Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa
File:                     326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa (raw, json)
Hash identifier:          cmHNwSsgJB/VaDdnkdfkju1YgbPG3251KI3UQp2bHa4=
Subject key identifier:   FD:A4:42:66:0E:EE:46:3B:2B:A6:37:9F:58:E5:35:A3:BF:1E:A7:CF
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       3E75E11B5CA09B5637DC6948B1DB2CF775DCB837
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa
Signing time:             Tue 31 Mar 2026 15:52:08 +0000
ROA not before:           Tue 31 Mar 2026 15:47:08 +0000
ROA not after:            Tue 30 Mar 2027 15:52:08 +0000
asID:                     214843
IP address blocks:        2a14:7c0:4a00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:75:e1:1b:5c:a0:9b:56:37:dc:69:48:b1:db:2c:f7:75:dc:b8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Mar 31 15:47:08 2026 GMT
            Not After : Mar 30 15:52:08 2027 GMT
        Subject: CN=FDA442660EEE463B2BA6379F58E535A3BF1EA7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ee:49:a0:4b:5a:76:0c:59:57:4b:76:69:db:
                    bc:de:ec:b7:0a:9b:7b:4c:38:15:6e:62:f1:3d:cf:
                    f0:d6:f1:b6:26:c8:34:bb:88:24:fd:3c:19:e9:df:
                    63:b4:af:6d:69:78:4a:df:51:aa:d4:e7:4b:2b:69:
                    c1:ad:b1:6b:57:9d:8a:3a:48:82:a8:9b:b8:f2:49:
                    21:e9:0b:94:74:9f:31:49:2d:4d:05:7d:18:81:59:
                    74:c3:77:b4:56:f4:cb:93:87:23:c4:8d:83:94:b3:
                    c7:13:b6:cc:48:c8:a3:12:6b:f6:97:3a:3a:83:d5:
                    55:b8:45:a3:2c:a4:48:3a:70:aa:6b:43:6a:26:84:
                    49:71:93:ec:e1:4d:bd:17:ae:01:92:58:61:e4:2f:
                    d2:7b:f3:c1:de:19:b8:6f:80:5c:25:32:60:97:4e:
                    c0:9d:9b:33:96:37:cc:2f:4a:24:49:64:f4:c8:7c:
                    7d:dc:33:b3:bb:85:d5:4f:9d:70:58:33:ef:c1:ad:
                    85:8a:f7:48:f9:08:b8:6f:00:ea:f1:36:df:d0:58:
                    a8:51:1b:ad:1d:cc:60:fe:67:95:f6:03:44:50:aa:
                    79:0b:fe:02:99:96:3c:81:89:82:b5:f9:7b:de:0e:
                    ee:6b:0a:7e:bf:e9:49:f0:7a:2f:2d:5f:d0:c2:f4:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A4:42:66:0E:EE:46:3B:2B:A6:37:9F:58:E5:35:A3:BF:1E:A7:CF
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a346130303a3a2f34302d3438203d3e20323134383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:4a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:89:f7:06:fc:81:cc:f4:eb:be:2d:a0:06:9b:ca:d4:2f:
         a2:46:4e:91:c4:77:26:3b:60:e1:33:f8:c3:00:08:60:9a:9a:
         26:48:c5:07:1e:c9:9c:64:f2:64:49:14:68:3c:2d:96:a5:f9:
         7f:c9:4d:ae:06:54:14:53:82:5f:0f:cf:4a:0c:26:6a:80:36:
         eb:ab:82:7f:61:d2:a4:59:22:07:5b:68:7f:c4:7e:9d:a0:ef:
         09:37:ec:af:8d:da:92:bc:02:22:c4:b1:b0:f5:9f:d4:43:1f:
         34:c7:78:bd:f2:0b:c8:e6:e4:ac:e0:d3:18:81:a2:ce:ff:e4:
         0e:b7:ea:f6:2c:05:31:32:18:ad:b1:07:f8:26:f9:3c:2c:09:
         9c:5a:41:d9:a7:c1:e2:59:a1:fd:8f:47:87:93:7d:1b:df:03:
         28:0b:e0:06:03:5e:21:43:40:d8:03:45:c9:b0:35:03:bd:5f:
         e2:07:a6:05:42:b0:37:b4:97:a8:9b:bb:79:0a:f4:48:8b:1f:
         9e:70:4f:25:2d:74:c8:00:6e:96:c7:04:59:de:8d:6d:fd:13:
         60:3e:88:b3:2f:2e:f5:25:df:c3:22:57:c4:ce:e7:b7:b1:15:
         1c:45:6a:86:f0:51:33:59:28:56:d2:6e:81:ff:09:7d:20:63:
         d1:4e:b6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:45 2026 by rpki-client