Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-ratatoskr/0/326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa
File:                     326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa (raw, json)
Hash identifier:          MkWSG1tSFTWBC0sUHPPubILPzErTHCGER51m/cNnK7A=
Subject key identifier:   CE:11:05:49:BA:91:C0:5D:D1:48:2D:AE:2C:65:B9:0E:22:89:65:BD
Certificate issuer:       /CN=6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1
Certificate serial:       7335C29B5CC99321891CE71E550681F7CFFE28DE
Authority key identifier: 6B:27:5D:9A:12:3F:3D:56:01:2C:5A:06:7E:2B:A2:B5:FE:34:FA:A1
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa
Signing time:             Mon 27 Apr 2026 19:14:47 +0000
ROA not before:           Mon 27 Apr 2026 19:09:47 +0000
ROA not after:            Mon 26 Apr 2027 19:14:47 +0000
asID:                     214732
IP address blocks:        2a14:7c0:5300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.crl
                          rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:35:c2:9b:5c:c9:93:21:89:1c:e7:1e:55:06:81:f7:cf:fe:28:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1
        Validity
            Not Before: Apr 27 19:09:47 2026 GMT
            Not After : Apr 26 19:14:47 2027 GMT
        Subject: CN=CE110549BA91C05DD1482DAE2C65B90E228965BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:c5:0e:d5:fc:f1:85:f8:d8:9b:aa:96:21:
                    9d:34:a6:29:27:04:54:88:31:5f:7a:13:45:3f:1a:
                    49:5c:38:4b:be:81:41:cf:63:dd:b8:6b:e4:cd:7e:
                    85:54:78:b0:9e:a1:d3:67:ad:53:38:12:63:52:2a:
                    52:26:26:40:ab:f6:2f:0f:e7:82:25:aa:b7:d7:0d:
                    dc:7b:c5:b6:7e:e9:f0:62:0c:a4:db:4b:f5:98:ed:
                    da:83:76:31:6d:87:ef:d4:1b:50:7e:1a:f0:ba:1b:
                    b7:9a:46:16:17:ce:16:5e:ab:f4:54:bb:9d:09:01:
                    70:4a:7b:f5:7a:b3:fd:77:8b:5d:c2:76:c9:dc:92:
                    2b:d8:e6:c2:fa:34:6b:9e:5a:64:94:d7:70:05:48:
                    cb:cc:15:83:cf:97:79:aa:3f:f2:3b:33:1b:9a:2b:
                    03:41:17:aa:1a:d2:5b:96:57:e9:f8:ed:24:f6:04:
                    4f:bc:84:b1:aa:f1:86:dd:b7:13:46:84:ba:1c:db:
                    aa:f1:43:95:ca:84:2d:23:b1:a2:e6:ec:aa:8a:44:
                    75:b4:ca:a4:2e:52:77:0e:9d:31:23:43:0e:4d:82:
                    d3:9e:30:ec:58:4a:b9:bd:d8:06:59:e1:c3:c1:86:
                    b9:42:3a:40:c4:73:c8:b9:da:32:4e:e0:a7:c8:3d:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:11:05:49:BA:91:C0:5D:D1:48:2D:AE:2C:65:B9:0E:22:89:65:BD
            X509v3 Authority Key Identifier:
                keyid:6B:27:5D:9A:12:3F:3D:56:01:2C:5A:06:7E:2B:A2:B5:FE:34:FA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:9b:9b:9e:9a:a1:aa:d5:e2:a7:ff:18:84:13:3f:4f:ef:ec:
         8a:11:5a:44:09:ca:a3:07:80:17:43:41:0c:cf:03:38:33:3c:
         05:b1:7d:34:47:44:98:1c:71:7c:fd:9f:a5:ad:e9:02:ae:17:
         e2:1d:26:0d:e2:24:d6:31:23:80:db:6f:8b:6f:91:ff:70:b4:
         3a:fe:08:a7:07:b7:06:67:ee:f9:3e:29:86:76:8e:4d:a0:f8:
         e6:45:08:0a:fe:f4:a6:30:82:bc:98:6d:88:ea:18:73:27:40:
         81:89:05:b8:36:df:1e:49:a4:29:17:4e:0b:e6:25:0b:c5:41:
         cc:ac:4f:53:05:63:63:0e:e2:cf:98:ca:86:3e:e1:17:6d:9e:
         9f:e5:b5:71:bf:71:50:6f:1a:b4:9d:8b:a9:83:2c:f9:34:05:
         20:cb:cb:d0:bb:76:0b:9a:85:c1:48:e0:21:85:d6:84:a9:79:
         2f:ed:d2:f3:c3:e0:1f:ce:67:72:bf:10:8b:75:5b:c4:64:6b:
         b0:ff:11:68:b4:2c:a1:a6:c9:63:89:24:5a:c5:a1:23:12:04:
         07:5e:3a:8a:79:90:bc:20:a6:3b:54:61:f5:cf:1f:bf:78:c8:
         d5:b7:e3:16:1b:a6:9f:63:08:34:5e:f2:50:30:7a:15:3d:41:
         51:1e:cf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:58:52 2026 by rpki-client