Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538303a656330303a3a2f34302d3438203d3e20323034343634.roa
File:                     326131343a373538303a656330303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          MQTJTwawVpjTikXSAYl16k5OpJk/FStKUf4+T7/H41U=
Subject key identifier:   62:5B:5A:3F:AF:E3:AD:C6:06:12:64:54:AE:6D:B0:BB:4D:7D:A6:63
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       7729E0D74318CEEAB6C7C6AB259A0D8CCB9E37FC
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538303a656330303a3a2f34302d3438203d3e20323034343634.roa
Signing time:             Sun 01 Nov 2026 03:46:05 +0000
ROA not before:           Sun 01 Nov 2026 03:41:05 +0000
ROA not after:            Sun 31 Oct 2027 03:46:05 +0000
asID:                     204464
IP address blocks:        2a14:7580:ec00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:29:e0:d7:43:18:ce:ea:b6:c7:c6:ab:25:9a:0d:8c:cb:9e:37:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Nov  1 03:41:05 2026 GMT
            Not After : Oct 31 03:46:05 2027 GMT
        Subject: CN=625B5A3FAFE3ADC606126454AE6DB0BB4D7DA663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:2f:42:6b:ec:67:18:92:96:ef:e8:6a:19:
                    e6:a9:b6:6d:43:70:36:fe:7e:26:c4:57:eb:74:96:
                    96:b4:cd:e8:e5:e3:ac:92:d8:e9:f3:5e:7f:56:25:
                    70:08:3d:7b:5d:0c:b7:13:48:40:d8:4d:67:1f:d8:
                    f3:6c:8f:77:35:83:a9:41:d9:8e:37:ec:87:8d:4b:
                    8a:cd:1e:73:9e:5d:ad:2c:b2:97:08:4c:cf:9e:c7:
                    41:8c:56:90:df:22:92:2b:d6:14:7c:f9:f1:c9:6c:
                    c0:01:29:f2:9d:d7:52:e8:50:55:4d:b8:31:aa:8a:
                    81:97:39:06:f8:6f:91:24:1a:08:30:9a:0b:1f:13:
                    a4:30:ff:d0:5a:4a:ae:9c:22:d8:21:a4:49:55:5d:
                    07:33:f5:9a:f7:85:ea:3d:40:d8:6d:fa:c0:e1:e2:
                    8f:ce:ab:e9:4f:b2:a1:e9:bd:15:46:a6:fc:04:e3:
                    7f:38:00:47:0e:c5:81:c1:76:23:f7:65:01:11:24:
                    13:61:52:fd:48:1f:c5:fe:5a:27:1c:5d:01:b1:04:
                    b9:74:35:b0:ca:65:bf:e8:f8:11:cb:a5:1a:f8:6f:
                    e7:55:39:de:40:45:e9:09:84:da:05:2d:cc:57:c6:
                    1d:b8:b0:fa:22:dd:3d:91:7a:b7:ce:f8:f8:71:9e:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5B:5A:3F:AF:E3:AD:C6:06:12:64:54:AE:6D:B0:BB:4D:7D:A6:63
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538303a656330303a3a2f34302d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:ea:5a:cd:6b:b6:68:a4:ce:73:c9:1f:1b:8a:7d:26:22:90:
         de:02:64:c8:33:a1:50:66:3c:6e:b0:a4:f9:6f:71:ec:15:4f:
         85:02:c7:2c:fb:0a:9c:db:e2:53:1b:58:a9:bb:be:7a:c8:86:
         7f:66:49:ae:24:d1:37:c9:f4:fe:42:3c:3e:b8:28:72:69:b2:
         ae:b0:f4:bf:33:72:ef:b3:ad:bd:d3:6e:82:b3:77:43:75:92:
         e8:a9:a1:f2:d6:c2:6d:4d:4e:38:15:db:8c:3c:49:fd:56:75:
         4c:56:a7:7f:81:83:be:f3:e5:8c:f8:0b:62:11:cb:d3:b9:e8:
         e4:e3:08:12:80:e9:9c:36:a3:67:f4:a7:e3:ee:98:5c:75:93:
         d5:08:07:f5:67:a6:bc:18:e8:22:3c:34:29:d7:c9:e7:a3:05:
         a4:2c:21:79:3a:78:59:34:30:fb:6a:fd:fc:aa:89:8e:62:6a:
         b9:55:0a:b1:3d:51:a6:1d:39:cb:b1:7a:a4:47:68:9d:c1:0c:
         c7:20:57:6c:a5:d1:ee:24:39:ed:be:8d:0f:75:f9:ef:e5:a9:
         db:8c:c3:db:56:2a:5e:fb:bb:61:7b:9d:bc:f5:f2:b5:0a:0a:
         cf:48:a5:48:89:df:78:50:89:eb:28:26:e9:ca:18:3a:71:d7:
         9d:8a:0b:aa
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUdyng10MYzuq2x8arJZoNjMueN/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjExMDEwMzQxMDVaFw0yNzEwMzEwMzQ2MDVaMDMxMTAvBgNV
BAMTKDYyNUI1QTNGQUZFM0FEQzYwNjEyNjQ1NEFFNkRCMEJCNEQ3REE2NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYi9Ca+xnGJKW7+hqGeaptm1D
cDb+fibEV+t0lpa0zejl46yS2OnzXn9WJXAIPXtdDLcTSEDYTWcf2PNsj3c1g6lB
2Y437IeNS4rNHnOeXa0sspcITM+ex0GMVpDfIpIr1hR8+fHJbMABKfKd11LoUFVN
uDGqioGXOQb4b5EkGggwmgsfE6Qw/9BaSq6cItghpElVXQcz9Zr3heo9QNht+sDh
4o/Oq+lPsqHpvRVGpvwE4384AEcOxYHBdiP3ZQERJBNhUv1IH8X+WiccXQGxBLl0
NbDKZb/o+BHLpRr4b+dVOd5ARekJhNoFLcxXxh24sPoi3T2RerfO+Phxnv9lAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUYltaP6/jrcYGEmRUrm2wu019pmMwHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMwM2E2NTYzMzAzMDNhM2EyZjM0
MzAyZDM0MzgyMDNkM2UyMDMyMzAzNDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUdYDsMA0G
CSqGSIb3DQEBCwUAA4IBAQB96lrNa7ZopM5zyR8bin0mIpDeAmTIM6FQZjxusKT5
b3HsFU+FAscs+wqc2+JTG1ipu756yIZ/ZkmuJNE3yfT+Qjw+uChyabKusPS/M3Lv
s629026Cs3dDdZLoqaHy1sJtTU44FduMPEn9VnVMVqd/gYO+8+WM+AtiEcvTuejk
4wgSgOmcNqNn9Kfj7phcdZPVCAf1Z6a8GOgiPDQp18nnowWkLCF5OnhZNDD7av38
qomOYmq5VQqxPVGmHTnLsXqkR2idwQzHIFdspdHuJDntvo0Pdfnv5anbjMPbVipe
+7the5289fK1CgrPSKVIid94UInrKCbpyhg6cdediguq
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:59 2026 by rpki-client