Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330313a3a2f34382d3438203d3e20323135313236.roa
File:                     326131343a373538313a373330313a3a2f34382d3438203d3e20323135313236.roa (raw, json)
Hash identifier:          hjazt9chbvWqUyy22IgjDAEpa7IrOdiRT/Yz+uIrMJU=
Subject key identifier:   40:5E:7D:51:BD:1F:87:A9:38:4E:5B:7C:5E:0B:DE:4C:C8:60:53:A4
Certificate issuer:       /CN=F78178425D897035E1D77343191BF013B39B03A5
Certificate serial:       0C6AFDCEF6A5ADC145BB900ED10F637FA3F57C52
Authority key identifier: F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330313a3a2f34382d3438203d3e20323135313236.roa
Signing time:             Wed 04 Feb 2026 20:35:16 +0000
ROA not before:           Wed 04 Feb 2026 20:30:16 +0000
ROA not after:            Wed 03 Feb 2027 20:35:16 +0000
asID:                     215126
IP address blocks:        2a14:7581:7301::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6a:fd:ce:f6:a5:ad:c1:45:bb:90:0e:d1:0f:63:7f:a3:f5:7c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78178425D897035E1D77343191BF013B39B03A5
        Validity
            Not Before: Feb  4 20:30:16 2026 GMT
            Not After : Feb  3 20:35:16 2027 GMT
        Subject: CN=405E7D51BD1F87A9384E5B7C5E0BDE4CC86053A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:c3:26:19:b3:5b:9e:6d:24:03:2a:5f:b4:
                    c5:2e:8c:16:53:5c:62:e9:24:eb:b4:f4:91:6c:2f:
                    91:b8:54:5f:ab:3a:01:f9:6a:59:ed:ae:39:3d:f8:
                    87:09:e0:01:b8:2d:9f:62:9b:b0:f0:40:2e:07:7b:
                    75:fd:ad:c7:e1:02:62:64:67:70:81:02:c4:e9:ac:
                    9a:5d:19:64:69:3a:e2:af:14:fb:76:23:15:b5:b3:
                    8b:5d:a9:e7:6b:10:9c:cd:f0:af:38:16:0d:86:ac:
                    ea:50:cc:b0:fb:79:c8:77:3f:d2:b3:ab:9e:25:7e:
                    79:6b:ca:29:aa:5d:b6:72:ed:37:a1:40:68:67:48:
                    62:97:89:5e:b1:ef:7e:80:98:10:8e:4a:76:1e:f8:
                    8f:28:e6:79:c8:c2:e4:a3:03:65:32:37:64:df:16:
                    dd:30:35:e7:f0:83:75:ce:46:d6:90:88:a0:12:3a:
                    47:d6:b1:2a:e0:cd:53:9f:c7:9e:c1:4f:e2:77:3c:
                    ad:50:d6:59:0c:59:d0:84:8f:20:6f:1e:79:c0:85:
                    0a:e7:27:38:b6:04:ce:4b:24:ca:ed:58:d2:12:b3:
                    91:8d:01:86:e3:d3:e9:f9:a5:8d:97:76:e3:b5:3e:
                    15:be:19:78:bc:73:78:3e:98:e2:db:f4:b1:68:ae:
                    0c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5E:7D:51:BD:1F:87:A9:38:4E:5B:7C:5E:0B:DE:4C:C8:60:53:A4
            X509v3 Authority Key Identifier:
