Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa
File:                     326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (raw, json)
Hash identifier:          QIjLHOShOQYCNbNoFtN4+204Wpz6bLBcbsOL1KoNKsE=
Subject key identifier:   33:91:1C:7F:5D:AE:30:16:16:A3:33:AB:AC:07:08:DD:21:8E:89:CE
Certificate issuer:       /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
Certificate serial:       7E5CD464098F3F5A63A840B1ECE8E86B569C0101
Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa
Signing time:             Fri 26 Jun 2026 22:50:58 +0000
ROA not before:           Fri 26 Jun 2026 22:45:58 +0000
ROA not after:            Fri 25 Jun 2027 22:50:58 +0000
asID:                     199763
IP address blocks:        2a14:7581:3966::/48 maxlen: 64
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5c:d4:64:09:8f:3f:5a:63:a8:40:b1:ec:e8:e8:6b:56:9c:01:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
        Validity
            Not Before: Jun 26 22:45:58 2026 GMT
            Not After : Jun 25 22:50:58 2027 GMT
        Subject: CN=33911C7F5DAE301616A333ABAC0708DD218E89CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:89:64:4e:4c:ad:71:58:f2:5c:70:32:19:71:
                    37:39:9c:f2:6d:bb:03:30:8b:5f:79:25:92:8f:0c:
                    08:63:69:01:d0:3f:77:f0:53:50:e4:85:03:27:15:
                    e2:f0:18:a9:ad:41:09:dc:da:28:71:2b:4d:98:8d:
                    d6:cc:9a:e0:70:8a:a2:14:83:b0:d7:04:18:53:b0:
                    85:85:63:81:b9:fc:05:1c:1d:87:db:13:46:5a:59:
                    a9:09:47:6c:92:55:06:08:6e:83:6c:96:48:05:bb:
                    a0:65:b7:84:ad:61:0a:00:c0:5d:ec:26:1a:5f:11:
                    dc:7e:86:dd:b5:f5:ca:cd:c0:bd:1c:39:47:5b:ad:
                    d1:9e:54:ca:0f:65:84:e0:fb:26:fb:20:11:b8:ec:
                    a0:76:7c:d8:84:a4:f5:23:88:aa:71:cf:09:a9:f0:
                    11:15:75:53:ba:2a:14:7f:14:7c:db:43:65:a4:e1:
                    1f:41:5e:92:6f:12:22:ea:80:2d:64:d4:6e:6f:3b:
                    b9:d7:c8:1f:64:c1:7e:f8:df:fe:cd:79:d3:17:28:
                    9a:4b:4b:60:61:50:50:3d:4f:5e:ec:b4:92:64:69:
                    4e:fe:03:1f:95:48:bc:46:61:02:19:9b:f5:2e:5b:
                    50:ca:5c:73:ac:02:1f:d7:2e:cf:60:eb:2c:89:77:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:91:1C:7F:5D:AE:30:16:16:A3:33:AB:AC:07:08:DD:21:8E:89:CE
            X509v3 Authority Key Identifier:
                keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3966::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:de:12:c2:b9:e0:21:5f:73:54:05:45:f1:42:00:db:56:1f:
