Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a373230303a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          CQ1HGOeFwDXt9DMpKbjhpAu81IHO72nknnPKsL17Tx4=
Subject key identifier:   B4:DF:7F:45:45:2E:EE:A7:E1:34:09:F2:DA:3A:99:85:67:F5:B1:C1
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       763227D50E44550A6C4AE057E499BD6BA5C65B4B
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Wed 04 Feb 2026 20:32:03 +0000
ROA not before:           Wed 04 Feb 2026 20:27:03 +0000
ROA not after:            Wed 03 Feb 2027 20:32:03 +0000
asID:                     215126
IP address blocks:        2a14:7581:7200::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:32:27:d5:0e:44:55:0a:6c:4a:e0:57:e4:99:bd:6b:a5:c6:5b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Feb  4 20:27:03 2026 GMT
            Not After : Feb  3 20:32:03 2027 GMT
        Subject: CN=B4DF7F45452EEEA7E13409F2DA3A998567F5B1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:9d:bb:23:f4:ff:83:22:a9:76:39:10:73:
                    ef:03:85:e6:38:9c:77:2d:ee:32:d7:66:a1:c3:d1:
                    08:5e:c9:9d:60:be:16:92:92:b0:47:02:b1:83:bf:
                    91:6f:d0:ea:42:93:b6:98:72:bc:26:df:5a:7a:e0:
                    35:94:e8:f1:47:cb:45:db:7e:b0:60:58:41:8f:1c:
                    5d:36:f7:ec:21:8a:be:4f:bc:50:82:f1:6e:1a:c8:
                    2a:7e:4b:5b:20:bb:f7:ab:7b:1c:5f:1b:65:f5:28:
                    65:a2:2f:b6:c9:78:7f:90:4f:42:7a:59:5d:01:26:
                    16:b6:7c:35:8e:6d:ce:be:35:94:51:59:db:ab:12:
                    8a:f0:93:04:c4:a9:3d:01:f4:8f:19:d4:bc:2c:f4:
                    d6:6e:f1:6d:6f:5c:14:03:2c:c6:ee:6c:b6:29:c5:
                    62:62:4e:43:2a:fd:cc:dc:d9:e8:18:3e:26:8c:89:
                    2a:50:ea:63:b0:d1:13:54:a8:a1:df:9f:b0:87:46:
                    5e:a1:ca:f3:ce:d6:59:ae:f0:11:f5:1f:88:7d:ea:
                    9a:ff:f0:a6:79:fa:d3:90:4e:6d:ca:c7:99:5e:6e:
                    c1:19:b5:d7:1b:78:d8:70:79:3e:74:61:4f:75:6e:
                    28:4c:3c:43:90:f5:83:4e:44:dc:90:e2:cf:86:cf:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DF:7F:45:45:2E:EE:A7:E1:34:09:F2:DA:3A:99:85:67:F5:B1:C1
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373230303a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7200::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:13:24:9b:a4:df:1b:62:a3:dd:48:28:1d:03:ef:c6:76:b8:
         42:a5:c0:98:77:49:33:f8:5e:28:f9:88:ff:a7:b1:dc:c9:14:
         1a:35:fa:a4:fa:b5:3e:cc:7a:0b:8c:7d:6f:8a:63:38:70:8d:
         94:98:28:29:d6:e8:bf:fc:21:b5:a9:65:76:99:4a:d0:f5:f0:
         75:85:fc:ab:14:6f:ff:48:6a:ac:2e:52:63:cf:9e:55:39:e0:
         25:d4:a9:d7:50:b5:3b:47:a4:48:98:68:8b:b7:dd:80:91:59:
         77:e7:89:63:63:1e:6b:27:08:c7:be:c3:0c:9d:0c:7c:49:00:
         39:4c:a4:1f:e3:01:07:56:be:86:04:ea:b8:57:23:80:96:ff:
         a2:02:63:18:a9:73:e3:a0:f0:7a:d8:97:29:f5:da:a7:da:85:
         16:b4:5a:c3:bf:78:3e:11:11:e6:3d:1b:ad:84:33:03:01:fc:
         bb:12:02:60:55:14:63:7d:2b:83:4c:63:66:61:aa:67:05:10:
         87:a4:bf:e9:4a:a9:75:76:40:56:b9:fd:e1:a6:bd:29:6a:bd:
         e0:99:92:08:ee:e0:f1:0b:35:06:9b:f0:c3:9d:8e:a8:42:33:
         fd:28:d3:19:9d:45:2d:4d:33:90:b4:bb:21:b9:47:ff:b1:61:
         60:8b:aa:3f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUdjIn1Q5EVQpsSuBX5Jm9a6XGW0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjAyMDQyMDI3MDNaFw0yNzAyMDMyMDMyMDNaMDMxMTAvBgNV
BAMTKEI0REY3RjQ1NDUyRUVFQTdFMTM0MDlGMkRBM0E5OTg1NjdGNUIxQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9J27I/T/gyKpdjkQc+8DheY4
nHct7jLXZqHD0QheyZ1gvhaSkrBHArGDv5Fv0OpCk7aYcrwm31p64DWU6PFHy0Xb
frBgWEGPHF029+whir5PvFCC8W4ayCp+S1sgu/erexxfG2X1KGWiL7bJeH+QT0J6
WV0BJha2fDWObc6+NZRRWdurEorwkwTEqT0B9I8Z1Lws9NZu8W1vXBQDLMbubLYp
xWJiTkMq/czc2egYPiaMiSpQ6mOw0RNUqKHfn7CHRl6hyvPO1lmu8BH1H4h96pr/
8KZ5+tOQTm3Kx5lebsEZtdcbeNhweT50YU91bihMPEOQ9YNORNyQ4s+GzxSxAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUtN9/RUUu7qfhNAny2jqZhWf1scEwHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzIzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXIAMA0GCSqGSIb3DQEBCwUAA4IBAQBC
EySbpN8bYqPdSCgdA+/GdrhCpcCYd0kz+F4o+Yj/p7HcyRQaNfqk+rU+zHoLjH1v
imM4cI2UmCgp1ui//CG1qWV2mUrQ9fB1hfyrFG//SGqsLlJjz55VOeAl1KnXULU7
R6RImGiLt92AkVl354ljYx5rJwjHvsMMnQx8SQA5TKQf4wEHVr6GBOq4VyOAlv+i
AmMYqXPjoPB62Jcp9dqn2oUWtFrDv3g+ERHmPRuthDMDAfy7EgJgVRRjfSuDTGNm
YapnBRCHpL/pSql1dkBWuf3hpr0par3gmZII7uDxCzUGm/DDnY6oQjP9KNMZnUUt
TTOQtLshuUf/sWFgi6o/
-----END CERTIFICATE-----