Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363030303a3a2f34302d3438203d3e20323134353135.roa
File:                     326131343a3763303a363030303a3a2f34302d3438203d3e20323134353135.roa (raw, json)
Hash identifier:          qzjjn/u4kVB0CdOlfVgRbmwdelMPn/1t1ZVBLWhHce8=
Subject key identifier:   4A:69:35:A9:2D:6B:73:0B:DD:31:5D:BA:83:2B:F2:8F:D0:33:CA:1E
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       6C2AD4D062BF5EDDA4D62AEFFD424ECED5ADF82A
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363030303a3a2f34302d3438203d3e20323134353135.roa
Signing time:             Mon 27 Jul 2026 08:14:59 +0000
ROA not before:           Mon 27 Jul 2026 08:09:59 +0000
ROA not after:            Mon 26 Jul 2027 08:14:59 +0000
asID:                     214515
IP address blocks:        2a14:7c0:6000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2a:d4:d0:62:bf:5e:dd:a4:d6:2a:ef:fd:42:4e:ce:d5:ad:f8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Jul 27 08:09:59 2026 GMT
            Not After : Jul 26 08:14:59 2027 GMT
        Subject: CN=4A6935A92D6B730BDD315DBA832BF28FD033CA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:50:5e:30:f8:78:7e:14:36:cd:70:06:57:2a:
                    26:0a:e4:bf:f2:6a:e9:30:4b:28:51:66:9d:8a:19:
                    07:a6:02:b2:8a:76:e9:0c:d0:de:60:ee:c7:a5:f2:
                    19:88:18:7e:0f:1b:94:33:ad:5b:fd:81:13:42:23:
                    8f:c2:8f:9e:0f:0c:30:58:96:e2:dd:dc:b4:5b:bd:
                    95:3f:cd:81:e3:8b:74:88:ac:53:f9:4b:5d:dd:4d:
                    24:16:92:47:fe:9e:49:4f:fe:96:25:d9:f3:31:14:
                    0a:6b:d4:1b:56:eb:fc:be:b1:eb:93:5e:ef:96:9d:
                    c1:08:77:9f:31:0b:ee:78:b2:57:ce:2e:4e:50:8d:
                    9e:97:d9:85:0a:83:fd:18:11:e3:59:7e:ac:32:49:
                    f0:fa:92:cd:2e:38:14:39:a6:c9:4e:04:de:c3:58:
                    03:5f:27:e5:18:f1:94:ad:ea:e7:a8:73:fa:b3:4e:
                    42:40:ba:da:21:5c:65:03:cd:a3:14:10:1c:f8:86:
                    b0:3b:7a:9f:51:16:ce:bb:85:84:33:6b:b9:52:4f:
                    40:76:3e:5a:11:dc:9c:ea:9b:99:a4:8d:24:12:15:
                    27:d0:2e:22:5f:7e:3f:e9:67:f6:39:14:7f:1b:f2:
                    d6:b0:a9:42:f5:d7:03:a1:9d:f8:42:0c:86:9f:45:
                    a9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:69:35:A9:2D:6B:73:0B:DD:31:5D:BA:83:2B:F2:8F:D0:33:CA:1E
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a363030303a3a2f34302d3438203d3e20323134353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:a4:38:a6:d9:84:13:5b:55:d5:56:7e:43:d2:6b:eb:8c:74:
         c0:90:a5:be:9b:52:c9:01:3d:c7:9a:b5:a3:1c:77:87:e7:d2:
