Route Origin Authorization

$ rpki-client -vvvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa
File:                     326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa (raw, json)
Hash identifier:          Y94TLYFilTFeSdXVh1WSif2UNaMjeieitbghbfWtiyM=
Subject key identifier:   64:56:FA:FF:C8:31:00:97:FA:0E:A8:EC:8E:2C:19:5F:FC:A2:E8:03
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       499E99AD8B7644A49A706C0884FA273D201C692F
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa
Signing time:             Mon 14 Sep 2026 13:14:24 +0000
ROA not before:           Mon 14 Sep 2026 13:09:24 +0000
ROA not after:            Mon 13 Sep 2027 13:14:24 +0000
asID:                     216056
IP address blocks:        2a14:7580:790::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9e:99:ad:8b:76:44:a4:9a:70:6c:08:84:fa:27:3d:20:1c:69:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Sep 14 13:09:24 2026 GMT
            Not After : Sep 13 13:14:24 2027 GMT
        Subject: CN=6456FAFFC8310097FA0EA8EC8E2C195FFCA2E803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:57:ba:5d:1f:1b:3b:d0:66:a4:7f:74:f2:b7:
                    1e:0a:bb:62:aa:be:72:38:d4:b9:91:af:ed:00:93:
                    dc:83:99:88:f5:2c:85:a7:8c:f4:f3:9f:2a:72:7a:
                    d0:77:22:6a:0c:1f:3b:64:86:a0:c4:b2:1d:50:6f:
                    4c:aa:8f:3d:fb:37:11:66:d5:8a:1f:79:66:56:4c:
                    76:6b:db:de:f1:d4:9f:8a:88:94:b6:87:05:2d:73:
                    d7:33:45:82:eb:76:11:b1:48:ca:30:83:92:0b:30:
                    45:59:2a:49:ed:92:b7:90:ab:cf:a2:98:16:fa:5e:
                    a0:dc:5d:7f:ca:f3:df:b4:f7:0f:e4:c0:0d:65:6b:
                    ab:9f:76:d5:a1:01:8f:04:20:c3:fd:4d:a4:c6:4a:
                    d3:78:7a:8b:06:90:f4:2f:b4:70:a3:06:9d:8f:67:
                    cd:7b:1d:e0:b6:ab:f6:0e:e9:10:86:4a:7b:ee:78:
                    0f:06:f1:c6:04:6d:7c:e3:52:4b:ea:48:2a:83:14:
                    bb:f8:b1:fc:81:ef:be:f4:f9:45:11:c9:1b:d2:b8:
                    d4:27:5d:2e:42:f3:b0:63:3a:8c:ec:f9:58:0b:13:
                    31:73:36:fe:fd:1e:9f:15:95:98:0a:6b:23:2b:9f:
                    f6:80:b7:3d:a7:43:83:1e:d3:60:f5:60:eb:33:e4:
                    37:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:56:FA:FF:C8:31:00:97:FA:0E:A8:EC:8E:2C:19:5F:FC:A2:E8:03
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:790::/44

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:b5:1f:be:69:17:24:a3:ff:e9:d6:17:19:1e:8f:e3:a3:
         94:8a:34:93:ea:9e:98:58:51:63:ab:1c:f0:e0:3b:f5:67:00:
         63:83:80:e7:ac:fa:a2:30:6c:8e:b5:cb:29:44:7c:5d:b0:76:
