b9:8e:70:
         d0:19:1f:53:81:04:7b:40:49:bd:c6:3d:7a:28:33:77:c9:00:
         6d:4d:0f:76:5d:60:8e:59:8c:34:1b:ce:74:9e:e2:95:83:6d:
         4b:a0:0a:81:0e:f4:6c:c6:44:3b:0d:5c:bc:81:41:ba:09:52:
         59:e1:97:3e:d3:1a:1d:2f:04:a0:9b:6e:39:62:59:72:31:96:
         b9:40:15:56:64:51:c0:46:3c:3c:a1:ff:e7:9c:f2:98:53:bd:
         b4:c0:5b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:10:53 2026 by rpki-client