Route Origin Authorization

$ rpki-client -vvvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa
File:                     326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (raw, json)
Hash identifier:          52am6l6+tQG53jbBmoIbh3IUWWpTrXA2Xko5UCGu8Co=
Subject key identifier:   A0:B0:02:2F:C5:74:2E:0C:66:85:31:3F:3D:0E:71:4E:2A:99:87:77
Certificate issuer:       /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial:       30C4B2B7D30F3129DFE57352FD79386818BC1888
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa
Signing time:             Wed 30 Sep 2026 13:55:39 +0000
ROA not before:           Wed 30 Sep 2026 13:50:39 +0000
ROA not after:            Wed 29 Sep 2027 13:55:39 +0000
asID:                     213850
IP address blocks:        2a14:7c0:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
                          rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 02:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c4:b2:b7:d3:0f:31:29:df:e5:73:52:fd:79:38:68:18:bc:18:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
        Validity
            Not Before: Sep 30 13:50:39 2026 GMT
            Not After : Sep 29 13:55:39 2027 GMT
        Subject: CN=A0B0022FC5742E0C6685313F3D0E714E2A998777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:f4:6d:7d:b9:0a:51:18:97:1a:c0:44:31:
                    f7:67:9c:a2:ec:09:e6:b1:41:8e:47:41:22:89:6a:
                    73:43:75:c2:3a:78:12:e6:fa:05:5f:20:5d:56:4c:
                    c0:ca:89:98:c2:e6:08:cb:a5:0a:40:6d:2b:d7:60:
                    46:86:fa:d2:fb:17:dd:e0:9d:47:fa:94:f9:c7:85:
                    97:24:a0:3b:c3:de:c7:5e:f4:0d:a0:e3:94:2e:a1:
                    d4:6c:23:8d:57:ec:2b:23:54:42:73:9c:77:6e:87:
                    85:ef:c5:ec:76:19:38:99:ba:f5:fd:c5:9c:98:06:
                    31:26:f1:24:d6:eb:75:4c:ef:fe:b9:fb:8b:20:c2:
                    22:fa:52:3b:de:c4:05:e9:aa:e4:66:08:f7:16:6c:
                    25:7b:80:2c:eb:33:b9:91:77:e1:bf:d8:aa:8d:e1:
                    35:96:2c:57:9a:56:8c:d3:a5:b9:b3:26:c6:1e:9f:
                    84:93:be:56:fd:63:fd:a6:f6:55:5c:9f:71:1f:6c:
                    0b:c5:a3:a7:12:f5:9f:7c:93:a1:ff:46:02:27:45:
                    2e:e0:32:81:42:23:3e:1f:fe:cc:12:5b:23:50:b8:
                    f4:9d:84:ee:91:78:44:73:e2:f5:fa:91:bc:93:06:
                    a6:39:55:5e:b4:71:56:20:86:93:0c:cd:1b:d0:0b:
                    a8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B0:02:2F:C5:74:2E:0C:66:85:31:3F:3D:0E:71:4E:2A:99:87:77
            X509v3 Authority Key Identifier:
                keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:5b:f1:29:8f:08:a0:af:13:5e:a3:f1:bc:b8:23:00:55:
         3d:9e:2b:fe:ee:ba:bd:97:8c:95:6f:bb:9e:a1:52:0d:8a:b8:
         74:9b:5b:b4:59:3e:c6:34:e6:4a:2b:3a:5a:34:47:07:dc:a6:
         06:6b:5a:e9:68:aa:2c:8b:2e:67:59:33:99:b2:fd:8b:bd:1e:
         27:64:2a:73:58:60:16:bd:b3:89:c2:5c:8c:69:89:57:26:44:
         79:d2:a4:2c:56:1a:3e:bd:f5:6c:a2:92:36:5a:1e:49:5a:aa:
         a1:8c:f2:2f:e4:40:33:11:d7:24:4f:ed:67:cb:31:7d:b1:c6:
         c1:33:44:68:94:a6:2e:0b:8d:ec:40:45:55:b9:63:1e:fa:08:
         47:f1:5b:3a:97:5a:ef:5c:3c:c5:80:4b:8a:06:0a:44:f5:02:
         14:a0:bf:f9:9b:17:a7:d2:bd:fe:f6:e8:dc:65:ff:5d:3d:f2:
         c3:74:3d:5c:be:b3:40:23:28:4a:2b:c1:c3:4f:d9:35:ed:8f:
         fa:d3:0f:82:b2:73:63:47:a8:67:51:55:dd:b8:a1:b3:3f:52:
         6a:64:53:1c:34:c3:2d:20:49:cd:11:97:ec:91:9c:07:f3:7d:
         1d:29:fc:2d:5d:f0:d9:05:b9:53:00:f1:41:89:78:71:4a:a8:
         cd:e2:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:10:45 2026 by rpki-client