Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323134393333.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323134393333.roa (raw, json)
Hash identifier:          nv5FYIniyhL8y2TADrQlELKR7jNp99pTBR/Sw9OoRts=
Subject key identifier:   5E:42:FF:D0:21:9C:87:DA:B9:43:33:50:9B:81:F1:3D:A4:46:18:CD
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       3958D19C89C0265BBEB8142E3988A6BD51C91313
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323134393333.roa
Signing time:             Wed 18 Mar 2026 16:45:01 +0000
ROA not before:           Wed 18 Mar 2026 16:40:01 +0000
ROA not after:            Wed 17 Mar 2027 16:45:01 +0000
asID:                     214933
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:58:d1:9c:89:c0:26:5b:be:b8:14:2e:39:88:a6:bd:51:c9:13:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:40:01 2026 GMT
            Not After : Mar 17 16:45:01 2027 GMT
        Subject: CN=5E42FFD0219C87DAB94333509B81F13DA44618CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:33:81:e0:ef:54:75:0f:93:23:57:b5:81:
                    4f:d4:54:e8:b9:68:b4:11:48:2a:04:66:fd:40:34:
                    1e:4d:6f:76:df:e6:23:9f:c8:33:75:b0:61:d4:1e:
                    86:a3:9f:f0:b6:2a:bd:cc:04:12:2a:9d:ec:14:b6:
                    2b:63:e9:4d:4d:c4:79:39:0c:e2:19:e2:46:19:04:
                    de:23:92:7a:9f:03:dd:8d:50:7b:cc:cd:1e:38:9d:
                    26:69:2d:dc:a9:5d:f9:bc:e9:b7:53:de:0e:79:65:
                    bc:aa:33:74:f8:96:f8:60:91:68:cc:d1:88:03:00:
                    f8:e1:0f:7d:37:e8:7c:f6:a1:a9:6d:d6:d4:4d:9c:
                    b4:53:ab:72:c8:95:67:29:04:b2:20:23:fd:93:c3:
                    0a:02:a4:ec:05:d1:4f:53:1c:4e:85:5f:02:22:ad:
                    36:80:f2:f0:a0:3f:4c:2c:c4:07:6f:7c:5a:f9:c5:
                    05:6a:3f:14:18:d9:b5:b3:56:22:48:6d:0a:f2:c1:
                    53:89:e6:df:56:b3:0e:58:13:7c:08:65:bd:33:23:
                    38:2d:ed:49:89:24:c2:eb:86:9f:22:34:5a:80:bd:
                    b7:c0:f2:44:c3:8e:1e:31:cb:cb:bb:9e:aa:27:dd:
                    27:bc:67:fb:88:c4:04:bc:a5:5f:6d:1c:6e:0b:49:
                    af:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:42:FF:D0:21:9C:87:DA:B9:43:33:50:9B:81:F1:3D:A4:46:18:CD
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323134393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:09:db:5a:48:c6:79:5d:6a:de:b5:78:77:81:8c:b6:2c:73:
         25:01:fe:bb:06:f4:6c:ef:87:81:48:b7:01:00:50:d4:9a:93:
         1f:43:55:62:aa:e3:00:79:1b:08:a2:c3:c7:dd:ba:b8:13:70:
