Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS56762.roa
File:                     AS56762.roa (raw, json)
Hash identifier:          /221afwHFblUeigecqCc1EshTBCYAwI5k4uSGfp5tmA=
Subject key identifier:   8A:0B:F9:A9:51:10:BA:54:37:B3:C4:17:B6:8F:B9:BC:13:7B:5E:A1
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       213FEA4EA7191C1E717058307E4CDD34F14E6038
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS56762.roa
Signing time:             Fri 05 Jun 2026 08:45:52 +0000
ROA not before:           Fri 05 Jun 2026 08:40:52 +0000
ROA not after:            Fri 04 Jun 2027 08:45:52 +0000
asID:                     56762
IP address blocks:        2a07:54c1:4100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3f:ea:4e:a7:19:1c:1e:71:70:58:30:7e:4c:dd:34:f1:4e:60:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:52 2026 GMT
            Not After : Jun  4 08:45:52 2027 GMT
        Subject: CN=8A0BF9A95110BA5437B3C417B68FB9BC137B5EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f8:2a:fa:7c:a1:17:be:44:75:73:8c:c9:77:
                    16:f2:8c:d5:bd:ad:2f:ce:52:dc:02:2c:9d:32:36:
                    88:06:48:da:c8:9e:fa:69:f9:f3:f5:ee:2a:b9:19:
                    f4:9f:22:22:77:18:7c:12:ed:92:aa:50:76:c1:ff:
                    e4:6f:74:52:f5:e8:b4:d3:f0:97:c9:8c:fd:ff:4c:
                    b2:1f:50:d8:5a:2b:99:16:9e:ae:a0:e3:ae:d5:af:
                    dc:c7:f1:df:28:7e:c8:0d:02:31:d7:9b:e7:c1:3b:
                    15:ce:6b:e9:5b:e5:f6:4d:06:49:a2:e5:8d:56:ed:
                    76:61:ae:7a:51:f2:a3:83:22:43:f1:c1:00:4e:77:
                    87:aa:b5:15:f7:bf:2c:c5:ff:d7:8a:fd:3f:d1:12:
                    d0:1b:4f:0a:3a:ff:75:5d:91:eb:ba:8c:3a:47:fa:
                    34:9a:9d:7e:f9:a1:fb:5f:ae:5f:64:9f:5b:33:37:
                    8e:c2:f8:37:fc:e7:cc:70:f0:91:a5:37:13:c5:40:
                    0f:68:51:9c:4c:98:4b:16:58:5f:c3:c3:10:da:e2:
                    2a:80:c7:cb:64:36:92:f9:18:8c:f7:5f:b9:aa:cc:
                    3b:78:6f:ee:b6:f3:09:c1:70:9e:3f:85:4a:dc:5a:
                    de:d2:04:5b:68:37:bf:0b:75:0a:6c:a2:9e:f9:8a:
                    a2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0B:F9:A9:51:10:BA:54:37:B3:C4:17:B6:8F:B9:BC:13:7B:5E:A1
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS56762.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:cb:bb:a9:07:67:02:1a:9d:21:ea:a5:c6:eb:46:2e:48:00:
         1c:10:c9:d8:72:eb:9b:ee:8e:db:22:49:22:26:53:b4:65:12:
         73:97:9b:a4:9a:93:06:b9:58:25:f0:30:4a:2c:b8:f8:28:8a:
         c4:73:6e:68:ca:20:9d:08:1c:32:45:5f:6d:25:85:11:19:e2:
         46:fe:94:bf:39:82:4d:7b:5b:a1:97:bc:93:8d:fe:7a:34:4d:
         5f:ca:b9:e2:57:57:f0:84:cc:0b:1b:d9:cd:2a:77:f8:9d:6f:
         32:a3:cd:2b:ea:2c:28:f4:80:84:e0:7a:d4:8a:1f:d7:2a:15:
         4e:a0:28:ef:f0:4c:cf:db:ca:a9:fd:1f:fd:c3:a1:96:62:94:
         e4:3b:01:df:14:d5:33:d5:6b:3e:60:4c:3a:d2:94:ff:5f:f7:
         d7:fe:b3:45:1d:a3:e0:ca:34:a3:8f:77:a5:d2:36:9f:9c:c3:
         60:b0:43:78:89:71:32:51:42:31:ac:d6:77:14:99:ca:2c:12:
         11:ac:f6:71:74:cb:cc:70:92:bc:a9:c5:4d:73:80:86:ad:7b:
         ef:ef:f5:49:de:74:c9:e7:4c:1a:a8:1c:db:56:ef:83:5c:25:
         a7:76:bc:d6:1f:8a:76:2a:c7:32:6f:60:52:76:94:f8:0d:be:
         eb:7f:35:21
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUIT/qTqcZHB5xcFgwfkzdNPFOYDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw
MzEyQ0VBODAeFw0yNjA2MDUwODQwNTJaFw0yNzA2MDQwODQ1NTJaMDMxMTAvBgNV
BAMTKDhBMEJGOUE5NTExMEJBNTQzN0IzQzQxN0I2OEZCOUJDMTM3QjVFQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+Cr6fKEXvkR1c4zJdxbyjNW9
rS/OUtwCLJ0yNogGSNrInvpp+fP17iq5GfSfIiJ3GHwS7ZKqUHbB/+RvdFL16LTT
8JfJjP3/TLIfUNhaK5kWnq6g467Vr9zH8d8ofsgNAjHXm+fBOxXOa+lb5fZNBkmi
5Y1W7XZhrnpR8qODIkPxwQBOd4eqtRX3vyzF/9eK/T/REtAbTwo6/3Vdkeu6jDpH
+jSanX75oftfrl9kn1szN47C+Df858xw8JGlNxPFQA9oUZxMmEsWWF/DwxDa4iqA
x8tkNpL5GIz3X7mqzDt4b+628wnBcJ4/hUrcWt7SBFtoN78LdQpsop75iqJrAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUigv5qVEQulQ3s8QXto+5vBN7XqEwHwYDVR0j
BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy
Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTY3NjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqB1TB
QTANBgkqhkiG9w0BAQsFAAOCAQEAR8u7qQdnAhqdIeqlxutGLkgAHBDJ2HLrm+6O
2yJJIiZTtGUSc5ebpJqTBrlYJfAwSiy4+CiKxHNuaMognQgcMkVfbSWFERniRv6U
vzmCTXtboZe8k43+ejRNX8q54ldX8ITMCxvZzSp3+J1vMqPNK+osKPSAhOB61Iof
1yoVTqAo7/BMz9vKqf0f/cOhlmKU5DsB3xTVM9VrPmBMOtKU/1/31/6zRR2j4Mo0
o493pdI2n5zDYLBDeIlxMlFCMazWdxSZyiwSEaz2cXTLzHCSvKnFTXOAhq177+/1
Sd50yedMGqgc21bvg1wlp3a81h+KdirHMm9gUnaU+A2+6381IQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:44:53 2026 by rpki-client