Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa
File:                     326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa (raw, json)
Hash identifier:          aGNoH95okWv1CeyfRbThtuDfUroLXpb+haicT9bs9xs=
Subject key identifier:   F7:F9:2C:EC:7C:B4:F5:2D:2E:02:F8:F2:AC:E1:E0:1F:B1:5C:7F:C2
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       5C2C7A052FF02889CD8DE2F279D44316DA563F07
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa
Signing time:             Tue 31 Mar 2026 15:52:09 +0000
ROA not before:           Tue 31 Mar 2026 15:47:09 +0000
ROA not after:            Tue 30 Mar 2027 15:52:09 +0000
asID:                     197464
IP address blocks:        2a14:7c0:3000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2c:7a:05:2f:f0:28:89:cd:8d:e2:f2:79:d4:43:16:da:56:3f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Mar 31 15:47:09 2026 GMT
            Not After : Mar 30 15:52:09 2027 GMT
        Subject: CN=F7F92CEC7CB4F52D2E02F8F2ACE1E01FB15C7FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:a1:c9:15:47:fa:2a:ac:96:2f:ed:58:9f:
                    df:25:5f:f7:11:b0:4e:f7:7f:f2:2e:49:33:d1:5b:
                    92:f5:b5:e3:d8:16:f5:4b:0a:89:ed:23:ef:c3:b8:
                    c5:03:51:0a:e0:53:81:fb:ee:12:21:94:b4:07:a4:
                    a0:b4:17:92:36:34:44:7d:0a:1f:cc:d8:f1:f9:45:
                    43:85:e3:45:df:cf:f1:13:e9:5b:b1:77:8e:8f:a8:
                    9e:3c:c6:38:3b:0e:a6:5a:7e:50:68:73:99:29:1b:
                    8b:cf:97:a0:f4:bd:87:6f:34:f8:f7:64:54:e2:4a:
                    db:6a:82:00:01:84:e6:fa:9b:e1:41:39:dc:08:69:
                    25:be:c0:14:88:e0:b0:d6:06:6f:51:02:09:80:c8:
                    d5:7b:b2:0d:f3:de:f4:99:77:fd:e5:7a:94:54:d2:
                    da:b8:f3:d6:59:1d:15:a2:55:e9:6d:39:2e:d9:d0:
                    9f:16:7f:fb:fa:83:49:c7:da:2b:75:2f:e5:45:1e:
                    d9:e7:8f:83:a1:f6:a0:b4:32:9d:ba:4e:e5:ca:f7:
                    9f:5f:cc:10:f4:cb:d3:23:ca:86:d6:9b:bc:41:34:
                    d7:4f:a1:45:48:29:41:ca:2f:99:4b:98:e2:a4:8e:
                    a2:b7:40:cd:de:71:a9:41:48:cd:e4:ea:73:91:66:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F9:2C:EC:7C:B4:F5:2D:2E:02:F8:F2:AC:E1:E0:1F:B1:5C:7F:C2
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a333030303a3a2f34302d3430203d3e20313937343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:36:bc:ef:2c:af:bb:25:44:b6:ab:ed:88:81:36:59:ca:ce:
         39:b7:2c:f7:4a:f6:00:63:cd:81:9e:51:04:e3:bb:be:8d:af:
         fb:5a:e4:a0:13:01:c2:7b:09:05:98:e0:60:07:a5:3f:5f:6a:
         c0:50:c6:5c:75:aa:d1:8d:a5:78:78:f6:2e:5b:73:4c:82:b4:
         98:b4:b6:c7:24:85:e2:e3:4c:29:46:cc:e9:fa:dc:fe:69:64:
         d4:71:61:02:c8:30:80:6e:32:9b:84:19:c7:39:7e:b2:f2:36:
         fe:36:5b:3a:8a:9b:c8:45:3c:63:56:09:ee:0b:65:e2:d4:d8:
         3a:a1:ac:f0:3a:c4:1b:6c:87:16:c7:64:ce:a9:0d:50:b5:88:
         61:f5:d3:e4:f8:71:19:59:b0:b5:82:52:80:fd:3e:78:10:26:
         20:d1:bd:44:e3:1c:29:8b:10:70:64:a8:7d:0b:8e:6e:96:67:
         5c:24:2a:88:03:04:1e:a4:de:89:6d:16:1d:9a:32:92:b4:06:
         9d:6b:96:58:0f:15:83:a9:be:bc:d6:62:f9:4d:6f:aa:97:9c:
         fb:af:35:64:a9:5d:f9:69:99:b1:5f:0d:44:0c:74:0a:e4:0c:
         92:74:3e:9d:83:bc:c9:c4:44:41:05:c2:8a:4a:c7:b3:28:f9:
         06:13:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:40:17 2026 by rpki-client