Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS48581.roa
File:                     AS48581.roa (raw, json)
Hash identifier:          CZPrHR9QTfaAuLCCj3HsEESih97XSzjJLEHgyKyvTYk=
Subject key identifier:   09:EE:AF:8F:E7:CC:BD:3E:2C:0E:95:FA:92:1E:2B:18:5E:8E:E5:E9
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       5E27D5C80418B706DC6E374123F64D92CF7C7581
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS48581.roa
Signing time:             Fri 05 Jun 2026 08:45:53 +0000
ROA not before:           Fri 05 Jun 2026 08:40:53 +0000
ROA not after:            Fri 04 Jun 2027 08:45:53 +0000
asID:                     48581
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:27:d5:c8:04:18:b7:06:dc:6e:37:41:23:f6:4d:92:cf:7c:75:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:53 2026 GMT
            Not After : Jun  4 08:45:53 2027 GMT
        Subject: CN=09EEAF8FE7CCBD3E2C0E95FA921E2B185E8EE5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:47:06:0f:d1:ca:e5:98:32:cd:be:a3:1f:8c:
                    1c:19:8c:3d:0d:1f:49:1f:84:eb:0c:73:fc:48:4e:
                    20:d9:06:20:81:9d:55:3f:1f:ba:1e:86:d2:68:ef:
                    b5:39:da:a0:63:1d:1d:0b:98:0b:e2:0b:d6:7c:3a:
                    b5:65:cb:64:07:66:2b:91:4b:ba:8f:1e:e4:0e:d9:
                    17:60:87:c1:25:f9:34:30:86:0d:13:22:17:3b:9d:
                    42:a0:b4:5b:47:ef:c1:3d:3e:7f:93:ed:a3:d1:5b:
                    de:7e:1d:13:a3:50:c6:2c:34:62:26:88:84:00:ef:
                    dc:bd:e8:8b:74:12:8b:f8:05:0e:be:bb:ea:fc:7f:
                    d6:e1:8d:02:ae:be:43:fd:c7:6d:70:00:03:7a:6f:
                    17:d3:6d:15:d4:95:1a:91:13:3b:6b:1f:1e:8d:af:
                    76:08:56:71:6b:ec:71:57:4f:ba:f2:34:59:51:e1:
                    14:3d:b9:ac:2e:6a:e4:23:92:f7:f2:df:0b:fe:98:
                    1a:9b:5b:bd:01:47:02:cb:58:0d:52:e9:a1:9b:cd:
                    0c:99:a9:d9:f2:d6:f0:ed:44:e8:0a:d7:3a:64:fe:
                    fa:ea:45:3a:9a:dd:ef:7d:ff:cf:a6:b5:42:53:ea:
                    6c:82:7d:96:7e:7b:d2:26:b5:d7:e2:74:c9:c1:ca:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EE:AF:8F:E7:CC:BD:3E:2C:0E:95:FA:92:1E:2B:18:5E:8E:E5:E9
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS48581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:3d:a1:5a:ad:a8:02:5b:96:93:a3:56:a8:a8:93:04:a6:
         61:d6:d9:9b:5e:45:cf:1f:76:de:6c:a5:08:4d:21:c3:50:5a:
         f9:98:1d:d9:1a:2c:7b:1b:71:f5:77:cb:23:9c:88:8f:fc:0b:
         c2:37:9f:f6:b3:45:8a:db:f2:59:27:63:8a:80:0c:97:31:67:
         03:2c:5e:7b:d6:56:4f:82:6e:e8:f0:bc:3f:8f:43:3b:9c:9b:
         fb:5e:be:15:a7:ae:f6:8b:38:6c:e4:ac:f2:7b:ba:d1:96:65:
         d0:24:81:6c:9b:52:3e:cd:ae:30:62:0f:18:58:d9:e5:97:91:
         bc:9d:e0:e0:d9:00:3a:a6:1f:47:ca:45:2a:2a:a9:0f:08:3f:
         f4:91:98:c7:a8:11:f7:1f:07:9c:5a:f3:fc:d2:df:2e:b0:fa:
         29:b6:8b:59:29:7e:7b:11:22:59:21:b3:5e:49:64:9f:34:97:
         da:5c:a7:f4:64:ab:a4:21:24:e5:92:db:ef:8e:81:4b:e0:c7:
         a3:ff:a4:70:4a:e8:b1:5d:b3:51:d8:9d:dd:e9:c0:05:71:a0:
         b3:97:66:e2:9f:79:34:fa:4e:0e:af:21:d2:a3:51:fb:e9:ce:
         16:58:91:a0:63:76:ff:6b:50:59:2b:a9:82:dd:74:5c:36:83:
         68:3a:0a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:43:54 2026 by rpki-client