         c4:c2:81:10:88:da:b3:39:e6:03:03:27:93:ff:da:53:0e:54:
         9f:65:9b:ae:82:ac:d0:fb:c5:df:fd:ce:3e:ae:8c:49:34:8c:
         c8:6b:95:2f:fd:b9:45:9b:92:a6:ba:64:2d:75:5f:83:99:65:
         ae:06:4b:4f:16:4a:66:28:19:8d:d1:14:c4:23:8a:2f:d2:23:
         61:f8:9f:7c:3e:a0:bb:50:d1:22:d2:f2:c0:07:f3:d0:e8:49:
         0d:0b:8a:f0:91:9e:fc:0b:d9:98:08:81:b9:0b:93:5a:97:17:
         15:80:87:5c:6a:ef:b7:4d:55:8b:64:d7:2f:89:4e:d1:5a:50:
         bb:28:d3:4c:07:96:f7:17:c9:05:5e:77:12:db:4c:e9:5b:84:
         38:bc:43:3a:c0:9d:02:f5:7d:3e:88:b8:d8:4b:13:14:a1:d4:
         84:ef:10:e5:c0:b8:f3:e4:e7:34:ba:da:2c:f5:6a:ad:b3:bd:
         58:32:4a:91:c7:6a:e5:fb:0b:57:f4:38:30:89:ff:47:8a:13:
         69:e8:3d:3d
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUOVjRnInAJlu+uBQuOYimvVHJExMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA4REFDNzAyNzFGODA4MEEyMkMxQUVFNDJFRkFGOThF
MTc3Njk1NDAeFw0yNjAzMTgxNjQwMDFaFw0yNzAzMTcxNjQ1MDFaMDMxMTAvBgNV
BAMTKDVFNDJGRkQwMjE5Qzg3REFCOTQzMzM1MDlCODFGMTNEQTQ0NjE4Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwDOB4O9UdQ+TI1e1gU/UVOi5
aLQRSCoEZv1ANB5Nb3bf5iOfyDN1sGHUHoajn/C2Kr3MBBIqnewUtitj6U1NxHk5
DOIZ4kYZBN4jknqfA92NUHvMzR44nSZpLdypXfm86bdT3g55ZbyqM3T4lvhgkWjM
0YgDAPjhD3036Hz2oalt1tRNnLRTq3LIlWcpBLIgI/2TwwoCpOwF0U9THE6FXwIi
rTaA8vCgP0wsxAdvfFr5xQVqPxQY2bWzViJIbQrywVOJ5t9Wsw5YE3wIZb0zIzgt
7UmJJMLrhp8iNFqAvbfA8kTDjh4xy8u7nqon3Se8Z/uIxAS8pV9tHG4LSa9DAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUXkL/0CGch9q5QzNQm4HxPaRGGM0wHwYDVR0j
BBgwFoAUgI2scCcfgICiLBruQu+vmOF3aVQwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5heGl2b3JhLm5ldC9yZXBvL0F4aXZv
cmEtTmV0LzMvODA4REFDNzAyNzFGODA4MEEyMkMxQUVFNDJFRkFGOThFMTc3Njk1
NC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJh
LTQ5MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84MDhEQUM3MDI3MUY4MDgwQTIyQzFB
RUU0MkVGQUY5OEUxNzc2OTU0LmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF
BQcwC4ZwcnN5bmM6Ly9ycGtpLmF4aXZvcmEubmV0L3JlcG8vQXhpdm9yYS1OZXQv
My8zMjYxMzA2NjNhMzE2MzYzMzUzYTY2NjY2NjY2M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzIzMTM0MzkzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxf//MA0GCSqGSIb3DQEB
CwUAA4IBAQCyCdtaSMZ5XWretXh3gYy2LHMlAf67BvRs74eBSLcBAFDUmpMfQ1Vi
quMAeRsIosPH3bq4E3DEwoEQiNqzOeYDAyeT/9pTDlSfZZuugqzQ+8Xf/c4+roxJ
NIzIa5Uv/blFm5KmumQtdV+DmWWuBktPFkpmKBmN0RTEI4ov0iNh+J98PqC7UNEi
0vLAB/PQ6EkNC4rwkZ78C9mYCIG5C5NalxcVgIdcau+3TVWLZNcviU7RWlC7KNNM
B5b3F8kFXncS20zpW4Q4vEM6wJ0C9X0+iLjYSxMUodSE7xDlwLjz5Oc0utos9Wqt
s71YMkqRx2rl+wtX9Dgwif9HihNp6D09
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:59 2026 by rpki-client