                keyid:F7:81:78:42:5D:89:70:35:E1:D7:73:43:19:1B:F0:13:B3:9B:03:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/F78178425D897035E1D77343191BF013B39B03A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F78178425D897035E1D77343191BF013B39B03A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0e1cb023-9002-4e95-bd57-5fb85efa0e97/0/326131343a373538313a373330313a3a2f34382d3438203d3e20323135313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:7301::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:ba:ce:7e:15:b7:55:ca:a1:56:d0:ac:df:5e:9a:18:1e:27:
         90:74:5f:0a:59:1c:b3:4c:bc:1f:03:c3:54:68:ab:fa:f5:de:
         13:47:cd:f0:98:16:3c:73:ca:12:3d:a7:b7:90:e8:4a:22:1f:
         27:9f:72:5b:09:96:05:37:b9:e7:f1:fa:a9:db:69:1c:a3:9f:
         79:34:d4:be:76:78:54:03:18:c9:43:f4:02:90:59:56:e2:cb:
         a0:55:98:01:4c:5f:71:35:d9:59:98:fd:33:2f:b0:59:ab:07:
         41:4a:b9:ab:eb:01:3f:59:1e:a4:8d:d1:f2:7e:7a:03:dd:eb:
         f7:0c:8d:bc:e3:f4:4f:02:72:ba:0b:76:3c:3b:33:e2:dc:a9:
         70:77:7a:b1:d9:1e:b2:b2:52:b0:77:fe:19:a4:61:89:e5:3a:
         c8:c7:1c:69:13:8f:24:19:76:e0:d5:6d:ba:06:45:1d:8e:65:
         24:b1:40:f8:6e:99:8d:a3:b7:87:64:c6:72:ae:5e:ae:11:70:
         4e:a3:29:0a:59:98:df:34:f2:36:06:60:d9:9b:1a:54:a5:af:
         3b:d4:2d:01:68:3f:1f:24:78:82:f1:fd:f8:4f:0d:1f:ab:cc:
         c4:98:79:72:8e:94:80:86:d0:fc:17:cf:79:4e:5b:4e:32:46:
         74:4c:d1:0f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUDGr9zvalrcFFu5AO0Q9jf6P1fFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNC
MzlCMDNBNTAeFw0yNjAyMDQyMDMwMTZaFw0yNzAyMDMyMDM1MTZaMDMxMTAvBgNV
BAMTKDQwNUU3RDUxQkQxRjg3QTkzODRFNUI3QzVFMEJERTRDQzg2MDUzQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWmcMmGbNbnm0kAypftMUujBZT
XGLpJOu09JFsL5G4VF+rOgH5alntrjk9+IcJ4AG4LZ9im7DwQC4He3X9rcfhAmJk
Z3CBAsTprJpdGWRpOuKvFPt2IxW1s4tdqedrEJzN8K84Fg2GrOpQzLD7ech3P9Kz
q54lfnlryimqXbZy7TehQGhnSGKXiV6x736AmBCOSnYe+I8o5nnIwuSjA2UyN2Tf
Ft0wNefwg3XORtaQiKASOkfWsSrgzVOfx57BT+J3PK1Q1lkMWdCEjyBvHnnAhQrn
Jzi2BM5LJMrtWNISs5GNAYbj0+n5pY2XduO1PhW+GXi8c3g+mOLb9LForgw/AgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUQF59Ub0fh6k4Tlt8XgveTMhgU6QwHwYDVR0j
BBgwFoAU94F4Ql2JcDXh13NDGRvwE7ObA6UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGUxY2IwMjMtOTAwMi00ZTk1LWJkNTctNWZiODVlZmEw
ZTk3LzAvRjc4MTc4NDI1RDg5NzAzNUUxRDc3MzQzMTkxQkYwMTNCMzlCMDNBNS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNzgxNzg0MjVEODk3MDM1RTFENzczNDMx
OTFCRjAxM0IzOUIwM0E1LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS8wZTFjYjAyMy05MDAyLTRlOTUtYmQ1Ny01ZmI4NWVmYTBlOTcvMC8zMjYxMzEz
NDNhMzczNTM4MzEzYTM3MzMzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gXMBMA0GCSqGSIb3DQEBCwUAA4IBAQBS
us5+FbdVyqFW0KzfXpoYHieQdF8KWRyzTLwfA8NUaKv69d4TR83wmBY8c8oSPae3
kOhKIh8nn3JbCZYFN7nn8fqp22kco595NNS+dnhUAxjJQ/QCkFlW4sugVZgBTF9x
NdlZmP0zL7BZqwdBSrmr6wE/WR6kjdHyfnoD3ev3DI284/RPAnK6C3Y8OzPi3Klw
d3qx2R6yslKwd/4ZpGGJ5TrIxxxpE48kGXbg1W26BkUdjmUksUD4bpmNo7eHZMZy
rl6uEXBOoykKWZjfNPI2BmDZmxpUpa871C0BaD8fJHiC8f34Tw0fq8zEmHlyjpSA
htD8F895TltOMkZ0TNEP
-----END CERTIFICATE-----