Route Origin Authorization

$ rpki-client -vvvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa
File:                     326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (raw, json)
Hash identifier:          U5NltMntTdJW5KCu3YFt7Qwqav8txVbUzsHYL6b7Upw=
Subject key identifier:   64:68:B4:54:15:B6:60:29:01:1F:BF:89:8C:3C:7D:63:82:D6:C5:B7
Certificate issuer:       /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Certificate serial:       088F4CF066F597B3E44CFECABB27C897F5037852
Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa
Signing time:             Thu 29 Oct 2026 12:44:33 +0000
ROA not before:           Thu 29 Oct 2026 12:39:33 +0000
ROA not after:            Thu 28 Oct 2027 12:44:33 +0000
asID:                     214513
IP address blocks:        2a11:f2c0:ffa0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 09:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8f:4c:f0:66:f5:97:b3:e4:4c:fe:ca:bb:27:c8:97:f5:03:78:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
        Validity
            Not Before: Oct 29 12:39:33 2026 GMT
            Not After : Oct 28 12:44:33 2027 GMT
        Subject: CN=6468B45415B66029011FBF898C3C7D6382D6C5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:50:b5:2c:9d:69:90:78:7d:c1:a4:40:54:
                    87:4f:fd:0d:48:42:74:e5:e1:09:67:62:5d:12:b2:
                    63:80:b8:c3:c9:12:13:98:ce:ba:b1:2c:7b:d2:67:
                    f6:41:d0:25:89:51:3d:46:35:c2:bc:94:08:eb:49:
                    28:b1:fc:9c:1d:a4:06:7c:1a:3f:10:dd:47:61:ce:
                    c6:30:5f:c5:28:92:8f:df:bc:0a:5c:2e:fa:21:d4:
                    11:19:59:90:24:0e:d3:3b:07:36:2d:c8:c2:b8:aa:
                    00:34:50:cf:48:30:9f:2a:39:55:28:6d:d1:56:21:
                    00:97:8e:dd:06:0e:63:d5:79:eb:a1:d5:ac:85:ff:
                    a6:6c:77:c8:39:8e:99:19:3d:c5:f4:7d:72:a3:13:
                    5f:13:3d:9d:0e:6f:07:d8:a2:8d:7a:5a:29:dc:4b:
                    3f:84:3f:ee:a4:59:29:67:26:2e:3e:d0:97:b5:95:
                    6b:62:dd:47:9d:52:ab:bc:29:f0:a4:d6:c8:e0:20:
                    78:7b:d9:9c:55:b3:b2:a7:f3:a5:cb:a5:ea:78:4b:
                    62:5a:6a:11:01:18:b2:45:a7:54:95:08:ba:a7:19:
                    ca:23:fa:b4:a3:fd:7b:06:e5:c7:6a:c1:b0:07:87:
                    99:85:08:20:a0:7b:c0:0c:c2:ab:45:a4:60:75:79:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:68:B4:54:15:B6:60:29:01:1F:BF:89:8C:3C:7D:63:82:D6:C5:B7
            X509v3 Authority Key Identifier:
                keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffa0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:3b:8b:c7:7e:7c:aa:41:3c:da:16:8a:42:83:2d:a4:32:cd:
