Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50244.roa
File:                     AS50244.roa (raw, json)
Hash identifier:          5JJ9qXBiDMgiodC/S4Ne3P1CDn/0m/ls+x0wgSJPl0Q=
Subject key identifier:   25:D1:28:D8:69:9F:E2:42:A8:1E:66:B1:B8:62:16:AD:CA:06:4B:8D
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       16F08EA9C1832137C892128BAF06DEE2360E1DDF
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50244.roa
Signing time:             Fri 05 Jun 2026 08:45:53 +0000
ROA not before:           Fri 05 Jun 2026 08:40:53 +0000
ROA not after:            Fri 04 Jun 2027 08:45:53 +0000
asID:                     50244
IP address blocks:        2a07:54c1:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f0:8e:a9:c1:83:21:37:c8:92:12:8b:af:06:de:e2:36:0e:1d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:53 2026 GMT
            Not After : Jun  4 08:45:53 2027 GMT
        Subject: CN=25D128D8699FE242A81E66B1B86216ADCA064B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:7d:88:57:64:61:af:2a:66:4f:12:d0:25:
                    08:3f:c5:bd:f5:e4:69:f5:a1:ff:d9:60:07:f2:1e:
                    29:4d:8d:35:64:2a:5e:e7:00:05:f6:9f:de:21:c5:
                    02:83:db:82:cb:db:2f:1d:0e:fe:1f:99:a0:93:71:
                    b6:95:b2:d8:77:9d:71:14:ee:48:75:22:8e:89:b0:
                    21:01:a5:b3:c0:23:4c:cc:b0:70:4f:92:85:7a:0c:
                    d2:2c:f6:2c:6e:63:47:7c:90:df:08:b8:e6:3d:a5:
                    6f:10:36:e1:a8:ef:8f:e2:24:b6:79:be:c8:20:f5:
                    3a:66:07:92:1b:79:4b:80:50:dd:49:86:66:f1:0b:
                    3c:07:08:8a:dc:c7:40:d4:7a:20:fc:71:89:a9:91:
                    1f:cc:45:63:bc:4b:08:11:c1:97:28:b7:f5:a5:cb:
                    54:2b:ae:44:42:07:70:e5:2f:9e:da:cc:2a:25:9b:
                    f2:d7:10:66:98:0c:49:7d:ff:95:f2:bf:ac:f6:be:
                    87:d9:ed:ba:ac:44:48:21:c1:be:58:14:9b:ee:55:
                    28:97:aa:f4:1e:82:68:2b:f5:72:79:e3:93:63:70:
                    20:cc:29:12:9c:c8:19:56:3e:12:4a:1d:cb:88:1a:
                    18:a5:93:b3:09:f0:c6:76:c7:f4:e9:6d:ca:6f:8c:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D1:28:D8:69:9F:E2:42:A8:1E:66:B1:B8:62:16:AD:CA:06:4B:8D
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50244.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         76:70:26:99:d3:8b:a2:85:b7:98:a9:d6:bb:dc:93:1a:3a:fa:
         bb:a7:b2:a4:f9:55:b5:29:c2:28:8d:e8:e9:4e:f4:60:10:7f:
         43:1d:d5:cb:e5:81:42:97:6c:83:92:a5:36:7a:8c:76:42:45:
         95:2d:76:03:44:8b:42:db:61:7b:42:54:ba:0a:4c:64:05:e9:
         5d:1f:75:f9:c8:c3:97:71:53:a8:2d:50:16:62:79:65:1a:a6:
         65:c9:f9:bb:28:0d:2c:52:2a:c7:a4:d7:4e:23:68:cf:ac:2c:
         af:e9:21:75:35:a4:3a:8d:52:25:2b:1e:c8:3a:12:06:e6:07:
         54:0b:b3:4a:2d:20:b2:e9:78:0f:78:0b:19:b3:2a:bf:a7:c9:
         6f:6c:02:9d:f8:a4:ff:58:1e:31:57:8b:f5:c3:79:19:33:2a:
         22:cb:a9:41:be:7d:76:f3:1f:83:c1:25:bc:7e:6f:40:8b:76:
         17:57:6c:69:21:39:79:c8:67:cd:d7:50:ec:3d:f3:b6:97:33:
         0a:a6:64:27:25:ae:49:bd:be:5e:3a:e5:0b:3f:a3:2e:1a:6e:
         6d:14:ad:1c:c7:de:1b:44:5e:ce:b4:0f:a9:08:39:12:1b:47:
         ea:8a:3f:bc:27:30:ce:a0:7b:66:ce:ae:6d:a6:5d:a7:c2:8e:
         34:61:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:20 2026 by rpki-client