Route Origin Authorization

$ rpki-client -vvf rpki.ruinet.work/repo/CowGrassland/1/326131343a373538303a3766303a3a2f34342d3438203d3e20323131353735.roa
File:                     326131343a373538303a3766303a3a2f34342d3438203d3e20323131353735.roa (raw, json)
Hash identifier:          xs5OSATUMh4KPJx7EesV0UG6mwsDMqtjTNlnO9J0gRg=
Subject key identifier:   B5:88:77:04:8E:36:C6:64:B7:98:93:06:02:F8:50:D3:5E:72:03:12
Certificate issuer:       /CN=F43B66D2018EF2CDC4298697BF28C89F11886124
Certificate serial:       3982A8CF26AF645DCBEC56F36F7AC0786E0C8D48
Authority key identifier: F4:3B:66:D2:01:8E:F2:CD:C4:29:86:97:BF:28:C8:9F:11:88:61:24
Authority info access:    rsync://rpki.axivora.net/repo/Axivora-Net/2/F43B66D2018EF2CDC4298697BF28C89F11886124.cer
Subject info access:      rsync://rpki.ruinet.work/repo/CowGrassland/1/326131343a373538303a3766303a3a2f34342d3438203d3e20323131353735.roa
Signing time:             Mon 22 Sep 2025 23:53:42 +0000
ROA not before:           Mon 22 Sep 2025 23:48:42 +0000
ROA not after:            Mon 21 Sep 2026 23:53:42 +0000
asID:                     211575
IP address blocks:        2a14:7580:7f0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ruinet.work/repo/CowGrassland/1/F43B66D2018EF2CDC4298697BF28C89F11886124.crl
                          rsync://rpki.ruinet.work/repo/CowGrassland/1/F43B66D2018EF2CDC4298697BF28C89F11886124.mft
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F43B66D2018EF2CDC4298697BF28C89F11886124.cer
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:82:a8:cf:26:af:64:5d:cb:ec:56:f3:6f:7a:c0:78:6e:0c:8d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F43B66D2018EF2CDC4298697BF28C89F11886124
        Validity
            Not Before: Sep 22 23:48:42 2025 GMT
            Not After : Sep 21 23:53:42 2026 GMT
        Subject: CN=B58877048E36C664B798930602F850D35E720312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:a4:2d:8b:2f:f4:b9:1a:16:fc:10:d9:95:
                    af:9c:0d:45:34:11:ed:f5:29:fc:c9:0c:56:8a:c1:
                    8e:9a:5b:e5:f2:a8:fe:bb:c0:85:21:1b:f6:24:cc:
                    48:09:59:0f:70:7d:c6:57:af:39:76:45:c1:40:2f:
                    78:7e:a6:41:cc:1e:ba:ad:25:5f:f0:60:77:36:e9:
                    bf:2b:df:ab:d7:40:b3:2a:ea:39:cd:38:7e:8c:71:
                    23:fd:21:68:13:1f:11:46:29:42:af:ee:f0:5d:6c:
                    46:e4:eb:26:81:45:3f:9e:53:07:6b:6c:97:2d:53:
                    9f:1e:35:36:93:04:22:3b:3e:5f:13:04:2e:45:4b:
                    0d:79:9b:97:ee:0e:0f:de:1f:f9:7b:1f:86:5f:33:
                    ca:b7:b5:3f:43:b7:6c:6a:44:51:3b:60:db:74:98:
                    2d:14:2a:e4:f8:ca:c6:a0:07:fc:dc:4a:30:45:70:
                    f9:c8:05:e8:29:84:09:55:eb:04:ab:a9:93:ec:4e:
                    2f:20:7a:24:c1:ef:03:bf:45:59:34:10:fc:64:42:
                    27:13:13:76:f4:5b:c0:df:97:3a:f1:6d:4f:84:0d:
                    00:9e:ef:3d:92:0a:c6:37:3f:b7:04:ca:61:24:78:
                    68:fb:48:40:4d:52:cc:50:dd:fe:6e:3d:92:9c:26:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:88:77:04:8E:36:C6:64:B7:98:93:06:02:F8:50:D3:5E:72:03:12
            X509v3 Authority Key Identifier:
                keyid:F4:3B:66:D2:01:8E:F2:CD:C4:29:86:97:BF:28:C8:9F:11:88:61:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ruinet.work/repo/CowGrassland/1/F43B66D2018EF2CDC4298697BF28C89F11886124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F43B66D2018EF2CDC4298697BF28C89F11886124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ruinet.work/repo/CowGrassland/1/326131343a373538303a3766303a3a2f34342d3438203d3e20323131353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:7f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4d:16:88:82:fd:58:d5:82:3b:cf:6a:de:c5:fb:bc:aa:7c:56:
         fd:3e:78:70:44:20:97:64:c0:fa:ec:77:ed:e5:a1:4b:ff:a8:
         15:3a:15:76:07:0a:6e:cf:82:cd:ed:27:89:0f:a6:e4:1d:bf:
         e9:50:ce:5d:7c:b4:b4:dc:2e:46:50:43:b4:7c:7c:06:26:07:
         0e:80:4e:3f:c0:61:75:64:3d:5f:64:ac:d0:84:cc:20:29:cf:
         03:a0:7b:64:46:56:aa:db:cb:37:8d:48:ff:ff:3d:fa:ad:d0:
         dc:2f:c5:f8:22:b9:dc:b2:e7:db:7c:3f:dd:ff:39:07:6d:fd:
         40:1c:9e:e1:f1:15:b3:aa:c8:d4:15:e1:92:ac:b1:c0:83:2b:
         7c:0c:f0:7d:98:0d:89:f0:ee:33:2b:79:5a:59:85:f0:82:89:
         6c:ef:90:32:a4:35:02:01:88:d1:54:b4:bb:c1:fc:41:85:bc:
         fe:f4:8a:a1:10:23:f4:45:98:8f:a0:c8:a8:00:39:e9:04:4a:
         12:a5:c7:58:5e:39:2a:43:51:cf:03:40:2e:eb:dd:76:f2:c2:
         18:44:55:1d:a2:f2:4e:ed:82:e3:13:e1:dc:c6:3d:cf:b6:24:
         02:73:ec:39:ac:3e:cd:d1:c5:4b:66:51:fa:73:e3:49:49:6f:
         dc:31:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:49:25 2025 by rpki-client