Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa
File:                     326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (raw, json)
Hash identifier:          CXv6x/O9ewNpien44qlt1XDF1W8OUGA/v42u2jmxExg=
Subject key identifier:   E0:B6:73:1D:47:FA:E1:82:FC:32:67:5E:F1:75:1F:A1:B1:13:C1:26
Certificate issuer:       /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
Certificate serial:       17558C173A7E2B9884EE5A8C86C26059F2512644
Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa
Signing time:             Thu 18 Jun 2026 17:50:57 +0000
ROA not before:           Thu 18 Jun 2026 17:45:57 +0000
ROA not after:            Thu 17 Jun 2027 17:50:57 +0000
asID:                     199763
IP address blocks:        2a14:7581:39ff::/48 maxlen: 64
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:55:8c:17:3a:7e:2b:98:84:ee:5a:8c:86:c2:60:59:f2:51:26:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
        Validity
            Not Before: Jun 18 17:45:57 2026 GMT
            Not After : Jun 17 17:50:57 2027 GMT
        Subject: CN=E0B6731D47FAE182FC32675EF1751FA1B113C126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bf:b9:4a:4a:54:14:f3:10:b3:dc:e0:2e:af:
                    2a:2b:08:03:2b:8c:6d:a7:05:cd:47:0a:62:b9:3c:
                    c2:ff:60:77:34:c3:b0:ed:3e:4e:cc:7b:0b:77:ac:
                    33:73:68:23:b3:2c:55:82:6d:33:7c:94:a5:3a:e6:
                    60:26:34:6d:8f:89:50:be:b6:a4:2d:ab:b0:e1:6e:
                    0f:8e:50:46:42:31:f6:8b:00:79:9a:19:f6:e3:c4:
                    eb:98:3d:54:58:98:b6:e0:a5:47:9a:21:c2:1c:2f:
                    eb:a5:6d:07:ce:8c:98:63:98:2f:18:17:4c:76:18:
                    50:32:5a:63:38:49:d1:f2:69:0d:94:57:75:be:59:
                    25:e2:be:19:87:ae:6f:ef:4d:a5:46:82:96:9f:a1:
                    d2:47:a6:43:fc:44:8b:20:17:14:8c:1c:43:9f:25:
                    0f:01:9f:e0:48:b0:54:7b:65:ee:38:fd:fb:91:3a:
                    cb:39:97:1c:dc:10:8e:8e:53:98:92:aa:27:08:ea:
                    2f:f0:9c:bf:9d:4e:30:34:e1:26:d0:bc:5f:e8:80:
                    63:ba:d7:6f:ff:a2:f4:c3:bf:fe:86:e7:13:e3:ed:
                    48:9a:09:61:52:89:8b:a3:93:11:51:0c:f1:b5:53:
                    bc:7f:8f:80:1b:7c:a8:74:f9:28:cf:d8:c1:02:e5:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B6:73:1D:47:FA:E1:82:FC:32:67:5E:F1:75:1F:A1:B1:13:C1:26
            X509v3 Authority Key Identifier:
                keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:39ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:e9:d4:0a:f2:cc:94:ba:85:08:a5:bc:48:44:8e:2b:7d:73:
         73:73:d2:d2:72:cb:78:ab:2b:5c:12:d2:08:6d:a9:55:50:50:
         2e:4d:f4:6f:8e:7c:5c:1c:8b:84:62:77:cb:4a:ba:22:b5:66:
         85:64:09:42:bc:a7:2e:67:88:43:06:ca:d6:a0:68:c0:d5:78:
         1e:38:84:1a:3f:03:fa:f5:ba:a3:52:88:c0:68:a7:81:b1:40:
         95:a2:9c:a3:6d:42:75:bb:79:73:f2:9f:c4:43:ef:c4:82:40:
         60:84:3d:25:23:4c:e7:b6:da:83:47:3c:12:de:b6:d1:a3:51:
         d4:53:ed:ee:80:7f:4e:2b:47:e1:c6:76:95:e0:91:6d:00:54:
         ef:7f:7e:55:59:aa:39:94:0f:28:71:08:57:88:47:35:4c:02:
         7d:db:b7:d2:fa:33:29:01:4a:89:e8:98:7d:23:4f:60:c0:07:
         6b:6e:3b:fd:1a:53:cf:23:a9:eb:f5:b8:e9:3d:1a:3f:64:de:
         6e:d9:cf:51:9a:83:a3:ef:09:4e:4a:56:48:39:d8:94:b8:8a:
         bf:b6:c4:f3:a2:ab:d3:39:6d:f7:8b:38:ce:63:ca:c3:1a:52:
         8d:78:a8:a0:fd:a3:90:eb:a8:cf:aa:be:2f:d4:75:20:de:e2:
         8b:63:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----