Route Origin Authorization

$ rpki-client -vvf rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d3438203d3e203233393539.roa
File:                     326130373a643838303a3a2f32392d3438203d3e203233393539.roa (raw, json)
Hash identifier:          qGd+wIVY1wqkASQibEXj2QpbD1aPO5BnQO1eh6F4i0c=
Subject key identifier:   6A:BC:20:0A:3C:59:B0:96:27:17:2D:E2:10:F8:DA:F4:CE:9A:F7:E7
Certificate issuer:       /CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
Certificate serial:       25EB7A82D28B4C69B0B979C10BC626C84B29A1BC
Authority key identifier: B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d3438203d3e203233393539.roa
Signing time:             Thu 16 Jul 2026 17:44:11 +0000
ROA not before:           Thu 16 Jul 2026 17:39:11 +0000
ROA not after:            Thu 15 Jul 2027 17:44:11 +0000
asID:                     23959
IP address blocks:        2a07:d880::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl
                          rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:eb:7a:82:d2:8b:4c:69:b0:b9:79:c1:0b:c6:26:c8:4b:29:a1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55e2e72d7ffde6bceb73ce26f185c678a23892d
        Validity
            Not Before: Jul 16 17:39:11 2026 GMT
            Not After : Jul 15 17:44:11 2027 GMT
        Subject: CN=6ABC200A3C59B09627172DE210F8DAF4CE9AF7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:5c:d2:f0:21:4e:90:8d:e7:f7:aa:28:26:
                    d8:d6:40:62:3e:4f:07:53:2b:3a:59:ed:46:13:93:
                    ea:79:27:af:ae:88:65:e6:a8:6a:d3:dd:60:91:e6:
                    df:9b:98:31:14:2b:b8:1b:c1:b1:33:2b:6c:98:8a:
                    cd:60:20:e6:47:39:10:ad:a9:3f:08:c1:bb:c3:6a:
                    ee:c7:04:bd:76:33:94:3b:44:b6:96:b5:00:27:bd:
                    7f:53:52:6a:0a:eb:b3:0b:33:4f:52:0a:c5:46:8c:
                    9a:07:74:a1:ae:65:07:05:fd:24:a9:1b:16:72:89:
                    dd:ac:48:15:d3:2b:c6:ec:c5:d8:9c:42:f2:61:e0:
                    22:89:11:d1:ca:e8:75:4e:89:8f:30:56:74:82:be:
                    99:36:88:5f:2d:95:dc:85:8b:72:ad:db:22:d0:60:
                    42:7e:a5:11:86:8d:bb:58:e0:7d:8d:58:b0:f3:a7:
                    bd:bd:1c:e0:7e:ae:b7:ed:f8:7b:50:93:aa:fa:e8:
                    93:82:0a:d7:f6:ea:20:97:a4:74:7e:4d:4e:fb:d2:
                    80:1b:09:7c:51:18:bb:2e:55:1c:4d:b2:f1:51:82:
                    26:0f:4c:97:b4:69:0e:fd:cf:6d:c2:6f:1c:ab:f9:
                    9d:9a:e0:64:e2:e3:09:6b:b0:a6:d3:79:45:47:34:
                    a4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BC:20:0A:3C:59:B0:96:27:17:2D:E2:10:F8:DA:F4:CE:9A:F7:E7
            X509v3 Authority Key Identifier:
                keyid:B5:5E:2E:72:D7:FF:DE:6B:CE:B7:3C:E2:6F:18:5C:67:8A:23:89:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/1/B55E2E72D7FFDE6BCEB73CE26F185C678A23892D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV4uctf_3mvOtzzibxhcZ4ojiS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/1/326130373a643838303a3a2f32392d3438203d3e203233393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:d880::/29

    Signature Algorithm: sha256WithRSAEncryption
         a7:2d:55:f7:dd:db:8a:0e:3f:96:85:11:44:2c:a7:29:4e:71:
         59:b7:a2:fa:d3:db:63:5d:a2:71:a4:0a:39:92:d4:30:16:73:
         65:8e:d9:0f:b7:af:cd:20:e9:eb:0f:ba:71:2b:94:8b:07:a8:
         b3:60:b6:21:00:bc:86:d8:8e:81:39:3b:00:19:f8:3d:bb:8d:
         3b:c2:69:76:d8:38:40:6a:11:ba:42:54:90:7c:4e:f1:f3:3e:
         84:0d:d3:40:89:30:77:cf:d3:05:fb:f5:5b:32:8d:67:7e:c6:
         c5:21:29:ab:3c:f7:02:9f:d0:29:1f:0a:c9:61:07:8a:b7:7d:
         23:58:61:4a:98:07:eb:6d:8f:b2:09:a1:8f:6e:a7:8e:e2:ff:
         50:8a:5b:45:51:51:17:a7:58:b2:f4:de:85:10:27:cb:61:f4:
         86:85:e4:6c:b3:14:86:7b:86:b7:a1:bc:72:8a:cb:1c:4f:0e:
         c5:b8:7f:63:c5:ff:91:f9:aa:d9:1d:6f:ce:8c:2a:06:2a:4b:
         f0:e4:36:4b:87:ca:08:4f:8e:e0:50:4f:eb:7f:52:73:cc:6e:
         57:f7:1f:f2:1f:c2:b9:dc:a6:87:2e:2d:3d:9b:03:f6:bc:79:
         68:0c:4f:01:e3:6e:8c:43:6d:20:10:97:91:f5:55:58:29:d6:
         66:2c:2f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----