         3a:4b:4e:78:c5:44:70:b2:5e:78:59:a5:0b:15:60:18:0b:d6:
         52:95:db:4f:18:19:29:92:65:cb:d5:ab:6f:83:73:92:8d:70:
         02:98:db:35:09:bd:c0:21:5e:31:fb:09:52:0f:5c:06:d6:4b:
         cd:9e:5c:1c:e4:f4:b2:5a:10:c4:2a:a2:cc:f0:31:f2:0b:32:
         96:b3:fb:f8:64:c6:32:4b:5c:a2:38:b7:33:3d:c3:15:cc:6d:
         60:0f:28:36:7c:5e:eb:8b:5e:5a:75:31:72:1b:d1:f8:a2:a2:
         d8:b6:a6:7b:ea:8e:8c:2d:d9:07:ba:1e:10:c1:3e:79:07:be:
         e9:80:d8:b5:a0:44:42:db:72:70:c4:dc:31:c8:34:e7:7e:12:
         03:d8:ff:08:f6:f9:8a:6b:17:e8:95:eb:60:aa:66:5f:2c:a1:
         71:b2:a6:12:d2:3f:0e:f5:63:37:61:cd:6b:6e:3f:c6:be:12:
         f1:67:2a:6d:b0:30:d8:e5:cb:3d:3f:a8:67:e9:82:0f:5a:bd:
         d1:d5:dc:e8:03:e4:dc:8c:d9:5e:24:1a:75:e3:14:20:aa:34:
         14:c8:a4:35:5d:17:08:74:5d:ec:8e:21:1e:4a:5b:9c:cf:c0:
         6c:1a:b8:8d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIUCI9M8Gb1l7PkTP7KuyfIl/UDeFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdE
NTQ3ODZEMzAeFw0yNjEwMjkxMjM5MzNaFw0yNzEwMjgxMjQ0MzNaMDMxMTAvBgNV
BAMTKDY0NjhCNDU0MTVCNjYwMjkwMTFGQkY4OThDM0M3RDYzODJENkM1QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzv1C1LJ1pkHh9waRAVIdP/Q1I
QnTl4QlnYl0SsmOAuMPJEhOYzrqxLHvSZ/ZB0CWJUT1GNcK8lAjrSSix/JwdpAZ8
Gj8Q3UdhzsYwX8Uoko/fvApcLvoh1BEZWZAkDtM7BzYtyMK4qgA0UM9IMJ8qOVUo
bdFWIQCXjt0GDmPVeeuh1ayF/6Zsd8g5jpkZPcX0fXKjE18TPZ0ObwfYoo16Winc
Sz+EP+6kWSlnJi4+0Je1lWti3UedUqu8KfCk1sjgIHh72ZxVs7Kn86XLpep4S2Ja
ahEBGLJFp1SVCLqnGcoj+rSj/XsG5cdqwbAHh5mFCCCge8AMwqtFpGB1eeszAgMB
AAGjggJ7MIICdzAdBgNVHQ4EFgQUZGi0VBW2YCkBH7+JjDx9Y4LWxbcwHwYDVR0j
BBgwFoAUbZS517fBinpJen6fXi4il9VHhtMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzFlYmZkNTM2NDkyMDRlZTNiNDdhOTVjMTA0NTdkNTgzLzAv
NkQ5NEI5RDdCN0MxOEE3QTQ5N0E3RTlGNUUyRTIyOTdENTQ3ODZEMy5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy82RDk0QjlEN0I3QzE4QTdBNDk3QTdFOUY1RTJFMjI5
N0Q1NDc4NkQzLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT
cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8xZWJm
ZDUzNjQ5MjA0ZWUzYjQ3YTk1YzEwNDU3ZDU4My8wLzMyNjEzMTMxM2E2NjMyNjMz
MDNhNjY2NjYxMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzMjMxMzQzNTMxMzMu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwQqEfLA/6AwDQYJKoZIhvcNAQELBQADggEBADo7i8d+fKpBPNoW
ikKDLaQyzTpLTnjFRHCyXnhZpQsVYBgL1lKV208YGSmSZcvVq2+Dc5KNcAKY2zUJ
vcAhXjH7CVIPXAbWS82eXBzk9LJaEMQqoszwMfILMpaz+/hkxjJLXKI4tzM9wxXM
bWAPKDZ8XuuLXlp1MXIb0fiioti2pnvqjowt2Qe6HhDBPnkHvumA2LWgRELbcnDE
3DHINOd+EgPY/wj2+YprF+iV62CqZl8soXGyphLSPw71YzdhzWtuP8a+EvFnKm2w
MNjlyz0/qGfpgg9avdHV3OgD5NyM2V4kGnXjFCCqNBTIpDVdFwh0XeyOIR5KW5zP
wGwauI0=
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:52:09 2026 by rpki-client