Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353030303a3a2f34302d3438203d3e20323034343634.roa
File:                     326131343a373538313a353030303a3a2f34302d3438203d3e20323034343634.roa (raw, json)
Hash identifier:          iX4wPM/6sDOW8le1PV8VkU2A66lR0wXIuy2x6iH6jSw=
Subject key identifier:   24:17:CA:D7:8E:5E:8E:47:04:7E:97:1F:36:3D:E7:16:FA:28:E7:5B
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       27539BE2A10EACAAA090D4A5349E46C384A519EC
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353030303a3a2f34302d3438203d3e20323034343634.roa
Signing time:             Sun 01 Nov 2026 03:45:54 +0000
ROA not before:           Sun 01 Nov 2026 03:40:54 +0000
ROA not after:            Sun 31 Oct 2027 03:45:54 +0000
asID:                     204464
IP address blocks:        2a14:7581:5000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:53:9b:e2:a1:0e:ac:aa:a0:90:d4:a5:34:9e:46:c3:84:a5:19:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Nov  1 03:40:54 2026 GMT
            Not After : Oct 31 03:45:54 2027 GMT
        Subject: CN=2417CAD78E5E8E47047E971F363DE716FA28E75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:12:63:a9:05:86:67:0c:17:70:5a:d7:96:
                    4d:1a:53:bf:ba:d8:7e:28:5e:38:d2:da:bb:bf:d9:
                    a7:84:2e:ec:93:ec:ac:37:a2:23:fb:40:10:f5:79:
                    7e:79:1c:2f:92:a6:30:4f:bc:fd:c9:df:56:b8:72:
                    e0:ba:bf:35:73:5e:da:cf:5d:16:0d:f1:b5:b0:24:
                    91:12:9e:d8:9b:df:4f:4f:68:2e:d4:6f:85:49:e9:
                    ab:cd:fd:11:d2:f7:ca:e0:48:34:41:8f:73:df:98:
                    a0:db:e9:e9:52:6a:a6:f7:e3:43:6a:d3:52:85:1a:
                    1e:49:cb:fb:f7:0c:4a:e3:7e:27:be:1d:b7:54:f3:
                    0b:28:22:79:35:9d:c4:ec:c3:be:e5:16:d9:a2:00:
                    20:14:e2:eb:66:51:2f:a2:b9:e3:75:e1:9d:6c:c6:
                    3a:d9:64:2b:63:21:72:b5:4a:7c:4c:83:f9:2b:06:
                    b5:e7:ac:2f:55:db:27:56:55:dd:91:dc:40:45:42:
                    cd:7b:6e:f4:9c:90:22:51:63:3f:4d:c7:61:45:79:
                    20:05:fc:2b:7f:92:9f:2c:67:7e:fd:2c:2d:0a:f1:
                    f0:16:78:0c:b1:79:1f:4d:2b:75:6d:cd:57:33:4a:
                    a5:5d:36:8c:dc:f8:c2:b6:46:05:d5:c9:35:47:62:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:17:CA:D7:8E:5E:8E:47:04:7E:97:1F:36:3D:E7:16:FA:28:E7:5B
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353030303a3a2f34302d3438203d3e20323034343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:56:b4:4b:a2:c6:ed:97:1d:fd:60:9b:9c:19:59:3e:eb:d6:
         4f:ae:6e:f1:c3:8c:aa:51:6d:cf:bc:a3:a7:2b:79:cb:21:fb:
         1a:6d:d5:8a:6c:9c:f2:8f:1c:4a:0b:7d:82:d9:87:7d:c7:c3:
         73:95:dc:2d:4f:6e:65:4c:20:b7:17:20:27:cc:cd:e9:e3:88:
         b4:b1:3a:f2:ba:eb:7e:12:17:48:27:81:2d:55:a2:c5:87:27:
         35:72:03:af:a4:ee:d9:55:49:23:1f:65:ed:50:b1:c3:20:ba:
         fe:c8:df:24:03:b5:f9:0f:76:bb:d9:68:c7:eb:08:54:31:35:
         5b:86:50:32:1c:eb:ff:8f:23:f0:f4:4f:d1:7b:13:fa:cb:6c:
         21:67:10:e9:2d:70:a1:d9:fb:b1:c7:70:ca:6c:c9:78:e0:c6:
         95:90:e5:bf:44:53:36:43:7d:73:22:e4:43:62:94:ff:d7:85:
         6c:c5:50:f9:08:7c:09:28:cb:bd:ce:5d:18:0c:f4:00:2b:1b:
         72:74:2e:8b:b6:87:f4:28:b9:f5:85:9a:18:eb:eb:1c:9c:08:
         e5:17:a4:9c:7b:d8:0d:16:18:ef:ec:af:15:dd:5f:6d:9d:25:
         d6:ca:00:5c:5d:90:70:72:90:f5:57:15:bb:d0:e7:7f:4f:2a:
         65:fd:69:8b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUJ1Ob4qEOrKqgkNSlNJ5Gw4SlGewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjExMDEwMzQwNTRaFw0yNzEwMzEwMzQ1NTRaMDMxMTAvBgNV
BAMTKDI0MTdDQUQ3OEU1RThFNDcwNDdFOTcxRjM2M0RFNzE2RkEyOEU3NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25xJjqQWGZwwXcFrXlk0aU7+6
2H4oXjjS2ru/2aeELuyT7Kw3oiP7QBD1eX55HC+SpjBPvP3J31a4cuC6vzVzXtrP
XRYN8bWwJJESntib309PaC7Ub4VJ6avN/RHS98rgSDRBj3PfmKDb6elSaqb340Nq
01KFGh5Jy/v3DErjfie+HbdU8wsoInk1ncTsw77lFtmiACAU4utmUS+iueN14Z1s
xjrZZCtjIXK1SnxMg/krBrXnrC9V2ydWVd2R3EBFQs17bvSckCJRYz9Nx2FFeSAF
/Ct/kp8sZ379LC0K8fAWeAyxeR9NK3VtzVczSqVdNozc+MK2RgXVyTVHYtmHAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUJBfK145ejkcEfpcfNj3nFvoo51swHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMxM2EzNTMwMzAzMDNhM2EyZjM0
MzAyZDM0MzgyMDNkM2UyMDMyMzAzNDM0MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoUdYFQMA0G
CSqGSIb3DQEBCwUAA4IBAQBoVrRLosbtlx39YJucGVk+69ZPrm7xw4yqUW3PvKOn
K3nLIfsabdWKbJzyjxxKC32C2Yd9x8NzldwtT25lTCC3FyAnzM3p44i0sTryuut+
EhdIJ4EtVaLFhyc1cgOvpO7ZVUkjH2XtULHDILr+yN8kA7X5D3a72WjH6whUMTVb
hlAyHOv/jyPw9E/RexP6y2whZxDpLXCh2fuxx3DKbMl44MaVkOW/RFM2Q31zIuRD
YpT/14VsxVD5CHwJKMu9zl0YDPQAKxtydC6Ltof0KLn1hZoY6+scnAjlF6Sce9gN
Fhjv7K8V3V9tnSXWygBcXZBwcpD1VxW70Od/Typl/WmL
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:57 2026 by rpki-client