Route Origin Authorization

$ rpki-client -vvvf rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131373a3a2f34382d3438203d3e20323134373632.roa
File:                     326131343a373538313a353131373a3a2f34382d3438203d3e20323134373632.roa (raw, json)
Hash identifier:          637WlN+JuS9D4p6CnFtpY9iZvLAclk0XE/lBDU5itIw=
Subject key identifier:   1C:A3:24:6E:6B:EB:36:E1:74:FC:AD:C5:4A:CD:FC:8A:1F:D5:0F:C6
Certificate issuer:       /CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
Certificate serial:       10C89449D0C5684F8AB0BD66C675D5760F297D0E
Authority key identifier: 90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
Subject info access:      rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131373a3a2f34382d3438203d3e20323134373632.roa
Signing time:             Thu 29 Oct 2026 22:09:35 +0000
ROA not before:           Thu 29 Oct 2026 22:04:35 +0000
ROA not after:            Thu 28 Oct 2027 22:09:35 +0000
asID:                     214762
IP address blocks:        2a14:7581:5117::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl
                          rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c8:94:49:d0:c5:68:4f:8a:b0:bd:66:c6:75:d5:76:0f:29:7d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907BB820440896D6FA0023A0790CD1D78E97F7AF
        Validity
            Not Before: Oct 29 22:04:35 2026 GMT
            Not After : Oct 28 22:09:35 2027 GMT
        Subject: CN=1CA3246E6BEB36E174FCADC54ACDFC8A1FD50FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:85:7c:41:17:4d:57:8e:32:f4:69:ba:49:
                    99:4e:88:d6:e5:49:25:3c:9d:7f:7d:27:e7:4d:bf:
                    c0:2f:26:4e:39:64:aa:0b:af:64:c2:51:d8:62:fc:
                    bf:77:fb:4d:09:fd:17:f2:99:b1:d1:d5:eb:43:d5:
                    4a:94:07:53:47:d4:8e:53:ab:b6:f6:48:17:de:37:
                    0b:94:a9:0e:e0:5f:79:c7:16:f8:b3:42:45:25:43:
                    d3:aa:33:6a:8a:3f:83:68:af:44:88:50:fc:b8:1b:
                    f1:02:06:f3:92:ac:7a:eb:d2:91:17:8b:3f:0c:eb:
                    6f:73:fd:91:3d:6e:03:7d:20:ce:99:03:0a:e9:b1:
                    b1:8e:e8:ec:e4:51:5b:e3:9d:38:aa:c3:ed:a7:3f:
                    38:9c:99:a3:8e:ad:25:73:e8:1b:1a:8c:b4:47:d3:
                    48:ea:84:e9:25:51:4b:50:8e:a9:5d:a1:72:09:57:
                    0b:34:45:b8:6a:97:1d:11:60:57:11:b9:e0:80:3e:
                    ff:3a:f4:e8:9e:c3:1f:5d:45:17:56:3d:f1:82:36:
                    ce:f2:a5:36:e9:ea:76:49:c2:5d:4c:fd:32:7e:f3:
                    b8:72:6d:a1:c4:72:9c:79:6f:d4:83:ab:5d:f1:96:
                    c8:96:30:04:eb:80:e0:84:c9:a2:0f:41:65:e3:8b:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A3:24:6E:6B:EB:36:E1:74:FC:AD:C5:4A:CD:FC:8A:1F:D5:0F:C6
            X509v3 Authority Key Identifier:
