Route Origin Authorization

$ rpki-client -vvvf rpki.as219412.net/repo/axel-vir/1/326130643a643930343a633166313a3a2f34382d3438203d3e20323138373538.roa
File:                     326130643a643930343a633166313a3a2f34382d3438203d3e20323138373538.roa (raw, json)
Hash identifier:          jwJXFhy7dZivP4nnkuFT2PReCXqbBq3TIE3fu6INUkE=
Subject key identifier:   0A:84:05:C4:A7:E8:E7:8D:A2:53:E5:0F:19:9F:8F:06:F8:3D:47:5A
Certificate issuer:       /CN=31D88CB143D07059AA4AFB0F208630E599269338
Certificate serial:       710D08CEA91ADC32ECBA88471F8D0F1994AA33EA
Authority key identifier: 31:D8:8C:B1:43:D0:70:59:AA:4A:FB:0F:20:86:30:E5:99:26:93:38
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/31D88CB143D07059AA4AFB0F208630E599269338.cer
Subject info access:      rsync://rpki.as219412.net/repo/axel-vir/1/326130643a643930343a633166313a3a2f34382d3438203d3e20323138373538.roa
Signing time:             Mon 19 Oct 2026 21:25:33 +0000
ROA not before:           Mon 19 Oct 2026 21:20:33 +0000
ROA not after:            Mon 18 Oct 2027 21:25:33 +0000
asID:                     218758
IP address blocks:        2a0d:d904:c1f1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.as219412.net/repo/axel-vir/1/31D88CB143D07059AA4AFB0F208630E599269338.crl
                          rsync://rpki.as219412.net/repo/axel-vir/1/31D88CB143D07059AA4AFB0F208630E599269338.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/31D88CB143D07059AA4AFB0F208630E599269338.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 10:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0d:08:ce:a9:1a:dc:32:ec:ba:88:47:1f:8d:0f:19:94:aa:33:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31D88CB143D07059AA4AFB0F208630E599269338
        Validity
            Not Before: Oct 19 21:20:33 2026 GMT
            Not After : Oct 18 21:25:33 2027 GMT
        Subject: CN=0A8405C4A7E8E78DA253E50F199F8F06F83D475A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:be:f7:05:56:d8:db:3b:06:57:c7:6c:5e:
                    4d:a8:96:43:df:1a:5e:95:25:a7:0a:a5:6a:a1:39:
                    58:1b:0a:d6:c1:46:3a:0e:7f:cf:7d:85:6a:e2:be:
                    5b:ee:3e:3e:12:9c:91:8a:b2:63:e9:8a:75:2b:8d:
                    24:80:4a:c3:61:cf:52:9e:52:7b:ab:6a:2e:1f:38:
                    03:71:b0:85:6d:7f:ea:59:5e:77:1e:ba:62:84:16:
                    62:b7:a7:9a:dd:a4:93:d5:ff:be:78:d4:4b:cf:65:
                    bb:4b:b4:13:be:66:e2:5e:b2:1d:19:82:28:1f:19:
                    18:48:f6:d6:fc:b8:b7:11:2b:b3:af:9c:09:ad:e3:
                    bf:5c:13:d0:3f:8d:f7:1a:ae:35:33:d6:df:54:eb:
                    e9:42:d9:f8:6d:89:8f:5f:48:5b:a3:b4:f0:b2:b7:
                    e2:d9:99:cc:c6:0a:eb:61:56:b6:88:af:09:c9:68:
                    29:9b:c1:9b:0d:72:17:04:ac:28:b3:78:8c:7a:5e:
                    b0:57:e0:86:9b:e7:9c:63:a6:46:b0:00:34:48:70:
                    f2:3e:1c:cf:82:27:c2:43:f7:a1:84:0a:a8:30:52:
                    2f:33:9e:73:84:f5:a0:0c:26:19:6a:1a:91:e9:b2:
                    a2:0f:76:2a:85:cc:5f:c2:53:37:b9:48:9f:04:bc:
                    46:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:84:05:C4:A7:E8:E7:8D:A2:53:E5:0F:19:9F:8F:06:F8:3D:47:5A
            X509v3 Authority Key Identifier:
                keyid:31:D8:8C:B1:43:D0:70:59:AA:4A:FB:0F:20:86:30:E5:99:26:93:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.as219412.net/repo/axel-vir/1/31D88CB143D07059AA4AFB0F208630E599269338.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/31D88CB143D07059AA4AFB0F208630E599269338.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.as219412.net/repo/axel-vir/1/326130643a643930343a633166313a3a2f34382d3438203d3e20323138373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:d904:c1f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:72:ff:a8:0b:86:b2:39:97:39:f9:1f:b1:a4:a6:d0:dd:40:
         69:56:d1:db:5d:b7:78:0a:17:01:af:63:a3:67:4b:f5:0d:d0:
         e4:28:b7:ad:81:0c:e3:bf:72:b6:c0:ee:69:db:a0:68:ce:04:
         4f:bc:29:64:52:6b:eb:e8:17:27:c1:fb:b5:41:93:c8:07:1c:
         bc:64:2c:47:b6:d9:cb:96:43:a3:80:33:50:30:3e:3d:5c:9e:
         1a:d1:b0:e7:7a:a0:74:34:05:f9:a0:05:62:9f:bc:71:36:85:
         02:2c:fb:0c:7c:57:75:95:06:37:d6:74:2e:3d:a1:d1:34:50:
         59:06:95:58:ae:b0:95:ba:fa:1c:f4:f1:24:21:d3:80:77:c5:
         31:56:45:93:4f:75:73:cc:c8:f8:e5:37:f4:2b:ec:d0:a2:4d:
         6e:8e:e1:84:2f:83:9d:9f:62:19:b8:af:ad:90:7c:49:38:bd:
         e8:9a:e9:26:74:e8:c5:e4:f4:f0:05:28:11:e1:af:d5:ef:1c:
         5e:ad:d9:9a:62:3a:f4:9b:44:34:cc:bd:94:a5:a2:a6:0c:b4:
         1c:33:72:7a:ba:3c:3d:85:67:a5:1d:14:e3:f2:cd:99:02:13:
         24:f6:a2:ca:5e:9b:7c:54:25:79:33:cc:46:63:2f:fb:8f:5e:
         be:80:27:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:05 2026 by rpki-client