Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS926.roa
File:                     AS926.roa (raw, json)
Hash identifier:          MYcjI/P0vu+e3Aj1kR//4oD7ZKN4Y1+Xfm0vRZkWD18=
Subject key identifier:   E6:C0:F4:E5:9C:7D:EB:AC:94:E3:2B:87:B1:F9:48:7E:5B:72:3F:EC
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       461E99EF84E2CFA07AEB0984BB8FF12860EAED77
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS926.roa
Signing time:             Fri 05 Jun 2026 08:45:51 +0000
ROA not before:           Fri 05 Jun 2026 08:40:51 +0000
ROA not after:            Fri 04 Jun 2027 08:45:51 +0000
asID:                     926
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1e:99:ef:84:e2:cf:a0:7a:eb:09:84:bb:8f:f1:28:60:ea:ed:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jun  5 08:40:51 2026 GMT
            Not After : Jun  4 08:45:51 2027 GMT
        Subject: CN=E6C0F4E59C7DEBAC94E32B87B1F9487E5B723FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:9f:5b:98:af:b9:68:a8:55:83:09:97:7c:
                    31:f3:ca:f0:4c:67:94:a9:8f:40:1b:26:a8:7a:72:
                    51:82:10:09:dd:0d:05:a4:af:86:3a:e6:c4:36:2e:
                    b3:f0:2d:d8:9b:a6:0f:51:ae:03:c2:32:0e:a0:69:
                    89:28:8b:4e:38:93:12:bd:3b:8b:a2:75:10:90:33:
                    87:60:f6:6e:c5:68:81:e5:7c:79:d6:b1:a9:d1:67:
                    eb:0b:28:58:26:30:97:0e:a4:b5:b7:ed:d2:e1:6f:
                    fa:a5:d6:42:ed:0a:d4:3a:c8:a8:c8:ea:6a:08:82:
                    48:f8:a7:7b:be:ce:7c:2a:0d:f0:05:bc:e7:48:97:
                    80:f9:de:67:66:ee:57:53:42:53:13:57:71:07:cc:
                    27:8b:92:1b:24:0a:b7:d8:93:7e:2a:d3:f0:d8:26:
                    58:01:e8:09:1c:06:de:97:eb:4f:78:43:a6:fd:ec:
                    55:1c:cf:6b:56:22:f2:7e:5e:8c:a0:ed:85:9c:d2:
                    01:4f:7c:49:2d:bd:08:81:a4:61:f2:71:52:25:07:
                    80:66:dd:42:06:3b:17:37:8a:b8:30:1a:74:7c:35:
                    64:e3:64:27:6d:94:25:41:c3:63:09:de:1b:2e:96:
                    05:82:c8:c0:40:12:b7:20:a8:cb:96:82:e5:05:fa:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C0:F4:E5:9C:7D:EB:AC:94:E3:2B:87:B1:F9:48:7E:5B:72:3F:EC
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS926.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:79:2c:33:2b:a4:2f:d9:7d:ad:6b:63:e0:a2:59:b9:c1:22:
         2b:6b:a5:72:ed:97:55:07:c0:8e:98:b9:d5:91:9a:6d:56:20:
         10:3b:1e:8d:8c:ce:56:08:6f:d3:f2:e5:bf:1d:5d:db:ac:fa:
         9f:eb:0a:02:92:3e:1f:a0:19:2f:05:14:cb:fd:d1:f1:06:44:
         ab:f3:ab:48:a5:db:1e:ba:ce:75:06:3b:87:77:77:07:de:cb:
         eb:f5:72:87:97:0b:2a:58:01:e4:f8:fd:ef:7f:5f:19:3e:d4:
         1a:25:13:bc:a2:f1:4e:5a:fb:c6:68:cc:df:e6:9e:ed:61:8c:
         97:3f:7a:37:f3:9c:72:0c:8d:10:f6:eb:e1:fc:4d:bc:9e:18:
         98:5c:c8:cc:2d:48:ef:1f:66:4b:74:df:c8:74:2e:59:6e:cf:
         25:18:b2:5c:93:1b:21:52:0e:3f:c0:27:ff:cf:6a:49:1d:9b:
         d0:7c:58:4c:2e:35:af:09:67:d0:66:6b:db:8e:3f:01:25:12:
         17:0c:d6:c3:04:6a:6b:e0:1b:dc:fd:06:b7:a4:3d:12:cc:9f:
         71:34:6f:f6:aa:7c:94:fa:6f:56:d4:08:ae:24:b8:b0:1d:d7:
         94:0d:54:cb:e3:00:e0:f8:73:64:78:78:a4:48:b7:3f:ce:ab:
         ae:2a:a6:96
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIURh6Z74Tiz6B66wmEu4/xKGDq7XcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw
MzEyQ0VBODAeFw0yNjA2MDUwODQwNTFaFw0yNzA2MDQwODQ1NTFaMDMxMTAvBgNV
BAMTKEU2QzBGNEU1OUM3REVCQUM5NEUzMkI4N0IxRjk0ODdFNUI3MjNGRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITp9bmK+5aKhVgwmXfDHzyvBM
Z5Spj0AbJqh6clGCEAndDQWkr4Y65sQ2LrPwLdibpg9RrgPCMg6gaYkoi044kxK9
O4uidRCQM4dg9m7FaIHlfHnWsanRZ+sLKFgmMJcOpLW37dLhb/ql1kLtCtQ6yKjI
6moIgkj4p3u+znwqDfAFvOdIl4D53mdm7ldTQlMTV3EHzCeLkhskCrfYk34q0/DY
JlgB6AkcBt6X6094Q6b97FUcz2tWIvJ+Xoyg7YWc0gFPfEktvQiBpGHycVIlB4Bm
3UIGOxc3irgwGnR8NWTjZCdtlCVBw2MJ3hsulgWCyMBAErcgqMuWguUF+t+7AgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQU5sD05Zx966yU4yuHsflIfltyP+wwHwYDVR0j
BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy
Q0VBOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTOTI2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwrAL
MA0GCSqGSIb3DQEBCwUAA4IBAQAzeSwzK6Qv2X2ta2Pgolm5wSIra6Vy7ZdVB8CO
mLnVkZptViAQOx6NjM5WCG/T8uW/HV3brPqf6woCkj4foBkvBRTL/dHxBkSr86tI
pdseus51BjuHd3cH3svr9XKHlwsqWAHk+P3vf18ZPtQaJRO8ovFOWvvGaMzf5p7t
YYyXP3o385xyDI0Q9uvh/E28nhiYXMjMLUjvH2ZLdN/IdC5Zbs8lGLJckxshUg4/
wCf/z2pJHZvQfFhMLjWvCWfQZmvbjj8BJRIXDNbDBGpr4Bvc/Qa3pD0SzJ9xNG/2
qnyU+m9W1AiuJLiwHdeUDVTL4wDg+HNkeHikSLc/zquuKqaW
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:25:18 2026 by rpki-client