Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6230303a3a2f34302d3430203d3e20323134393736.roa
File:                     326131343a373538333a6230303a3a2f34302d3430203d3e20323134393736.roa (raw, json)
Hash identifier:          hNUMEEnDrH2gkkUUmyGjFLZFZ1Ez86CcMERf0SfeX4o=
Subject key identifier:   1F:03:D2:F8:05:7B:14:7E:2C:7C:05:C5:F5:C5:6F:02:39:4C:F6:30
Certificate issuer:       /CN=A609E97AC39E3F53678C0C9422F89947B6146002
Certificate serial:       1953A5E55F98B672977AAEDB11148E2BB7B8E379
Authority key identifier: A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6230303a3a2f34302d3430203d3e20323134393736.roa
Signing time:             Sat 06 Sep 2025 10:46:43 +0000
ROA not before:           Sat 06 Sep 2025 10:41:43 +0000
ROA not after:            Sat 05 Sep 2026 10:46:43 +0000
asID:                     214976
IP address blocks:        2a14:7583:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Sep 2025 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:53:a5:e5:5f:98:b6:72:97:7a:ae:db:11:14:8e:2b:b7:b8:e3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A609E97AC39E3F53678C0C9422F89947B6146002
        Validity
            Not Before: Sep  6 10:41:43 2025 GMT
            Not After : Sep  5 10:46:43 2026 GMT
        Subject: CN=1F03D2F8057B147E2C7C05C5F5C56F02394CF630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:d2:a6:be:b5:9b:8c:b1:84:4d:dd:7e:e1:
                    fb:f3:a1:e3:52:80:86:39:ed:e3:92:2e:be:2a:e7:
                    c6:72:e7:59:75:b6:00:e9:a6:38:c1:4d:e7:3d:1b:
                    c4:17:1c:56:46:19:da:f9:25:0d:3c:bc:8a:b0:c5:
                    bf:91:22:ae:4f:42:b9:d8:d7:bd:9c:f7:d8:86:b0:
                    4f:f4:7b:22:4f:09:3c:25:8a:3c:41:a9:3a:20:be:
                    28:dd:5c:4a:89:b8:4f:2d:48:9f:cf:1f:95:72:45:
                    13:15:05:14:89:00:99:dd:c8:7a:16:0d:b8:95:fb:
                    17:30:13:bd:1e:e7:00:28:32:47:10:e6:17:b6:5e:
                    1f:9d:54:01:4f:b2:93:75:65:ac:58:3f:90:91:78:
                    c6:a5:b9:42:04:51:73:3b:9d:5b:5d:72:c4:7c:b4:
                    8e:e7:bc:ff:62:27:0a:79:e7:f0:3d:a9:1f:c8:9f:
                    07:fe:d3:c2:1f:2f:5a:f4:4c:0d:5b:17:51:58:10:
                    ce:b7:a0:71:f4:58:62:57:cd:53:0e:e7:d8:a3:cf:
                    71:e9:4d:e7:13:0b:26:2b:02:8a:8f:e7:4e:48:05:
                    aa:65:29:46:eb:66:67:bc:20:b4:c3:30:26:54:28:
                    35:5c:8b:f4:0c:c1:43:14:c1:ad:0f:2b:64:5b:74:
                    b9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:03:D2:F8:05:7B:14:7E:2C:7C:05:C5:F5:C5:6F:02:39:4C:F6:30
            X509v3 Authority Key Identifier:
                keyid:A6:09:E9:7A:C3:9E:3F:53:67:8C:0C:94:22:F8:99:47:B6:14:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/0/A609E97AC39E3F53678C0C9422F89947B6146002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A609E97AC39E3F53678C0C9422F89947B6146002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/0/326131343a373538333a6230303a3a2f34302d3430203d3e20323134393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:df:fd:cc:06:5d:11:e5:f4:4a:ee:82:93:7e:2e:3f:8c:ab:
