Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS57851.roa
File:                     AS57851.roa (raw, json)
Hash identifier:          +q97uMoG4hnjdE+x7oa4agBoQWwQcKlXo+bsf+JrB44=
Subject key identifier:   9A:97:D0:B4:8C:55:AF:A1:6F:38:4F:B9:86:5C:99:B0:FE:F5:BB:A8
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       18DB897517ED0C4C49DC36E050EFFCA9F969180F
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS57851.roa
Signing time:             Fri 05 Jun 2026 08:45:51 +0000
ROA not before:           Fri 05 Jun 2026 08:40:51 +0000
ROA not after:            Fri 04 Jun 2027 08:45:51 +0000
asID:                     57851
IP address blocks:        2a07:54c2::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:db:89:75:17:ed:0c:4c:49:dc:36:e0:50:ef:fc:a9:f9:69:18:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:51 2026 GMT
            Not After : Jun  4 08:45:51 2027 GMT
        Subject: CN=9A97D0B48C55AFA16F384FB9865C99B0FEF5BBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bd:a6:e6:bc:cf:c3:dc:d1:88:21:ea:0d:8c:
                    a9:ee:90:0d:85:c4:83:5d:5e:6b:e6:b4:ed:df:0e:
                    a5:ff:2a:a2:97:4a:54:0e:66:58:17:34:98:98:20:
                    53:e7:61:12:72:fd:32:b3:7b:03:0c:08:a4:03:8f:
                    fc:fc:84:cc:74:6f:74:63:f3:e0:2e:4e:13:0b:33:
                    dc:17:e6:6a:a7:dc:7b:52:45:dc:de:9c:ad:a7:fc:
                    6c:80:f5:f0:f3:85:b7:b9:dc:82:35:15:47:a5:27:
                    fa:16:73:86:02:45:a0:de:18:b1:65:bb:b3:d7:2a:
                    66:4d:c1:99:25:49:e1:18:42:83:40:00:ad:ec:a7:
                    a3:95:6f:ff:72:3c:62:79:5b:b4:23:c2:38:f7:e1:
                    75:ea:29:a5:7a:40:55:b1:5c:25:a2:cc:0c:f8:bd:
                    1c:7f:1e:d2:74:15:86:02:96:3f:f0:4d:6c:42:27:
                    77:09:bf:80:1f:53:8e:70:11:1c:b3:4b:00:f6:4e:
                    33:f0:6d:11:c3:53:5e:cf:38:2d:5f:b6:7d:ff:bb:
                    2b:5a:e8:38:99:c0:ed:d1:4b:6f:48:2f:ae:a1:1f:
                    72:7e:37:05:2d:ac:56:65:d1:bf:20:28:89:70:6d:
                    e3:8e:e1:b0:5f:f0:de:08:aa:16:26:a6:9f:8f:d9:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:97:D0:B4:8C:55:AF:A1:6F:38:4F:B9:86:5C:99:B0:FE:F5:BB:A8
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS57851.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:a4:e5:e7:12:1a:bb:61:60:13:e7:0e:be:02:a9:30:5f:62:
         53:6e:57:48:73:fe:4c:7b:a6:b6:ed:cd:fa:44:db:a8:9e:a7:
         63:b8:6f:2a:b1:4e:fb:7f:f6:a4:e8:c9:42:0c:0c:4d:cf:a2:
         11:46:be:2b:e6:82:0a:6b:eb:eb:e4:15:b1:dc:c7:e8:10:63:
         fa:79:0c:3d:06:89:29:c6:9d:af:83:b2:6d:c0:6c:46:05:62:
         21:68:6e:83:fc:96:85:a6:9c:73:99:ef:a5:94:13:c4:95:62:
         37:1e:95:bf:07:5d:3a:4b:a2:ff:f5:91:cf:c3:90:9b:89:7f:
         7f:d6:7c:68:a8:30:8a:4b:49:ad:3e:1d:99:e8:58:d9:15:03:
         16:42:c1:63:ae:7e:ab:df:ce:0c:3a:72:ab:0a:0f:ed:7a:9a:
         59:ab:51:08:e6:45:02:6a:6a:0d:99:f6:8f:53:4e:af:76:11:
         0c:05:47:2c:03:94:8d:26:6e:37:cf:c5:f7:3c:d3:a0:f5:76:
         04:b5:22:4c:b5:b5:b5:f9:d7:b5:c4:70:20:75:a8:67:88:a1:
         24:39:9f:d4:1a:ac:de:3f:66:58:da:65:4a:4c:ff:d5:92:a8:
         0e:c6:1c:86:89:1c:b5:96:e5:90:68:f9:d0:83:97:73:40:8c:
         af:13:58:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:26:01 2026 by rpki-client