Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215363.roa
File:                     AS215363.roa (raw, json)
Hash identifier:          jDMx6wTmsX3dKmH9NGCBNZHzcTbxDubkiH9qgiPT/LM=
Subject key identifier:   2A:78:FD:A1:34:D5:F6:00:18:E6:19:F5:7B:2B:03:A4:0C:44:E7:1F
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       152297F63A9575DD12E6917587EE2AE9C1B6FE2F
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215363.roa
Signing time:             Fri 05 Jun 2026 08:45:53 +0000
ROA not before:           Fri 05 Jun 2026 08:40:53 +0000
ROA not after:            Fri 04 Jun 2027 08:45:53 +0000
asID:                     215363
IP address blocks:        2a07:54c1:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:22:97:f6:3a:95:75:dd:12:e6:91:75:87:ee:2a:e9:c1:b6:fe:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:53 2026 GMT
            Not After : Jun  4 08:45:53 2027 GMT
        Subject: CN=2A78FDA134D5F60018E619F57B2B03A40C44E71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:34:20:ef:55:93:9c:d3:5f:95:1c:ac:fc:fe:
                    30:d4:ad:d1:48:cd:95:43:df:f3:3f:c6:8c:45:bc:
                    90:09:e7:e8:a2:35:24:20:ad:8d:c4:c8:50:fc:cf:
                    dd:fa:48:0c:e1:96:5f:3d:a8:5d:d6:b1:93:d2:f3:
                    a1:d5:07:e4:74:30:dd:d7:0a:77:18:72:cc:a2:26:
                    c9:f3:61:2e:e7:2d:25:66:75:6f:e5:d8:52:82:1d:
                    8e:34:00:31:f1:c5:a7:a2:71:4b:bd:50:f3:33:62:
                    41:63:77:97:d9:a1:d5:4c:81:c1:07:9a:c0:b3:24:
                    97:81:54:ec:bc:c9:a8:8d:28:6f:9d:76:7f:93:39:
                    90:af:8c:e7:57:81:81:56:5a:9a:6b:e4:83:26:4f:
                    e4:38:a9:08:ee:92:eb:74:a8:08:da:c6:c6:63:22:
                    b2:1e:65:fb:c1:92:7d:97:ae:b5:85:3b:2e:ac:34:
                    d6:76:c5:92:63:12:e0:f5:6f:e5:b8:65:46:ae:e9:
                    df:2a:09:22:ae:41:49:44:21:5c:54:b1:2b:9f:08:
                    3b:78:c0:fa:e9:e6:f2:ed:1f:58:11:95:cf:72:84:
                    fb:f5:cb:04:8a:74:00:5f:02:2b:f2:51:d0:63:c6:
                    3c:75:e4:55:5c:76:a9:87:0f:25:6f:90:c8:4c:13:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:78:FD:A1:34:D5:F6:00:18:E6:19:F5:7B:2B:03:A4:0C:44:E7:1F
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS215363.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:3c:65:3d:4b:23:d3:4f:cf:bb:86:c3:55:57:f6:05:98:c7:
         a7:03:0f:f1:7d:b9:2f:05:fc:a7:e5:98:71:a2:d5:1e:d1:09:
         08:16:1e:fe:60:e0:ad:d1:ef:13:88:7c:2e:b6:86:e9:24:fa:
         7b:4e:8a:99:61:f8:64:0a:60:12:9f:56:a7:9a:92:f9:0f:06:
         db:5d:70:98:e5:7c:fc:2c:0b:9d:58:4f:d9:b1:f8:b4:c5:e3:
         45:f0:4f:6c:d8:5a:cd:62:fb:5a:82:f7:c0:2f:20:f0:19:0d:
         c1:55:17:01:6f:56:f7:96:5b:13:bc:b2:61:33:e2:c2:ee:b8:
         cf:fb:f5:09:f5:a2:29:66:c0:89:b8:b7:9a:27:c9:77:77:91:
         53:63:c0:fa:23:40:9a:44:7a:a7:56:b0:e3:53:3f:06:ce:cc:
         6e:ab:b8:cb:61:9f:c9:15:3e:29:d5:44:84:c8:5d:71:09:fd:
         71:4d:c9:fb:9b:f0:ac:ad:01:70:51:55:06:27:ff:50:8b:5b:
         b7:00:80:4e:db:11:1d:48:1e:95:3e:50:16:00:99:c5:02:19:
         31:33:fa:79:9b:4e:e2:78:0a:3f:df:ac:1c:26:80:a0:c9:1d:
         d7:88:e5:e6:c4:98:e5:1f:46:42:37:88:9f:7b:ad:7e:b7:b8:
         87:6b:ba:76
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFSKX9jqVdd0S5pF1h+4q6cG2/i8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw
MzEyQ0VBODAeFw0yNjA2MDUwODQwNTNaFw0yNzA2MDQwODQ1NTNaMDMxMTAvBgNV
BAMTKDJBNzhGREExMzRENUY2MDAxOEU2MTlGNTdCMkIwM0E0MEM0NEU3MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkNCDvVZOc01+VHKz8/jDUrdFI
zZVD3/M/xoxFvJAJ5+iiNSQgrY3EyFD8z936SAzhll89qF3WsZPS86HVB+R0MN3X
CncYcsyiJsnzYS7nLSVmdW/l2FKCHY40ADHxxaeicUu9UPMzYkFjd5fZodVMgcEH
msCzJJeBVOy8yaiNKG+ddn+TOZCvjOdXgYFWWppr5IMmT+Q4qQjukut0qAjaxsZj
IrIeZfvBkn2XrrWFOy6sNNZ2xZJjEuD1b+W4ZUau6d8qCSKuQUlEIVxUsSufCDt4
wPrp5vLtH1gRlc9yhPv1ywSKdABfAivyUdBjxjx15FVcdqmHDyVvkMhMExujAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKnj9oTTV9gAY5hn1eysDpAxE5x8wHwYDVR0j
BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy
Q0VBOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTMjE1MzYzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgdU
wSAwDQYJKoZIhvcNAQELBQADggEBAFs8ZT1LI9NPz7uGw1VX9gWYx6cDD/F9uS8F
/KflmHGi1R7RCQgWHv5g4K3R7xOIfC62hukk+ntOiplh+GQKYBKfVqeakvkPBttd
cJjlfPwsC51YT9mx+LTF40XwT2zYWs1i+1qC98AvIPAZDcFVFwFvVveWWxO8smEz
4sLuuM/79Qn1oilmwIm4t5onyXd3kVNjwPojQJpEeqdWsONTPwbOzG6ruMthn8kV
PinVRITIXXEJ/XFNyfub8KytAXBRVQYn/1CLW7cAgE7bER1IHpU+UBYAmcUCGTEz
+nmbTuJ4Cj/frBwmgKDJHdeI5ebEmOUfRkI3iJ97rX63uIdrunY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:10 2026 by rpki-client