Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323830303a3a2f33382d3338203d3e203531333936.roa
File:                     326131343a3763303a323830303a3a2f33382d3338203d3e203531333936.roa (raw, json)
Hash identifier:          dNgTug048Cl4D0h/UGVFYizSNRDMWmjV7tkX5OjZuYo=
Subject key identifier:   79:94:1C:88:B8:69:A3:E8:26:8F:AF:75:7D:3E:1F:2D:A3:F3:39:28
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       222CC620B38097292B87B0A334C103110C4AF6
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323830303a3a2f33382d3338203d3e203531333936.roa
Signing time:             Tue 31 Mar 2026 15:52:17 +0000
ROA not before:           Tue 31 Mar 2026 15:47:17 +0000
ROA not after:            Tue 30 Mar 2027 15:52:17 +0000
asID:                     51396
IP address blocks:        2a14:7c0:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2c:c6:20:b3:80:97:29:2b:87:b0:a3:34:c1:03:11:0c:4a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Mar 31 15:47:17 2026 GMT
            Not After : Mar 30 15:52:17 2027 GMT
        Subject: CN=79941C88B869A3E8268FAF757D3E1F2DA3F33928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:3e:2a:7a:49:21:17:c9:9d:62:ed:85:50:
                    89:10:a8:42:76:23:5a:d2:40:a9:55:cd:bb:41:a2:
                    cf:41:a4:f2:10:5f:7a:76:d5:d6:b2:46:d3:8f:74:
                    bb:11:87:09:6b:62:5f:94:b9:ed:b0:ff:7d:07:9a:
                    e5:b1:75:0b:f9:0e:3b:b5:fc:09:8a:bc:69:00:37:
                    12:14:54:a4:42:7a:6d:b5:04:c8:2d:38:ae:0f:42:
                    4f:b2:3f:e4:9d:84:39:9a:f2:98:80:9a:d8:97:2f:
                    e3:57:e2:84:e3:17:49:9f:9a:20:4c:33:28:32:43:
                    33:60:34:90:c7:a6:a3:f5:05:3b:18:3d:84:0c:d5:
                    13:61:38:8f:4e:51:72:c9:c2:aa:7c:c5:e1:2a:83:
                    fe:48:61:2d:c3:b2:09:a0:ef:81:90:10:24:5b:b8:
                    29:3e:00:4d:b4:c0:64:2c:9f:cc:01:36:9a:63:42:
                    3e:bb:4e:50:27:63:89:f5:f4:2f:af:00:e5:b7:72:
                    af:68:91:18:77:fa:7e:14:a8:0e:c7:55:dc:0e:c6:
                    74:a1:43:e1:a9:b1:48:6d:8f:5e:4f:99:11:96:05:
                    74:c4:5b:0a:fc:18:67:e0:52:f1:10:c0:e1:f0:47:
                    d8:b1:2c:48:e5:23:c5:04:84:eb:ed:02:f9:05:2b:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:1C:88:B8:69:A3:E8:26:8F:AF:75:7D:3E:1F:2D:A3:F3:39:28
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a323830303a3a2f33382d3338203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:2800::/38

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:c4:40:d4:d0:b9:33:57:f6:17:5e:e8:6b:70:ff:7d:b6:
         9d:7e:ab:14:d4:ee:51:3f:44:eb:aa:c4:29:24:f9:91:1e:39:
