Route Origin Authorization

$ rpki-client -vvvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a613030303a3a2f33362d3336203d3e20323133393933.roa
File:                     326131343a3763303a613030303a3a2f33362d3336203d3e20323133393933.roa (raw, json)
Hash identifier:          QP7OWKKWf3PNIyI6EQyo6kZJomm5uI4+Yv7UulmCFM8=
Subject key identifier:   EE:21:74:CF:6F:E0:5D:D7:34:19:B2:64:41:8B:1A:92:F4:02:CD:09
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       2B58BEA9046F4B6E86ECF0A837FAE573AC39CCD3
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a613030303a3a2f33362d3336203d3e20323133393933.roa
Signing time:             Thu 01 Oct 2026 21:55:39 +0000
ROA not before:           Thu 01 Oct 2026 21:50:39 +0000
ROA not after:            Thu 30 Sep 2027 21:55:39 +0000
asID:                     213993
IP address blocks:        2a14:7c0:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:58:be:a9:04:6f:4b:6e:86:ec:f0:a8:37:fa:e5:73:ac:39:cc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Oct  1 21:50:39 2026 GMT
            Not After : Sep 30 21:55:39 2027 GMT
        Subject: CN=EE2174CF6FE05DD73419B264418B1A92F402CD09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:e8:c2:f6:f5:db:0c:8c:81:d2:87:50:5a:
                    05:e5:a0:91:99:13:2e:80:f0:67:74:a7:16:be:27:
                    a6:d4:ec:13:fd:30:e3:9a:9e:29:1b:14:45:96:c3:
                    f7:1f:d5:20:49:aa:15:07:8b:2b:64:56:3a:57:78:
                    90:80:0f:78:ea:11:cc:7a:72:a8:c5:c1:16:e4:84:
                    f8:e7:e2:a2:ea:b0:7a:33:63:31:c7:ee:7f:14:73:
                    67:6d:01:47:6d:21:90:08:b3:1f:31:02:a7:9a:f8:
                    3a:ea:b7:ea:7d:a1:7f:da:9d:1f:8c:e2:b5:0c:20:
                    f2:e6:e5:22:c9:9f:3c:29:0f:b1:d0:b4:75:31:ee:
                    57:86:c9:03:25:89:ba:cf:be:a7:20:8f:b9:f4:43:
                    4e:f0:e7:42:8f:69:66:6a:75:7a:8e:df:77:0a:c2:
                    58:5b:94:db:f4:5b:78:09:02:d1:5c:3a:3d:9b:8a:
                    00:95:0a:29:27:ad:e5:1c:c9:56:e6:ec:85:38:8b:
                    dc:b5:18:f8:92:a3:4f:91:67:7f:12:75:8b:be:fa:
                    09:57:14:a7:13:4c:62:f8:80:4d:4a:1d:47:24:23:
                    66:19:4f:04:81:23:18:8a:20:4d:7b:4d:39:22:a3:
                    71:04:93:ba:f2:c4:d1:ad:ae:ed:88:e1:c1:4e:0d:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:21:74:CF:6F:E0:5D:D7:34:19:B2:64:41:8B:1A:92:F4:02:CD:09
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a613030303a3a2f33362d3336203d3e20323133393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         83:0b:f3:ae:1a:0a:39:e8:86:8f:fe:8b:58:0e:0e:f3:b2:0d:
         de:10:c8:f9:b5:bd:b2:18:af:2f:2a:ca:22:9c:69:9a:1e:55:
         47:30:bd:5e:bb:68:1f:c9:f2:75:75:cb:06:9e:f8:28:a0:a6:
         0f:8a:7d:7e:7e:b4:a8:01:95:5a:f3:d9:df:cb:e1:cf:5a:d3:
         09:f1:4e:ad:f2:bd:71:4e:24:22:a9:a5:f6:a2:89:17:85:fb:
         dd:f6:01:57:a8:1c:70:1b:29:2d:9a:15:01:20:ad:47:3f:34:
         44:df:a2:cb:3d:01:b6:84:ba:24:95:42:3e:0d:35:3e:2a:b3:
         c5:fd:1a:7c:a8:25:89:d6:93:0e:c2:c5:18:e7:0b:0b:be:7f:
         92:3f:70:61:3a:76:13:1d:a0:ba:8b:95:51:c4:69:8f:2e:87:
         b0:51:95:4b:d2:85:ed:fa:9b:01:ea:7a:b8:49:46:2b:a4:3a:
         89:fb:b2:bc:6d:65:63:2e:13:28:98:21:85:2d:d6:6b:6a:53:
         2f:9c:41:f7:e6:6f:d2:ea:c3:59:b9:89:c3:7d:a1:97:9e:fc:
         67:61:85:91:dd:0d:d2:2b:fe:a8:b5:e1:3b:19:61:a2:f6:27:
         98:15:a6:46:38:40:a2:61:5e:43:0e:96:cd:8d:41:e5:b4:e4:
         90:7d:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 05:40:27 2026 by rpki-client