Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130303a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a373130303a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          RnxPdwrnjGV5HSd2Yhryi93FzrahF6CJFblTlBl2760=
Subject key identifier:   BB:F5:56:57:15:84:27:2C:97:9D:48:80:F9:A3:0F:58:9D:D6:D9:4E
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       0482307AFF211D9CA4F6D89BF547032B9DFE126F
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130303a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Wed 28 Jan 2026 23:57:24 +0000
ROA not before:           Wed 28 Jan 2026 23:52:24 +0000
ROA not after:            Wed 27 Jan 2027 23:57:24 +0000
asID:                     215126
IP address blocks:        2a14:7581:7100::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:82:30:7a:ff:21:1d:9c:a4:f6:d8:9b:f5:47:03:2b:9d:fe:12:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Jan 28 23:52:24 2026 GMT
            Not After : Jan 27 23:57:24 2027 GMT
        Subject: CN=BBF556571584272C979D4880F9A30F589DD6D94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:76:69:5b:f3:7f:b5:b3:8c:0e:4a:28:a6:
                    34:77:48:1b:df:67:92:80:69:f6:11:b2:21:11:ee:
                    b5:7b:81:7c:4c:80:a1:63:fb:be:79:3c:c2:f6:6e:
                    af:82:91:14:8d:ec:bc:ac:0a:0d:62:37:52:b2:d3:
                    da:f9:35:e0:01:d5:44:79:70:76:7c:10:a7:6e:8d:
                    e1:3c:c7:51:19:2b:96:48:da:94:51:20:65:b2:d1:
                    f0:2c:ca:2e:89:d9:db:1c:44:35:68:c7:09:85:8b:
                    c5:d1:b1:a0:dc:fd:40:fb:81:30:9b:a6:b4:ac:81:
                    0d:d1:cb:50:1c:19:b0:6b:48:bd:08:33:e0:38:88:
                    82:8d:76:6f:dc:53:e9:0b:6e:10:18:46:25:14:79:
                    11:f0:71:e2:83:ff:48:f3:b5:ff:40:a4:5a:a9:0f:
                    fb:32:57:e9:2c:32:4a:11:7a:70:97:58:0e:92:d7:
                    03:31:e9:34:19:50:96:b6:ef:a7:42:df:08:0a:d6:
                    bd:56:2d:c9:08:2a:05:4a:00:54:36:95:1a:e4:88:
                    0a:a5:ba:58:2e:8d:ad:59:6a:a1:20:02:a1:f0:c8:
                    62:9f:bd:02:ba:b9:49:4b:26:cc:77:69:10:b1:28:
                    d9:d3:c9:9c:5d:68:c8:33:ce:ee:22:db:bb:31:2a:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F5:56:57:15:84:27:2C:97:9D:48:80:F9:A3:0F:58:9D:D6:D9:4E
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373130303a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7100::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:58:ba:27:2e:bf:29:b2:c1:3a:8c:8a:35:f0:e8:e9:11:
         97:68:af:aa:97:08:c8:76:47:f6:38:17:34:a1:dc:ad:38:85:
         88:17:dd:39:56:93:53:9a:84:2d:47:bf:d8:d6:2b:80:c3:96:
         bc:13:ae:c8:39:f7:62:9c:25:76:4c:97:a8:be:5d:29:00:90:
         83:92:08:6d:9c:d0:d8:b0:98:6d:22:4d:2f:8b:6f:38:8d:6f:
         dd:9e:b0:d0:30:e3:3c:57:59:4b:f0:87:18:95:20:73:8f:c8:
         fb:89:40:2a:3b:4c:53:6c:77:28:d7:29:47:44:66:15:0e:9a:
         58:59:f7:2f:f3:1e:b0:db:b9:4d:c9:9f:4f:7f:7c:aa:d3:e4:
         d2:d0:63:24:10:fe:e2:ad:ea:75:c6:ce:fd:a0:6d:1d:8d:f2:
         fa:f0:6f:ae:9e:13:66:f1:55:29:c5:d3:6c:7a:6c:7f:0b:a1:
         7b:ef:9b:7a:1f:52:84:8c:77:42:8f:f1:a9:54:60:0d:1f:af:
         aa:c6:e7:53:5c:8c:f1:8b:2d:50:33:85:e4:d1:b9:3d:40:8e:
         2c:05:9d:9a:b4:b1:42:0c:eb:76:3e:79:b5:74:93:54:ab:18:
         45:46:d1:c5:ea:0e:1d:a5:33:ee:25:2c:eb:1b:aa:1f:59:66:
         d4:6f:7c:0f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUBIIwev8hHZyk9tib9UcDK53+Em8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjAxMjgyMzUyMjRaFw0yNzAxMjcyMzU3MjRaMDMxMTAvBgNV
BAMTKEJCRjU1NjU3MTU4NDI3MkM5NzlENDg4MEY5QTMwRjU4OURENkQ5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSXZpW/N/tbOMDkoopjR3SBvf
Z5KAafYRsiER7rV7gXxMgKFj+755PML2bq+CkRSN7LysCg1iN1Ky09r5NeAB1UR5
cHZ8EKdujeE8x1EZK5ZI2pRRIGWy0fAsyi6J2dscRDVoxwmFi8XRsaDc/UD7gTCb
prSsgQ3Ry1AcGbBrSL0IM+A4iIKNdm/cU+kLbhAYRiUUeRHwceKD/0jztf9ApFqp
D/syV+ksMkoRenCXWA6S1wMx6TQZUJa276dC3wgK1r1WLckIKgVKAFQ2lRrkiAql
ulguja1ZaqEgAqHwyGKfvQK6uUlLJsx3aRCxKNnTyZxdaMgzzu4i27sxKksnAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUu/VWVxWEJyyXnUiA+aMPWJ3W2U4wHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzEzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXEAMA0GCSqGSIb3DQEBCwUAA4IBAQAb
rVi6Jy6/KbLBOoyKNfDo6RGXaK+qlwjIdkf2OBc0odytOIWIF905VpNTmoQtR7/Y
1iuAw5a8E67IOfdinCV2TJeovl0pAJCDkghtnNDYsJhtIk0vi284jW/dnrDQMOM8
V1lL8IcYlSBzj8j7iUAqO0xTbHco1ylHRGYVDppYWfcv8x6w27lNyZ9Pf3yq0+TS
0GMkEP7irep1xs79oG0djfL68G+unhNm8VUpxdNsemx/C6F775t6H1KEjHdCj/Gp
VGANH6+qxudTXIzxiy1QM4Xk0bk9QI4sBZ2atLFCDOt2Pnm1dJNUqxhFRtHF6g4d
pTPuJSzrG6ofWWbUb3wP
-----END CERTIFICATE-----