         93:28:b4:20:39:b4:99:a5:52:e2:a3:a8:20:7b:9f:fb:9a:54:
         43:0d:d3:f3:d1:d7:c3:b0:be:4b:22:cb:fd:83:b8:9d:6e:31:
         f3:f1:35:bc:86:27:a9:6e:e2:39:82:52:2a:43:e4:2c:a3:bc:
         ae:b2:1f:9c:70:89:7d:29:cf:e2:e2:6f:15:76:3e:c4:d2:62:
         f6:a1:03:8d:71:12:a6:54:7d:c4:c1:be:b6:00:f9:95:cd:aa:
         23:40:ec:b4:59:7f:03:34:7c:59:b7:bb:2e:59:c1:29:79:52:
         a8:5a:9f:c0:c5:d4:3e:0a:dc:16:21:ab:1c:bd:67:55:c1:0f:
         2c:9a:bd:30:30:25:dc:f0:8a:2f:0c:19:3e:5d:0a:58:18:69:
         39:17:c3:61:66:33:84:9c:70:1c:df:8b:a0:49:a2:43:91:1b:
         ba:ef:a6:ed:54:00:ef:df:49:2b:f9:6f:bd:bb:7f:53:aa:03:
         dd:f2:87:a5:8c:61:27:32:1a:ee:1a:d9:4a:1d:8f:0b:99:e5:
         4c:47:37:18:20:b6:64:24:7e:69:9c:be:b7:0e:5a:b2:8d:76:
         89:be:0a:60
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgITIizGILOAlykrh7CjNMEDEQxK9jANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg1YjhlMjFjNjg5MGJkNzlhYjc2NGQ5MWI2MGMzOWMzYjdl
NDk4NWUxMB4XDTI2MDMzMTE1NDcxN1oXDTI3MDMzMDE1NTIxN1owMzExMC8GA1UE
AxMoNzk5NDFDODhCODY5QTNFODI2OEZBRjc1N0QzRTFGMkRBM0YzMzkyODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMUwPip6SSEXyZ1i7YVQiRCoQnYj
WtJAqVXNu0Giz0Gk8hBfenbV1rJG0490uxGHCWtiX5S57bD/fQea5bF1C/kOO7X8
CYq8aQA3EhRUpEJ6bbUEyC04rg9CT7I/5J2EOZrymICa2Jcv41fihOMXSZ+aIEwz
KDJDM2A0kMemo/UFOxg9hAzVE2E4j05RcsnCqnzF4SqD/khhLcOyCaDvgZAQJFu4
KT4ATbTAZCyfzAE2mmNCPrtOUCdjifX0L68A5bdyr2iRGHf6fhSoDsdV3A7GdKFD
4amxSG2PXk+ZEZYFdMRbCvwYZ+BS8RDA4fBH2LEsSOUjxQSE6+0C+QUrj8MCAwEA
AaOCAeswggHnMB0GA1UdDgQWBBR5lByIuGmj6CaPr3V9Ph8to/M5KDAfBgNVHSME
GDAWgBRbjiHGiQvXmrdk2Rtgw5w7fkmF4TAOBgNVHQ8BAf8EBAMCB4AwaAYDVR0f
BGEwXzBdoFugWYZXcnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVwby9JbmZpbmly
b3V0ZS8xLzVCOEUyMUM2ODkwQkQ3OUFCNzY0RDkxQjYwQzM5QzNCN0U0OTg1RTEu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9XNDRoeG9rTDE1cTNaTmtiWU1PY08z
NUpoZUUuY2VyMIGHBggrBgEFBQcBCwR7MHkwdwYIKwYBBQUHMAuGa3JzeW5jOi8v
cmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS8zMjYxMzEzNDNhMzc2
MzMwM2EzMjM4MzAzMDNhM2EyZjMzMzgyZDMzMzgyMDNkM2UyMDM1MzEzMzM5MzYu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQ
MA4EAgACMAgDBgIqFAfAKDANBgkqhkiG9w0BAQsFAAOCAQEAZZ3EQNTQuTNX9hde
6Gtw/322nX6rFNTuUT9E66rEKST5kR45kyi0IDm0maVS4qOoIHuf+5pUQw3T89HX
w7C+SyLL/YO4nW4x8/E1vIYnqW7iOYJSKkPkLKO8rrIfnHCJfSnP4uJvFXY+xNJi
9qEDjXESplR9xMG+tgD5lc2qI0DstFl/AzR8Wbe7LlnBKXlSqFqfwMXUPgrcFiGr
HL1nVcEPLJq9MDAl3PCKLwwZPl0KWBhpORfDYWYzhJxwHN+LoEmiQ5Ebuu+m7VQA
799JK/lvvbt/U6oD3fKHpYxhJzIa7hrZSh2PC5nlTEc3GCC2ZCR+aZy+tw5aso12
ib4KYA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:31 2026 by rpki-client