Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS54148.roa
File:                     AS54148.roa (raw, json)
Hash identifier:          gK1Nuk2cTaYcbBGDObbuiDLnfCwIZOzmZwN7Enf0rto=
Subject key identifier:   03:E3:A4:BB:F8:A9:16:AA:99:5E:96:D5:5E:7A:30:9C:2E:99:C9:0C
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       4F4BE0AD4433E540DA6D8DF910C6C8CFDA0831E1
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS54148.roa
Signing time:             Fri 05 Jun 2026 08:45:52 +0000
ROA not before:           Fri 05 Jun 2026 08:40:52 +0000
ROA not after:            Fri 04 Jun 2027 08:45:52 +0000
asID:                     54148
IP address blocks:        2a07:54c4:175b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4b:e0:ad:44:33:e5:40:da:6d:8d:f9:10:c6:c8:cf:da:08:31:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:52 2026 GMT
            Not After : Jun  4 08:45:52 2027 GMT
        Subject: CN=03E3A4BBF8A916AA995E96D55E7A309C2E99C90C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:90:11:ca:22:11:62:c5:f9:c7:c9:46:3e:84:
                    e3:c2:70:c9:cd:50:86:35:07:ef:91:b9:ea:0f:78:
                    d0:28:dd:1d:d3:bc:8c:cd:f2:47:3a:26:9a:8a:b6:
                    f2:d5:97:c5:b1:64:78:9d:0d:29:fe:15:52:aa:a5:
                    24:83:0e:93:8f:b3:5b:f8:b8:ff:61:d7:60:1f:c1:
                    5e:2d:78:93:2b:9b:c5:76:ce:03:08:5f:a5:c3:38:
                    6f:62:cd:64:4d:a1:d7:7a:83:2e:b9:b4:55:ef:77:
                    e7:31:27:3f:1c:12:a0:80:a7:24:14:ad:90:e7:16:
                    67:6e:54:97:5e:37:45:9f:97:a3:9d:d4:68:89:28:
                    41:e3:79:41:35:5b:28:d2:c2:20:95:09:a1:2e:0f:
                    82:38:ad:b4:9f:29:46:8f:31:15:eb:7f:b6:34:fd:
                    cd:d8:ff:a3:3f:a2:74:5d:52:1f:86:51:de:fd:88:
                    47:9e:2b:dc:b1:77:38:1c:b6:ed:d4:5a:c0:2f:4f:
                    f7:70:a7:46:09:64:ec:37:39:42:da:7b:b9:61:69:
                    2c:77:68:68:fe:3c:3d:9f:b2:16:2b:de:50:ef:2a:
                    63:3d:16:17:eb:6c:b9:80:9d:ac:9c:6a:ba:64:79:
                    40:26:b8:cd:e6:5c:33:d3:a1:1c:26:cd:51:46:4b:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:A4:BB:F8:A9:16:AA:99:5E:96:D5:5E:7A:30:9C:2E:99:C9:0C
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS54148.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:175b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:b9:f3:3f:b0:80:96:23:90:4a:e7:3a:4f:cd:36:cb:b1:43:
         54:a9:2b:34:43:34:50:9f:8e:f2:88:4f:03:e6:71:4b:9c:69:
         1c:71:02:48:1d:df:5a:1c:dd:5c:f0:7f:02:e3:dd:46:d4:11:
         aa:e3:59:62:e4:09:2b:3c:9a:d0:38:ed:22:fa:8f:41:1e:ed:
         5c:98:9d:64:a7:c8:26:38:ff:97:93:b8:7f:6c:bd:58:0a:4d:
         20:b7:ba:49:8d:d1:7f:21:10:cf:a1:8e:cc:23:72:bb:96:bd:
         6e:29:e0:ca:c5:33:ae:33:11:be:d6:ff:c8:9b:bd:49:e9:b8:
         58:6c:4b:8a:58:35:15:63:21:55:62:c8:5f:5c:64:a4:72:79:
         8d:00:fb:65:e7:c0:fd:a9:f2:47:ea:e1:90:63:78:45:54:8c:
         9e:94:53:44:f5:e5:e9:96:03:50:ed:82:37:92:aa:d3:28:d7:
         a3:91:88:30:cb:32:ef:c9:aa:3e:96:fd:f8:53:d4:66:b9:c2:
         5c:28:81:81:9a:01:20:f0:ac:49:76:42:5f:96:3b:7c:d9:0b:
         fa:cd:80:b6:03:db:92:c4:cd:8b:b8:73:ab:6d:3b:06:eb:f9:
         ad:3d:74:df:b4:ad:31:fe:44:be:bc:8a:0e:94:99:b9:b9:cc:
         94:02:88:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:43:52 2026 by rpki-client