         7d:21:6d:0d:7a:b2:cc:93:1c:0e:78:57:29:b5:20:b6:0e:be:
         43:ea:e6:64:91:a6:2f:2b:24:52:45:bc:9e:bb:2c:1c:ae:41:
         f7:db:a3:63:82:0b:e0:8f:54:63:c6:bf:17:ea:80:d7:92:79:
         aa:5a:7f:5d:0c:0e:a8:0e:8a:29:be:d3:f9:25:6a:0e:b4:9e:
         ad:42:4c:97:2d:0e:46:19:43:fd:98:6e:69:12:56:72:45:f5:
         d9:7e:2c:2b:5e:61:96:2b:e3:b2:e0:ac:9a:a7:7f:c4:52:b4:
         86:3b:2d:09:bf:82:57:2b:be:4d:19:44:9a:0a:6a:eb:40:7c:
         d2:03:34:23:e9:3b:1b:c5:fc:c8:9a:6f:2e:3e:28:ad:83:26:
         2a:44:0f:15:05:74:3c:77:56:31:b7:c1:ea:4a:36:46:10:af:
         b4:8b:01:5f:27:8f:bb:c9:5e:af:f2:54:6c:bf:d8:09:fc:39:
         4e:27:aa:b0:f5:dc:e7:8d:80:9a:b8:2a:34:4e:7e:88:10:fa:
         94:22:e8:92:8a:93:c3:64:a2:2f:e7:f2:91:7d:83:cb:f2:5e:
         ea:62:a9:8e
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUbCrU0GK/Xt2k1irv/UJOztWt+CowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWI4ZTIxYzY4OTBiZDc5YWI3NjRkOTFiNjBjMzljM2I3
ZTQ5ODVlMTAeFw0yNjA3MjcwODA5NTlaFw0yNzA3MjYwODE0NTlaMDMxMTAvBgNV
BAMTKDRBNjkzNUE5MkQ2QjczMEJERDMxNURCQTgzMkJGMjhGRDAzM0NBMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUF4w+Hh+FDbNcAZXKiYK5L/y
aukwSyhRZp2KGQemArKKdukM0N5g7sel8hmIGH4PG5QzrVv9gRNCI4/Cj54PDDBY
luLd3LRbvZU/zYHji3SIrFP5S13dTSQWkkf+nklP/pYl2fMxFApr1BtW6/y+seuT
Xu+WncEId58xC+54slfOLk5QjZ6X2YUKg/0YEeNZfqwySfD6ks0uOBQ5pslOBN7D
WANfJ+UY8ZSt6ueoc/qzTkJAutohXGUDzaMUEBz4hrA7ep9RFs67hYQza7lST0B2
PloR3Jzqm5mkjSQSFSfQLiJffj/pZ/Y5FH8b8tawqUL11wOhnfhCDIafRam7AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUSmk1qS1rcwvdMV26gyvyj9Azyh4wHwYDVR0j
BBgwFoAUW44hxokL15q3ZNkbYMOcO35JheEwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud
HwRhMF8wXaBboFmGV3JzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vSW5maW5p
cm91dGUvMS81QjhFMjFDNjg5MEJENzlBQjc2NEQ5MUI2MEMzOUMzQjdFNDk4NUUx
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvVzQ0aHhva0wxNXEzWk5rYllNT2NP
MzVKaGVFLmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1yc3luYzov
L3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvMzI2MTMxMzQzYTM3
NjMzMDNhMzYzMDMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzQzNTMx
MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMA4EAgACMAgDBgAqFAfAYDANBgkqhkiG9w0BAQsFAAOCAQEAi6Q4ptmEE1tV
1VZ+Q9Jr64x0wJClvptSyQE9x5q1oxx3h+fSfSFtDXqyzJMcDnhXKbUgtg6+Q+rm
ZJGmLyskUkW8nrssHK5B99ujY4IL4I9UY8a/F+qA15J5qlp/XQwOqA6KKb7T+SVq
DrSerUJMly0ORhlD/ZhuaRJWckX12X4sK15hlivjsuCsmqd/xFK0hjstCb+CVyu+
TRlEmgpq60B80gM0I+k7G8X8yJpvLj4orYMmKkQPFQV0PHdWMbfB6ko2RhCvtIsB
XyePu8ler/JUbL/YCfw5TieqsPXc542AmrgqNE5+iBD6lCLokoqTw2SiL+fykX2D
y/Je6mKpjg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:52:39 2026 by rpki-client