Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3a2f34302d3430203d3e20323134373537.roa
File:                     326131343a373538333a3a2f34302d3430203d3e20323134373537.roa (raw, json)
Hash identifier:          hcCpHwIQLDuq622pIwKuAMoJYid6gLvp4xFqggJmodo=
Subject key identifier:   FC:84:F9:3D:29:70:0B:6D:02:64:5B:20:68:FE:05:DB:D0:C5:52:4E
Certificate issuer:       /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial:       551B64C43DB1C52771CD95EB095108A85CA0D8BE
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3a2f34302d3430203d3e20323134373537.roa
Signing time:             Sat 06 Sep 2025 10:44:29 +0000
ROA not before:           Sat 06 Sep 2025 10:39:29 +0000
ROA not after:            Sat 05 Sep 2026 10:44:29 +0000
asID:                     214757
IP address blocks:        2a14:7583::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Sep 2025 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1b:64:c4:3d:b1:c5:27:71:cd:95:eb:09:51:08:a8:5c:a0:d8:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
        Validity
            Not Before: Sep  6 10:39:29 2025 GMT
            Not After : Sep  5 10:44:29 2026 GMT
        Subject: CN=FC84F93D29700B6D02645B2068FE05DBD0C5524E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:8c:b1:c2:51:2c:01:26:96:1a:8b:82:97:
                    bc:1d:b6:2b:19:26:3d:df:fb:10:33:9e:0c:e7:46:
                    36:80:83:24:f7:1b:6a:3f:d7:d6:a0:02:47:fe:d2:
                    21:a6:e4:03:2d:95:6c:29:e3:50:09:e3:8a:b8:72:
                    2d:c9:0e:57:06:25:bd:0e:a9:c5:d8:6b:10:df:f7:
                    2e:04:67:c1:c8:c3:1a:f8:40:53:f1:3b:4f:69:79:
                    cf:08:45:92:0b:e6:9d:70:b4:62:ee:c4:04:70:a1:
                    54:ce:4b:a1:ab:4a:26:2f:65:56:9f:49:61:5f:e2:
                    47:88:7c:4c:98:12:6b:9e:db:2d:61:00:04:3d:7d:
                    5a:c0:91:bd:1d:61:d3:03:35:4e:3d:5d:26:09:df:
                    f7:f7:dc:c4:9b:6a:5e:ea:c8:99:02:5e:e4:1e:c1:
                    55:6f:dd:ea:58:17:cd:e4:78:54:ba:70:f7:d9:5f:
                    48:22:8c:c4:97:6d:08:1c:ec:ad:03:83:66:e1:46:
                    01:80:ef:5f:62:34:5e:4c:ba:7d:a0:d3:d3:f1:50:
                    c0:41:83:26:0f:6d:d6:f2:4b:0b:ab:1c:3d:48:b3:
                    3c:f4:c9:2f:a1:2b:81:24:fd:4a:c5:f2:15:c2:dd:
                    32:90:73:8a:dd:ae:f3:a9:07:09:a9:45:1a:f0:aa:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:84:F9:3D:29:70:0B:6D:02:64:5B:20:68:FE:05:DB:D0:C5:52:4E
            X509v3 Authority Key Identifier:
                keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a3a2f34302d3430203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:f5:ad:b7:f4:8b:1c:bf:aa:32:0b:ae:a1:cf:3d:34:fe:
         03:fa:fc:72:1e:18:ea:50:6b:c4:65:d9:5e:d5:36:2e:b3:75:
         b5:da:5b:f8:14:b6:10:f8:16:a1:81:a0:56:7f:f7:2a:f9:88:
         76:95:51:7d:bf:aa:6b:0a:5e:c1:f1:aa:33:c8:ca:fb:25:8d:
         c5:78:9d:19:17:0e:70:30:e9:ee:24:25:85:56:47:64:4f:0a:
         92:90:32:83:c5:be:38:69:09:02:de:c1:2f:40:98:7e:63:0a:
         b3:de:f2:55:67:60:57:1d:1e:dc:85:06:57:69:dd:51:e8:39:
         62:18:97:c7:8c:9a:32:b3:9c:eb:09:c4:10:7a:12:b7:81:9c:
         4f:19:fa:82:23:20:47:e7:5a:02:6a:d7:af:6f:40:de:1c:33:
         db:e8:0b:98:5c:8a:84:f3:5a:1a:fb:64:1a:27:16:73:3e:4f:
         2b:f3:f7:3e:ef:65:ad:79:3f:6b:15:22:51:75:65:9d:2b:28:
         4e:5c:27:f8:82:0f:4e:7a:3c:e0:28:fb:c3:b1:eb:ef:a3:11:
         37:05:ea:03:a8:f4:0e:bf:3f:20:87:32:de:4d:1c:6a:7f:56:
         5e:83:87:b1:57:4c:99:6e:76:f3:86:7a:ad:17:c4:41:35:54:
         c9:65:2f:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 14 19:02:27 2025 by rpki-client