Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50244.roa
File:                     AS50244.roa (raw, json)
Hash identifier:          Os5fEWgBRVIbuDB4mCxjRHUonXFVgV8uNSPAL0MRhfU=
Subject key identifier:   EB:CE:DF:BE:8D:E1:7D:42:84:5E:D9:9B:79:58:B0:66:A4:D6:49:C9
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       194029848378454A04625AE531A0E58FA957A122
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50244.roa
Signing time:             Tue 20 Aug 2024 02:31:55 +0000
ROA not before:           Tue 20 Aug 2024 02:26:55 +0000
ROA not after:            Tue 19 Aug 2025 02:31:55 +0000
asID:                     50244
IP address blocks:        2a07:54c1:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:40:29:84:83:78:45:4a:04:62:5a:e5:31:a0:e5:8f:a9:57:a1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:55 2024 GMT
            Not After : Aug 19 02:31:55 2025 GMT
        Subject: CN=EBCEDFBE8DE17D42845ED99B7958B066A4D649C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:43:c9:e2:90:21:44:00:c3:03:b3:9d:e4:
                    ec:e6:bd:63:99:93:e6:59:bd:b2:f1:9d:14:c9:27:
                    53:d0:58:48:e4:4b:07:35:66:fa:df:36:72:09:7b:
                    b1:da:61:d7:3a:b9:14:ab:87:84:16:97:54:cf:f4:
                    d2:4d:7c:d0:81:01:4d:db:e1:bf:8a:f7:78:ea:29:
                    5d:1a:53:08:c2:3b:d2:66:0c:68:90:31:e4:61:4f:
                    0a:bd:2d:8d:95:85:16:ca:fb:18:66:6b:3f:ed:d4:
                    80:af:b1:13:5c:b5:78:d0:c7:95:d2:59:82:35:2c:
                    aa:74:18:f6:9f:29:74:03:fd:cc:9f:1d:36:a4:d3:
                    df:36:cf:20:3c:55:ec:97:2e:08:0e:5c:30:8e:10:
                    4d:f0:d7:9b:d6:87:65:0b:20:dc:ec:f4:7c:31:5c:
                    f8:39:a1:88:27:e0:ef:8f:7e:84:d8:9a:2e:47:22:
                    af:cb:51:07:c9:c4:4d:98:7e:1c:4d:e3:32:98:61:
                    6c:87:ea:ee:2e:e6:86:68:fc:a0:a5:e6:de:ab:04:
                    37:22:27:4b:44:06:78:73:30:f0:e1:fa:35:c0:a0:
                    1d:b3:15:a6:f0:f9:7a:c7:6f:96:0f:d3:90:d3:cd:
                    a2:0e:bf:14:4f:d9:88:5c:2b:24:dc:fb:e2:54:09:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CE:DF:BE:8D:E1:7D:42:84:5E:D9:9B:79:58:B0:66:A4:D6:49:C9
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50244.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         31:87:92:c4:de:af:4e:e9:cd:c1:ea:ff:7d:48:0f:4c:52:5a:
         14:b5:31:e6:00:83:a3:bb:8d:1d:c4:b8:87:37:5a:f7:8a:60:
         03:16:bc:0d:d4:a1:53:c9:60:90:b6:06:bf:dd:74:e6:b2:8f:
         cc:c0:3b:86:dc:83:4b:a9:ae:34:bd:1c:49:07:58:c5:34:e2:
         dd:bc:03:fd:0b:d2:bd:a5:ff:08:da:0b:9e:bd:6b:b7:60:aa:
         28:9d:1a:cc:d8:28:1a:85:2b:a3:d7:d1:e6:92:4c:1f:03:a2:
         c8:27:cb:8d:b2:3e:79:79:cb:78:3f:ac:18:8f:72:21:32:04:
         26:e6:95:8e:83:f4:31:36:ea:ac:85:01:0f:64:64:cf:83:34:
         07:c7:b2:e1:d8:e6:cb:08:da:a4:4e:a7:ce:6d:34:b5:b0:32:
         c0:ae:1f:10:e8:ce:33:99:f1:5d:ab:2b:bc:94:1a:59:d2:23:
         6c:cf:91:ee:e4:4a:3d:23:a0:8b:7e:cb:cd:a7:4e:af:b8:d9:
         9b:a9:67:bc:f5:cb:fa:5c:84:5e:ae:58:04:c8:8a:79:76:45:
         6e:3c:e4:02:42:55:a7:6e:4e:32:50:df:ef:62:01:53:56:5c:
         c5:74:d2:67:1d:ac:c4:54:42:87:35:ee:4d:4c:dc:25:41:7d:
         62:4e:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 10:00:15 2024 by rpki-client on console-ams.rpki-client.org