         c5:4c:c7:bd:8b:8c:a2:92:a8:ae:89:da:28:89:13:52:f0:1c:
         10:95:26:97:6b:1b:c0:bb:d8:7e:3f:01:da:f2:7d:a8:a1:2d:
         e4:8e:b3:8e:83:55:8b:0d:83:ee:14:b4:29:99:6e:cd:36:52:
         34:5f:50:2f:44:9f:25:fb:84:a1:50:7d:9d:28:f8:ff:25:2a:
         fe:5f:c0:04:68:81:00:0b:00:67:96:a9:d4:7d:ab:2c:3c:fc:
         89:c6:97:78:1e:66:06:76:c1:a4:4b:0d:28:c6:fa:22:ef:1f:
         f7:1b:09:dc:c0:27:5f:b0:62:ab:44:2d:f3:e8:6b:5e:af:6d:
         c1:23:bb:cf:6a:9c:aa:8d:85:97:bd:d6:9b:3f:52:64:c0:ae:
         2a:b9:a7:2a:77:a1:8a:90:7b:0c:7d:02:f0:88:ee:4d:dc:e6:
         a2:30:55:0c:df:04:e6:72:a6:e3:65:58:56:df:8c:23:5f:b7:
         a0:de:f4:bb:f0:a3:b9:9b:c8:40:bf:4e:46:c7:57:45:70:ae:
         15:46:10:2a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUSZ6ZrYt2RKSacGwIhPonPSAcaS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZERTZGQzdBQzQ2N0YxMEI1NzA1RTYwQjhGRERBMDJG
RkZENzM3ODAeFw0yNjA5MTQxMzA5MjRaFw0yNzA5MTMxMzE0MjRaMDMxMTAvBgNV
BAMTKDY0NTZGQUZGQzgzMTAwOTdGQTBFQThFQzhFMkMxOTVGRkNBMkU4MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxV7pdHxs70Gakf3Tytx4Ku2Kq
vnI41LmRr+0Ak9yDmYj1LIWnjPTznypyetB3ImoMHztkhqDEsh1Qb0yqjz37NxFm
1YofeWZWTHZr297x1J+KiJS2hwUtc9czRYLrdhGxSMowg5ILMEVZKkntkreQq8+i
mBb6XqDcXX/K89+09w/kwA1la6ufdtWhAY8EIMP9TaTGStN4eosGkPQvtHCjBp2P
Z817HeC2q/YO6RCGSnvueA8G8cYEbXzjUkvqSCqDFLv4sfyB7770+UURyRvSuNQn
XS5C87BjOozs+VgLEzFzNv79Hp8VlZgKayMrn/aAtz2nQ4Me02D1YOsz5DcrAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUZFb6/8gxAJf6DqjsjiwZX/yi6AMwHwYDVR0j
BBgwFoAU9t5vx6xGfxC1cF5guP3aAv/9c3gwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5heGl2b3JhLm5ldC9yZXBvL0F4aXZv
cmEtTmV0LzIvRjZERTZGQzdBQzQ2N0YxMEI1NzA1RTYwQjhGRERBMDJGRkZENzM3
OC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2Zl
LTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNkRFNkZDN0FDNDY3RjEwQjU3MDVF
NjBCOEZEREEwMkZGRkQ3Mzc4LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF
BzALhm5yc3luYzovL3Jwa2kuYXhpdm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8y
LzMyNjEzMTM0M2EzNzM1MzgzMDNhMzczOTMwM2EzYTJmMzQzNDJkMzQzODIwM2Qz
ZTIwMzIzMTM2MzAzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhR1gAeQMA0GCSqGSIb3DQEBCwUA
A4IBAQCWX7UfvmkXJKP/6dYXGR6P46OUijST6p6YWFFjqxzw4Dv1ZwBjg4DnrPqi
MGyOtcspRHxdsHbFTMe9i4yikqiuidooiRNS8BwQlSaXaxvAu9h+PwHa8n2ooS3k
jrOOg1WLDYPuFLQpmW7NNlI0X1AvRJ8l+4ShUH2dKPj/JSr+X8AEaIEACwBnlqnU
fassPPyJxpd4HmYGdsGkSw0oxvoi7x/3GwncwCdfsGKrRC3z6Gter23BI7vPapyq
jYWXvdabP1JkwK4quacqd6GKkHsMfQLwiO5N3OaiMFUM3wTmcqbjZVhW34wjX7eg
3vS78KO5m8hAv05Gx1dFcK4VRhAq
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:07:18 2026 by rpki-client