Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f34302d3430203d3e20323134393135.roa
File:                     326131343a3763303a373030303a3a2f34302d3430203d3e20323134393135.roa (raw, json)
Hash identifier:          PlRWkWgQg4KrJj4jYqk+Jf1bZ49AygWawdo2E3OqoyE=
Subject key identifier:   DC:CF:65:DF:E7:E0:F9:31:E1:15:61:A5:49:C4:66:85:46:D4:16:77
Certificate issuer:       /CN=6F08383FF15292BFB6A427602811D5E225F0853C
Certificate serial:       5B665A8FC4823552D8C55D7B1528C5D06D140BA8
Authority key identifier: 6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
Authority info access:    rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f34302d3430203d3e20323134393135.roa
Signing time:             Mon 01 Sep 2025 07:42:58 +0000
ROA not before:           Mon 01 Sep 2025 07:37:58 +0000
ROA not after:            Mon 31 Aug 2026 07:42:58 +0000
asID:                     214915
IP address blocks:        2a14:7c0:7000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl
                          rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
                          rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:66:5a:8f:c4:82:35:52:d8:c5:5d:7b:15:28:c5:d0:6d:14:0b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F08383FF15292BFB6A427602811D5E225F0853C
        Validity
            Not Before: Sep  1 07:37:58 2025 GMT
            Not After : Aug 31 07:42:58 2026 GMT
        Subject: CN=DCCF65DFE7E0F931E11561A549C4668546D41677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:31:eb:06:9b:5c:bc:a4:6b:55:e3:28:62:ce:
                    1d:ef:4d:f2:bd:da:6b:6e:b6:d3:2a:ca:87:76:87:
                    d0:55:da:61:d5:71:fd:18:34:bd:d5:b9:67:34:66:
                    db:2c:bb:d6:9b:f9:52:48:46:ea:2c:c7:20:3b:65:
                    de:e0:d0:42:fe:e7:be:79:84:9a:e1:ad:92:8d:8a:
                    8a:4d:cb:c0:ae:9f:6d:fa:08:59:cb:89:a5:c5:2b:
                    a2:69:9e:eb:26:8c:24:1f:19:4d:21:33:f0:4b:3e:
                    d8:6d:06:b7:6a:bc:97:c8:eb:ac:08:87:49:3e:85:
                    1e:f3:21:f6:a9:1a:0d:64:d1:09:a8:f9:0b:40:08:
                    00:de:00:73:d8:a0:82:10:68:46:50:e5:3a:cc:3d:
                    f2:c5:68:1e:e7:c8:48:c4:02:b2:1c:21:be:fd:aa:
                    d8:d0:ab:15:8c:b0:20:5b:ad:15:ef:93:b5:ab:db:
                    c7:a5:9d:92:e1:3b:35:4e:6c:60:0f:7a:f4:e2:d2:
                    21:b4:ad:3f:fd:fe:ae:10:27:1c:56:37:d3:77:a1:
                    e6:ab:03:ba:a2:b4:5c:35:3d:5d:08:e0:6d:c9:08:
                    82:6a:96:5e:18:4b:a5:e0:b8:a2:d3:d3:0d:35:6d:
                    41:4e:49:7b:63:68:42:ff:58:01:36:75:0c:39:11:
                    ae:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CF:65:DF:E7:E0:F9:31:E1:15:61:A5:49:C4:66:85:46:D4:16:77
            X509v3 Authority Key Identifier:
                keyid:6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f34302d3430203d3e20323134393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:49:52:4d:01:5c:d9:9b:c2:c2:79:0e:4d:a4:2c:78:0f:2a:
         dc:a5:6a:42:ed:a4:4c:a2:1c:3c:33:eb:0b:5a:9c:af:ec:07:
         c9:bc:55:55:30:85:a5:5c:ef:7a:08:ad:bc:91:b3:3d:d0:30:
         aa:6a:ca:fc:dd:0b:0c:83:1c:5f:9f:8e:09:f0:3f:88:dd:92:
         da:4b:6a:e8:92:43:8f:12:3b:e0:55:24:5c:29:33:18:7f:ff:
         e0:27:06:30:2d:d4:1b:e7:ea:d0:05:ea:3b:22:12:4e:e0:08:
         87:b9:02:ae:5d:40:cf:50:fd:b4:85:80:f6:1d:69:6b:4e:d7:
         f7:2a:a9:17:09:e9:c0:3a:e6:a1:02:d6:2d:cf:c4:ae:37:6a:
         2d:cb:0e:ee:8b:c8:81:14:55:1c:94:16:cb:26:23:d3:4f:76:
         77:3b:e1:0c:5a:2a:7b:a7:cd:f1:78:50:72:83:33:09:32:6e:
         00:95:ce:4e:a2:16:a3:e4:0b:e4:f1:ef:5a:9b:c0:16:e9:88:
         5d:f5:98:17:ac:d6:4a:3d:59:55:83:22:53:60:a7:65:cb:58:
         af:40:a4:25:90:fe:83:c4:03:13:12:48:79:eb:5a:56:c6:e8:
         92:8c:9a:16:dc:87:42:f6:b4:65:0d:9e:14:be:79:ef:87:2b:
         aa:82:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:04:13 2025 by rpki-client