         6b:47:4f:b3:a9:4d:88:d2:17:59:d4:15:c2:f5:1e:7d:c5:cb:
         72:82:36:36:2b:bc:77:77:df:7c:24:62:0b:fb:62:e0:43:d7:
         b2:8e:6b:2e:2b:72:9d:79:27:0a:86:03:22:72:98:98:61:20:
         a8:9c:08:1a:09:5f:ad:9c:f0:43:e0:e0:b3:0e:d3:a6:f6:33:
         9d:cc:4c:60:76:84:1f:71:d8:4b:d9:20:f7:23:19:76:0a:1a:
         cf:c6:d7:48:40:98:ea:94:7c:00:2b:f0:21:6e:43:99:e8:88:
         84:da:97:5b:54:7b:f0:6a:92:c5:2f:b0:31:08:e2:5c:07:7e:
         f2:9d:2c:85:c8:de:17:50:75:4e:2d:8b:2d:aa:02:c5:78:74:
         e8:fc:70:d6:38:29:ca:b4:a4:b9:5a:c5:b8:0a:8a:79:4a:81:
         9f:fd:a8:4f:48:6f:e9:60:bc:99:1b:d6:ba:2b:b1:53:f6:54:
         9c:46:f8:cd:87:31:2c:1b:16:9f:44:c1:e7:26:b5:f0:fe:96:
         26:e6:7b:84:ac:42:ea:aa:bb:53:d7:bc:ce:da:de:3a:d1:ad:
         ea:c7:70:d7:c7:b2:d3:ce:7d:dd:03:23:ea:c5:de:61:59:b4:
         37:41:6e:3c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgIUGVOl5V+YtnKXeq7bERSOK7e443kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdC
NjE0NjAwMjAeFw0yNTA5MDYxMDQxNDNaFw0yNjA5MDUxMDQ2NDNaMDMxMTAvBgNV
BAMTKDFGMDNEMkY4MDU3QjE0N0UyQzdDMDVDNUY1QzU2RjAyMzk0Q0Y2MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvtKmvrWbjLGETd1+4fvzoeNS
gIY57eOSLr4q58Zy51l1tgDppjjBTec9G8QXHFZGGdr5JQ08vIqwxb+RIq5PQrnY
172c99iGsE/0eyJPCTwlijxBqTogvijdXEqJuE8tSJ/PH5VyRRMVBRSJAJndyHoW
DbiV+xcwE70e5wAoMkcQ5he2Xh+dVAFPspN1ZaxYP5CReMaluUIEUXM7nVtdcsR8
tI7nvP9iJwp55/A9qR/Inwf+08IfL1r0TA1bF1FYEM63oHH0WGJXzVMO59ijz3Hp
TecTCyYrAoqP505IBaplKUbrZme8ILTDMCZUKDVci/QMwUMUwa0PK2RbdLkvAgMB
AAGjggIeMIICGjAdBgNVHQ4EFgQUHwPS+AV7FH4sfAXF9cVvAjlM9jAwHwYDVR0j
BBgwFoAUpgnpesOeP1NnjAyUIviZR7YUYAIwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5hdnNpc3AuY29tL3JlcG8vQVZTSVNQ
LzAvQTYwOUU5N0FDMzlFM0Y1MzY3OEMwQzk0MjJGODk5NDdCNjE0NjAwMi5jcmww
gZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5w
YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQyOTkt
YjA3OS0zMDllZDk3ZjM4MjQvMC9BNjA5RTk3QUMzOUUzRjUzNjc4QzBDOTQyMkY4
OTk0N0I2MTQ2MDAyLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhy
c3luYzovL3Jwa2kuYXZzaXNwLmNvbS9yZXBvL0FWU0lTUC8wLzMyNjEzMTM0M2Ez
NzM1MzgzMzNhNjIzMDMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzIzMTM0Mzkz
NzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYAKhR1gwswDQYJKoZIhvcNAQELBQADggEBABbf/cwGXRHl
9ErugpN+Lj+Mq2tHT7OpTYjSF1nUFcL1Hn3Fy3KCNjYrvHd333wkYgv7YuBD17KO
ay4rcp15JwqGAyJymJhhIKicCBoJX62c8EPg4LMO06b2M53MTGB2hB9x2EvZIPcj
GXYKGs/G10hAmOqUfAAr8CFuQ5noiITal1tUe/BqksUvsDEI4lwHfvKdLIXI3hdQ
dU4tiy2qAsV4dOj8cNY4Kcq0pLlaxbgKinlKgZ/9qE9Ib+lgvJkb1rorsVP2VJxG
+M2HMSwbFp9EwecmtfD+libme4SsQuqqu1PXvM7a3jrRrerHcNfHstPOfd0DI+rF
3mFZtDdBbjw=
-----END CERTIFICATE-----
Generated at Sun Sep 14 19:14:52 2025 by rpki-client