Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa
File:                     326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa (raw, json)
Hash identifier:          eGiBzdm6fyksXiJWpGlPO46ReYhQHjX5dUeMAWpK10U=
Subject key identifier:   26:E1:82:D4:EB:55:47:5D:D8:ED:BB:8C:EC:F7:58:23:80:12:4B:A9
Certificate issuer:       /CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
Certificate serial:       2C00B40CA2C9AB597CA6767AC5F3320489519560
Authority key identifier: 5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa
Signing time:             Tue 29 Apr 2025 15:19:15 +0000
ROA not before:           Tue 29 Apr 2025 15:14:15 +0000
ROA not after:            Tue 28 Apr 2026 15:19:15 +0000
asID:                     215390
IP address blocks:        2a14:7c0:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 08:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:00:b4:0c:a2:c9:ab:59:7c:a6:76:7a:c5:f3:32:04:89:51:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8e21c6890bd79ab764d91b60c39c3b7e4985e1
        Validity
            Not Before: Apr 29 15:14:15 2025 GMT
            Not After : Apr 28 15:19:15 2026 GMT
        Subject: CN=26E182D4EB55475DD8EDBB8CECF7582380124BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:95:68:56:53:c4:71:2e:00:a5:62:da:0d:d0:
                    f8:1b:40:60:4c:c5:6d:a0:9e:82:28:7a:f1:4d:41:
                    57:ed:ea:f5:0a:ff:d1:80:50:8c:60:41:1d:2b:6d:
                    7a:20:1f:7a:11:bb:5d:61:2f:41:1c:2d:fe:9f:d0:
                    78:f8:31:c5:4f:7b:7d:42:39:08:1f:b9:73:25:e5:
                    1f:90:2c:53:a1:01:13:1c:56:7d:e9:fd:f2:63:7a:
                    3e:f6:65:c3:de:47:85:38:50:09:98:2c:74:a7:c2:
                    14:55:a0:54:1b:f7:a4:33:05:4a:8e:38:b6:6a:46:
                    be:c0:4b:54:aa:7a:a9:98:16:9d:37:99:df:e3:b9:
                    47:cc:83:34:8a:a1:6b:2e:60:bc:cf:b3:69:41:76:
                    e9:e7:10:2d:5f:50:fa:99:d5:af:0d:2a:02:57:b7:
                    c6:f0:72:df:90:d9:ce:9c:52:8e:33:39:d5:90:c5:
                    ba:94:e8:15:7e:7b:f6:4f:90:cc:d0:1c:11:26:b8:
                    5b:be:bc:38:98:52:95:81:64:30:cf:55:49:a5:37:
                    09:29:7c:00:58:29:f2:de:0d:df:9d:26:65:2a:b3:
                    a0:5f:56:26:de:c5:e3:74:89:1b:b0:02:0e:76:14:
                    4e:0a:09:f2:64:fd:88:40:85:cc:74:45:02:b8:a4:
                    7c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E1:82:D4:EB:55:47:5D:D8:ED:BB:8C:EC:F7:58:23:80:12:4B:A9
            X509v3 Authority Key Identifier:
                keyid:5B:8E:21:C6:89:0B:D7:9A:B7:64:D9:1B:60:C3:9C:3B:7E:49:85:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/1/326131343a3763303a3230303a3a2f34302d3438203d3e20323135333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:dc:d4:7d:5e:14:d7:26:12:c5:87:57:a9:5c:0d:56:f7:
         fb:ea:7f:ae:a8:c6:43:1d:c0:19:ff:99:54:0a:a1:08:f3:37:
         3c:52:f9:42:a0:9e:73:1e:ce:44:d8:b4:2e:eb:3b:4c:83:38:
         48:5b:b0:25:ea:b0:6e:28:fd:19:38:83:67:34:2a:17:45:8b:
         86:ad:a0:67:40:39:6b:66:99:c4:30:a0:a7:cd:af:2f:f7:73:
         16:95:4d:0a:ef:14:4d:69:43:98:f7:7e:4b:b1:37:6e:f6:1c:
         e3:9e:69:f7:62:56:a3:56:be:58:3c:38:d2:64:18:55:6f:c9:
         de:d5:8e:f0:01:be:e0:46:8e:fe:e6:a7:cc:d6:e9:e6:f4:28:
         40:a4:d6:ec:f8:c0:c7:12:74:f6:5c:9d:f4:01:56:fe:1d:b9:
         8f:62:98:ed:b3:ab:ed:ab:7b:27:8d:10:33:64:8a:c8:30:bf:
         0f:0a:69:eb:6c:da:1d:fa:29:81:f9:b7:9e:36:ea:93:c4:ad:
         7d:d6:be:7e:3e:ee:62:27:d4:c9:f4:b2:67:76:4e:33:0d:41:
         7a:6f:fd:f4:0a:cd:ba:52:41:01:3c:54:70:f8:d9:26:79:38:
         6b:c0:c2:39:a9:e5:b5:e0:08:9f:c2:c3:ab:68:8f:bd:e3:59:
         98:ab:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:44:37 2025 by rpki-client