Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50391.roa
File:                     AS50391.roa (raw, json)
Hash identifier:          IEoSxxA0R05ancaWkgd0w/4tc8DycnDN1qjIYHoC+7Y=
Subject key identifier:   FA:AE:AE:65:8E:3D:2A:F4:C7:AB:3F:07:96:C4:0D:39:7A:62:15:87
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       20DDF3173B423A53EDD7132E473F541A9166055B
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50391.roa
Signing time:             Fri 05 Jun 2026 08:45:54 +0000
ROA not before:           Fri 05 Jun 2026 08:40:54 +0000
ROA not after:            Fri 04 Jun 2027 08:45:54 +0000
asID:                     50391
IP address blocks:        2a07:54c4:1760::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:dd:f3:17:3b:42:3a:53:ed:d7:13:2e:47:3f:54:1a:91:66:05:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:54 2026 GMT
            Not After : Jun  4 08:45:54 2027 GMT
        Subject: CN=FAAEAE658E3D2AF4C7AB3F0796C40D397A621587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:71:72:3b:99:2a:c0:6e:69:b8:16:98:a1:
                    fc:fa:9a:1e:e9:32:0d:d0:1c:48:7f:7d:58:ba:3e:
                    8a:ed:9c:3d:26:66:cb:33:f7:1c:c0:cf:34:ed:b4:
                    cb:b8:f8:9f:e0:f3:7b:3e:ce:6f:62:01:60:a3:72:
                    72:f6:c7:8b:72:6e:bf:67:20:fe:b6:4a:af:59:9b:
                    49:42:64:99:05:3f:84:65:3a:7c:fb:b3:3f:ca:0c:
                    9e:b7:cf:a4:4c:c1:0e:51:1c:87:09:5e:d5:c9:28:
                    72:5f:e8:fe:7b:42:f5:1b:cd:3a:88:3d:03:b3:04:
                    dd:53:dd:c4:af:bb:17:3d:26:d0:dc:9e:bf:d1:b5:
                    a0:81:ea:35:ef:e6:a6:99:8e:95:b8:74:35:a3:7e:
                    87:49:8e:26:73:f9:ea:66:1f:42:60:97:75:dc:4b:
                    f6:48:9b:d0:4f:78:b2:78:e7:a1:3a:13:c1:c0:5d:
                    1d:3a:cb:d5:f6:ad:ad:d0:ed:65:91:17:77:53:50:
                    fe:00:d6:5a:22:82:8e:ed:8e:aa:0a:cd:ae:e3:3e:
                    56:8e:0c:ed:2b:87:10:c1:05:27:28:11:a8:7a:de:
                    ad:53:e0:65:96:9e:3f:f7:a4:1e:47:7a:35:d6:40:
                    8b:da:59:8e:8f:a7:b4:00:8c:e5:d7:e1:6d:f2:94:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AE:AE:65:8E:3D:2A:F4:C7:AB:3F:07:96:C4:0D:39:7A:62:15:87
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50391.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:1760::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:6b:7d:62:cc:48:9e:49:95:b6:08:6e:9d:6e:b4:0a:3f:
         20:1e:fb:e7:c1:f3:d6:21:36:bc:02:fe:bd:2f:f1:0b:70:2b:
         69:fe:d6:29:73:e5:5d:0f:a8:c2:22:09:8c:ed:85:fc:e9:31:
         af:e8:a6:84:97:2b:90:5a:d6:ec:18:4a:aa:47:26:7a:16:07:
         a7:d9:4e:bf:a2:dd:9c:d7:00:e7:04:b1:92:49:ad:c1:0a:d7:
         83:fe:d7:7f:44:39:55:8e:67:ce:a6:5d:01:40:74:b9:00:e3:
         51:fb:fe:ad:5c:7e:93:ce:28:1b:61:16:62:da:11:f3:2b:f5:
         cc:90:bf:62:97:2b:4b:d8:d1:c3:81:f0:40:32:62:b1:3c:2d:
         6d:ae:69:3b:ba:ef:25:83:2c:57:ef:e5:66:2c:58:c6:af:8e:
         58:62:41:50:42:e5:72:2e:6d:40:3c:49:5f:53:ef:18:62:0f:
         97:3b:f5:c1:9a:1e:ba:28:6a:c6:d1:1d:51:34:3e:ca:d2:dd:
         61:45:c8:25:ce:02:e7:fa:4f:26:da:31:33:1d:0f:f6:57:73:
         da:ca:6f:e5:28:94:eb:7a:b2:51:92:7f:a1:11:8e:4e:be:e0:
         1d:d1:0f:f3:dc:43:02:21:9d:54:8d:40:75:45:ec:8a:3b:c5:
         d6:ed:d9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:16 2026 by rpki-client