         76:06:65:c0:0e:2b:d3:ea:99:eb:83:db:65:6d:dd:f1:59:ba:
         b4:41:12:fd:3a:56:b1:a2:a4:ae:74:3e:52:8f:74:ac:fe:20:
         23:ab:6e:9c:b3:50:19:e1:11:4d:18:f1:4e:62:01:59:5d:42:
         54:a8:96:7a:ca:33:fc:89:d8:5d:32:ba:d2:ff:27:46:68:5a:
         00:34:30:96:af:89:0e:c4:3f:79:5a:e3:92:75:2c:e5:29:d6:
         94:5f:19:24:50:7f:b4:09:38:5b:d8:bc:4e:bc:07:01:ce:e7:
         3a:a9:53:c8:4f:71:64:85:88:5f:d7:0a:ba:9d:fe:89:9f:91:
         30:b4:b7:5b:39:30:24:fb:47:10:3b:cb:da:33:81:89:a8:65:
         66:fb:da:c0:24:f9:43:24:90:35:a7:bc:17:34:d2:68:56:17:
         38:55:64:50:67:5d:6c:bf:62:80:2c:5b:6f:1e:96:cc:a1:d5:
         ec:e0:32:ce:26:13:72:1f:63:b2:c3:b6:07:f5:4c:3c:11:34:
         aa:0b:fd:35:08:82:f8:fe:37:bd:55:c1:d2:19:57:41:81:f5:
         93:77:0f:d7:4a:07:12:42:43:13:4d:fd:24:9f:d1:73:c6:c0:
         9c:91:97:ea
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUflzUZAmPP1pjqECx7Ojoa1acAQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYz
RUFCQ0Y3QzAeFw0yNjA2MjYyMjQ1NThaFw0yNzA2MjUyMjUwNThaMDMxMTAvBgNV
BAMTKDMzOTExQzdGNURBRTMwMTYxNkEzMzNBQkFDMDcwOEREMjE4RTg5Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSiWROTK1xWPJccDIZcTc5nPJt
uwMwi195JZKPDAhjaQHQP3fwU1DkhQMnFeLwGKmtQQnc2ihxK02YjdbMmuBwiqIU
g7DXBBhTsIWFY4G5/AUcHYfbE0ZaWakJR2ySVQYIboNslkgFu6Blt4StYQoAwF3s
JhpfEdx+ht219crNwL0cOUdbrdGeVMoPZYTg+yb7IBG47KB2fNiEpPUjiKpxzwmp
8BEVdVO6KhR/FHzbQ2Wk4R9BXpJvEiLqgC1k1G5vO7nXyB9kwX743/7NedMXKJpL
S2BhUFA9T17stJJkaU7+Ax+VSLxGYQIZm/UuW1DKXHOsAh/XLs9g6yyJd+wFAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUM5Ecf12uMBYWozOrrAcI3SGOic4wHwYDVR0j
BBgwFoAU6J+RXYa7nxPQ8inKeM1tnz6rz3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzU4MzZlNjAtNmE5Mi00N2VmLTliOWItOTJhODRkNmQz
NWJhLzEvRTg5RjkxNUQ4NkJCOUYxM0QwRjIyOUNBNzhDRDZEOUYzRUFCQ0Y3Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9FODlGOTE1RDg2QkI5RjEzRDBGMjI5Q0E3
OENENkQ5RjNFQUJDRjdDLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9jNTgzNmU2MC02YTkyLTQ3ZWYtOWI5Yi05MmE4NGQ2ZDM1YmEvMS8zMjYxMzEz
NDNhMzczNTM4MzEzYTMzMzkzNjM2M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz
OTM5MzczNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gTlmMA0GCSqGSIb3DQEBCwUAA4IBAQBn
3hLCueAhX3NUBUXxQgDbVh92BmXADivT6pnrg9tlbd3xWbq0QRL9OlaxoqSudD5S
j3Ss/iAjq26cs1AZ4RFNGPFOYgFZXUJUqJZ6yjP8idhdMrrS/ydGaFoANDCWr4kO
xD95WuOSdSzlKdaUXxkkUH+0CThb2LxOvAcBzuc6qVPIT3FkhYhf1wq6nf6Jn5Ew
tLdbOTAk+0cQO8vaM4GJqGVm+9rAJPlDJJA1p7wXNNJoVhc4VWRQZ11sv2KALFtv
HpbModXs4DLOJhNyH2Oyw7YH9Uw8ETSqC/01CIL4/je9VcHSGVdBgfWTdw/XSgcS
QkMTTf0kn9FzxsCckZfq
-----END CERTIFICATE-----