Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa
File:                     326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (raw, json)
Hash identifier:          K0Co1onM5BbkXQH/tFwckZOljCdXDgCDtKHluZWcCxU=
Subject key identifier:   EA:80:26:DC:AE:6E:88:B1:87:E5:16:16:AC:62:25:3B:5C:54:ED:68
Certificate issuer:       /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial:       121F378B6A42FCA478CE49B23B9397EF9CFBEFFD
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa
Signing time:             Sat 06 Sep 2025 10:46:18 +0000
ROA not before:           Sat 06 Sep 2025 10:41:18 +0000
ROA not after:            Sat 05 Sep 2026 10:46:18 +0000
asID:                     210464
IP address blocks:        2a14:7583:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Sep 2025 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:1f:37:8b:6a:42:fc:a4:78:ce:49:b2:3b:93:97:ef:9c:fb:ef:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
        Validity
            Not Before: Sep  6 10:41:18 2025 GMT
            Not After : Sep  5 10:46:18 2026 GMT
        Subject: CN=EA8026DCAE6E88B187E51616AC62253B5C54ED68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e4:05:a9:e9:4f:2c:d4:ba:3a:43:3c:85:e5:
                    da:8f:d6:43:f8:9e:68:75:3e:d1:89:83:ab:80:12:
                    65:da:f5:a7:ae:49:c9:63:f5:2e:3c:bb:07:2c:f7:
                    e1:93:e3:0e:af:90:1c:d9:35:69:2f:1d:87:ed:01:
                    d5:11:97:08:5f:61:5e:0b:6e:65:cd:dc:7a:d2:a0:
                    42:ca:96:5f:54:5f:68:2e:bb:37:98:62:02:1e:00:
                    d4:52:e9:47:d7:9c:28:de:ec:1c:8c:07:d6:ef:fa:
                    ee:3d:c7:4d:58:c3:da:1e:ed:ef:5a:c9:22:ba:74:
                    c8:44:19:9a:58:1d:e1:56:b7:bf:c2:b9:4f:f6:27:
                    67:2d:cc:57:c5:89:ad:1c:62:8a:d0:54:60:70:3b:
                    7c:36:3d:26:c4:f9:96:27:a8:9b:0b:57:1d:fd:93:
                    0f:89:60:75:fd:ab:6b:47:bb:49:c7:71:5e:5b:45:
                    46:8d:e6:3f:f8:fd:60:27:82:64:5e:8c:aa:c6:0a:
                    9f:29:6d:ac:52:55:7e:8e:1d:2c:d8:53:22:f1:9c:
                    ed:53:b5:ad:7b:4f:52:6a:59:bc:f2:1e:ac:ff:37:
                    21:63:d8:80:f9:a1:f3:63:5d:d3:39:35:77:f0:72:
                    8a:1e:dd:84:6d:19:6b:72:c7:d1:50:1e:51:46:25:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:26:DC:AE:6E:88:B1:87:E5:16:16:AC:62:25:3B:5C:54:ED:68
            X509v3 Authority Key Identifier:
                keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:50:e4:c5:e9:3e:c1:70:37:e2:96:40:b5:19:b1:c3:24:53:
         60:14:d0:a2:e7:a3:40:1e:73:19:45:8c:58:8f:d4:9c:48:cf:
         43:7c:7e:90:2c:63:10:59:59:03:c8:75:06:f7:b2:fc:2b:94:
         0c:17:04:32:77:fc:01:d7:34:2e:be:4e:27:1d:b2:f5:41:96:
         43:9a:44:c3:b5:12:e0:82:6e:89:58:bf:0c:c6:51:62:33:10:
         74:c1:af:3f:04:ee:6e:c2:69:cb:9a:88:2d:3b:b6:24:1a:aa:
         10:c6:e3:70:a5:d4:11:3f:21:0b:76:de:e7:00:ed:db:be:93:
         b3:d2:ff:aa:5e:f4:e3:c6:19:c3:b9:19:29:eb:2f:28:28:43:
         47:22:d3:a6:46:4a:51:c6:db:29:7d:45:31:c9:75:18:07:c9:
         b1:99:3f:2c:0a:51:bc:88:c0:66:00:15:94:97:ae:41:c9:db:
         cb:c3:5a:dc:b2:b5:c8:42:d8:ea:23:62:c8:dd:dd:e0:31:50:
         8a:0e:d7:50:18:59:c1:0b:6f:c4:5e:85:cc:09:db:4c:f9:e7:
         27:a7:f0:2d:e5:53:1f:3d:2c:5c:ae:e0:55:02:8b:b1:16:16:
         e9:60:67:fe:b4:31:87:4c:c6:58:d7:18:36:04:3e:0d:42:ee:
         09:92:4c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 19:04:44 2025 by rpki-client