                keyid:90:7B:B8:20:44:08:96:D6:FA:00:23:A0:79:0C:D1:D7:8E:97:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/907BB820440896D6FA0023A0790CD1D78E97F7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/907BB820440896D6FA0023A0790CD1D78E97F7AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/8/326131343a373538313a353131373a3a2f34382d3438203d3e20323134373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:5117::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:66:c0:c0:7d:0a:d0:dd:f8:a4:f5:3c:29:39:03:36:68:de:
         e2:6d:e2:3b:17:f6:5a:ee:f4:39:59:69:c8:d4:40:44:86:89:
         39:a8:53:e5:65:f6:6a:1c:97:24:0a:49:f8:69:ba:e9:1f:19:
         f5:ff:98:55:e9:28:41:bd:38:c0:ec:d1:f4:4f:51:53:7d:30:
         f5:b2:62:85:f3:7a:eb:83:50:52:59:91:1e:e9:87:c5:90:66:
         67:b4:4a:7d:7f:57:f3:0d:01:0a:29:f3:26:72:8e:dd:1d:8f:
         3e:03:e9:18:81:8b:96:f4:c0:79:dc:c3:94:06:b7:f0:f1:38:
         f2:05:10:d5:8c:31:36:c0:fd:e0:6f:5d:fb:cd:14:98:d0:00:
         15:bb:5f:3e:f5:a8:08:e2:f1:a3:45:f4:97:f0:49:02:eb:11:
         c3:51:f9:e4:81:12:67:9c:10:e8:40:83:d8:0b:9a:87:5b:81:
         c7:e7:5c:7f:b6:57:81:90:7d:33:6b:b8:91:54:ce:86:f3:4c:
         5e:7a:d0:ab:02:ca:f5:09:22:1f:7b:eb:ec:11:82:30:cc:98:
         2e:73:b1:6e:a1:62:19:fb:77:3f:04:4a:f0:98:c0:3a:ab:00:
         ad:34:27:e9:74:00:fc:a7:f6:90:70:5f:4a:c4:39:e1:c7:be:
         74:8f:09:ee
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUEMiUSdDFaE+KsL1mxnXVdg8pfQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA3QkI4MjA0NDA4OTZENkZBMDAyM0EwNzkwQ0QxRDc4
RTk3RjdBRjAeFw0yNjEwMjkyMjA0MzVaFw0yNzEwMjgyMjA5MzVaMDMxMTAvBgNV
BAMTKDFDQTMyNDZFNkJFQjM2RTE3NEZDQURDNTRBQ0RGQzhBMUZENTBGQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcb4V8QRdNV44y9Gm6SZlOiNbl
SSU8nX99J+dNv8AvJk45ZKoLr2TCUdhi/L93+00J/RfymbHR1etD1UqUB1NH1I5T
q7b2SBfeNwuUqQ7gX3nHFvizQkUlQ9OqM2qKP4Nor0SIUPy4G/ECBvOSrHrr0pEX
iz8M629z/ZE9bgN9IM6ZAwrpsbGO6OzkUVvjnTiqw+2nPzicmaOOrSVz6BsajLRH
00jqhOklUUtQjqldoXIJVws0Rbhqlx0RYFcRueCAPv869Oiewx9dRRdWPfGCNs7y
pTbp6nZJwl1M/TJ+87hybaHEcpx5b9SDq13xlsiWMATrgOCEyaIPQWXji13JAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUHKMkbmvrNuF0/K3FSs38ih/VD8YwHwYDVR0j
BBgwFoAUkHu4IEQIltb6ACOgeQzR146X968wDgYDVR0PAQH/BAQDAgeAMG0GA1Ud
HwRmMGQwYqBgoF6GXHJzeW5jOi8vcnBraS5zaHJkc2Vydi5jb20vcmVwby9NWU5P
Qy1ORVhUU0VSVi84LzkwN0JCODIwNDQwODk2RDZGQTAwMjNBMDc5MENEMUQ3OEU5
N0Y3QUYuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvOTA3QkI4MjA0NDA4OTZENkZB
MDAyM0EwNzkwQ0QxRDc4RTk3RjdBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGA
BggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLnNocmRzZXJ2LmNvbS9yZXBvL01ZTk9D
LU5FWFRTRVJWLzgvMzI2MTMxMzQzYTM3MzUzODMxM2EzNTMxMzEzNzNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMyMzEzNDM3MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYFRFzAN
BgkqhkiG9w0BAQsFAAOCAQEAh2bAwH0K0N34pPU8KTkDNmje4m3iOxf2Wu70OVlp
yNRARIaJOahT5WX2ahyXJApJ+Gm66R8Z9f+YVekoQb04wOzR9E9RU30w9bJihfN6
64NQUlmRHumHxZBmZ7RKfX9X8w0BCinzJnKO3R2PPgPpGIGLlvTAedzDlAa38PE4
8gUQ1YwxNsD94G9d+80UmNAAFbtfPvWoCOLxo0X0l/BJAusRw1H55IESZ5wQ6ECD
2Auah1uBx+dcf7ZXgZB9M2u4kVTOhvNMXnrQqwLK9QkiH3vr7BGCMMyYLnOxbqFi
Gft3PwRK8JjAOqsArTQn6XQA/Kf2kHBfSsQ54ce+dI8J7g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:40:45 2026 by rpki-client