Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa
File:                     326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa (raw, json)
Hash identifier:          uSP1b04ypI6YkdcUATcnsfImxsFMEg5GOI5iUoGVizg=
Subject key identifier:   3F:19:AE:C1:2B:76:9B:F2:81:6C:DA:E3:56:C4:90:01:7F:2F:FD:FF
Certificate issuer:       /CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
Certificate serial:       54BAEAD5429684C7C6AD0EF4D1ED2E929BB561B5
Authority key identifier: EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa
Signing time:             Tue 16 Sep 2025 15:33:58 +0000
ROA not before:           Tue 16 Sep 2025 15:28:58 +0000
ROA not after:            Tue 15 Sep 2026 15:33:58 +0000
asID:                     44817
IP address blocks:        2a0f:85c1:325::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ba:ea:d5:42:96:84:c7:c6:ad:0e:f4:d1:ed:2e:92:9b:b5:61:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52
        Validity
            Not Before: Sep 16 15:28:58 2025 GMT
            Not After : Sep 15 15:33:58 2026 GMT
        Subject: CN=3F19AEC12B769BF2816CDAE356C490017F2FFDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d1:b1:b9:1c:88:11:95:aa:74:b1:d3:fd:98:
                    a8:34:92:a1:a0:51:f2:c6:31:da:50:ed:d6:e1:bc:
                    55:df:10:19:1e:83:bc:31:d9:f3:88:23:65:21:01:
                    35:1e:cc:c9:a0:48:44:b0:a9:1d:06:c3:f0:6c:9a:
                    50:87:f3:6a:f4:28:42:56:35:25:f3:17:95:91:b6:
                    e2:e7:32:fb:3e:c0:6b:46:82:39:36:f4:c6:16:d0:
                    7b:09:b7:f8:7c:eb:04:84:00:3a:22:dd:e6:32:4e:
                    02:f3:56:61:da:ff:51:41:70:fd:78:c2:55:f2:68:
                    79:4c:8a:39:f9:a6:cf:c6:8f:9e:c7:b2:57:68:61:
                    2c:48:af:55:c9:88:ef:e1:66:6c:b6:7a:a6:2d:22:
                    1b:7f:45:5e:e6:5f:d3:2d:07:42:cf:09:68:b7:f6:
                    79:05:83:1d:23:11:69:18:1e:ff:4c:de:c6:45:cb:
                    ee:39:14:a8:ae:da:f5:e2:94:b0:10:5b:b3:ce:34:
                    72:e7:5f:44:74:48:21:b9:73:c5:0d:be:76:bf:ae:
                    16:f1:26:5c:36:bc:f5:d7:0c:05:b5:83:3c:b5:c1:
                    14:5d:43:84:c1:2a:05:02:1b:35:89:69:fd:4e:fa:
                    0c:de:5f:6d:5e:65:0f:30:20:5a:50:ab:f2:53:c2:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:19:AE:C1:2B:76:9B:F2:81:6C:DA:E3:56:C4:90:01:7F:2F:FD:FF
            X509v3 Authority Key Identifier:
                keyid:EE:B9:FB:9A:32:9D:DB:5B:94:FC:5E:24:24:E5:72:EC:B9:EE:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/EEB9FB9A329DDB5B94FC5E2424E572ECB9EEDE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/1/326130663a383563313a3332353a3a2f34382d3438203d3e203434383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:325::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:1d:81:e2:18:d5:19:76:f9:a3:0b:28:a1:ef:ad:a5:66:d8:
         7f:8f:2e:3b:11:94:b9:98:aa:62:aa:95:89:52:51:d2:e6:12:
         4a:bb:0c:24:d1:2d:f9:87:98:7a:24:50:90:04:2c:97:9d:84:
         cb:e2:80:cf:19:7c:22:07:ac:8b:e9:bf:28:68:9a:e3:2c:56:
         69:ec:fb:12:95:7c:1f:75:88:77:eb:92:f0:11:48:1c:fb:89:
         e8:20:1e:73:93:4f:e3:78:c6:bd:9a:f1:06:c8:76:24:ec:9a:
         4e:74:9b:7a:f2:b4:a3:2b:6a:a7:f8:df:1d:ab:66:b7:87:59:
         20:7f:65:99:87:87:b3:fb:47:28:15:4b:68:c4:51:98:54:87:
         2f:7d:5e:d8:75:4a:db:82:89:33:b9:70:fd:73:47:43:87:bd:
         ab:f3:53:0e:fc:51:f0:87:ac:90:90:f4:5a:30:50:61:af:ae:
         06:03:9e:98:63:8d:d0:e9:7b:e5:73:e1:ef:8b:e5:31:8f:fe:
         4b:b0:4e:79:3b:f0:2f:56:9c:86:87:c9:8c:28:ab:89:a9:bc:
         47:12:25:56:5c:24:a0:10:64:5d:50:29:7d:e0:bb:60:30:4c:
         2f:51:ad:23:47:0d:18:60:dd:c6:6a:d8:73:06:fb:80:68:ae:
         fb:c6:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----