Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS54681.roa
File:                     AS54681.roa (raw, json)
Hash identifier:          cvrgZlPcX3FMpGsBrBP7fGzIMnoduH7+lED7im1EKqc=
Subject key identifier:   FE:01:D7:CB:DC:FE:1B:09:4A:E5:9F:6C:F8:B1:A3:4C:FD:1B:6A:53
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       7600D216AEF666BE404208A2328AAAB38D772833
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS54681.roa
Signing time:             Tue 20 Aug 2024 02:31:56 +0000
ROA not before:           Tue 20 Aug 2024 02:26:56 +0000
ROA not after:            Tue 19 Aug 2025 02:31:56 +0000
asID:                     54681
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a07:54c4:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:00:d2:16:ae:f6:66:be:40:42:08:a2:32:8a:aa:b3:8d:77:28:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:56 2024 GMT
            Not After : Aug 19 02:31:56 2025 GMT
        Subject: CN=FE01D7CBDCFE1B094AE59F6CF8B1A34CFD1B6A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:bc:e4:11:ff:08:64:1b:24:85:44:2a:e7:
                    94:1a:03:8e:5d:48:d9:51:ed:9a:9e:2d:48:7e:13:
                    53:50:34:0d:65:76:12:59:7a:83:b8:b8:68:27:1f:
                    67:21:8c:54:2e:9a:a5:6e:85:16:ce:2a:6e:35:82:
                    ad:60:59:3b:99:b9:df:62:04:ec:e9:0a:6b:81:48:
                    18:65:80:45:f9:40:ae:b6:15:2d:d5:fe:da:7b:2b:
                    8d:59:cb:59:18:6c:ef:a1:1f:30:b4:7d:34:91:5f:
                    fe:fd:49:f6:78:b9:c6:99:10:46:9d:b4:6b:fd:f0:
                    93:61:f5:1d:9b:c4:50:16:0a:ec:07:df:1b:f9:ec:
                    71:58:39:8f:28:33:44:2a:6c:e2:c7:b3:56:73:6c:
                    d3:9c:92:89:f1:f8:fc:99:f7:cc:ad:12:75:5b:11:
                    11:51:28:33:67:ee:6e:fb:b1:95:62:f0:0b:63:10:
                    e8:9e:64:ea:1f:04:c7:a1:6c:73:6a:0d:9e:26:99:
                    83:c4:05:f2:a1:fd:5e:32:d3:45:1b:b7:7e:61:a2:
                    87:7c:ef:f1:62:f9:de:e9:fb:b8:8f:09:88:1b:c0:
                    48:62:b4:ab:10:29:36:7b:62:f0:5a:b5:9d:05:48:
                    e1:d8:6c:60:35:d1:f1:29:b1:8b:78:e6:4a:86:d4:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:01:D7:CB:DC:FE:1B:09:4A:E5:9F:6C:F8:B1:A3:4C:FD:1B:6A:53
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS54681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48
                  2a07:54c4:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:ac:e4:db:a7:d4:b3:c6:78:24:98:3c:d3:07:24:af:4d:
         0c:5f:41:d6:83:ad:04:5b:db:df:05:ae:12:c8:06:17:6f:bc:
         69:d9:fe:cc:a8:d3:1f:d9:11:6b:39:48:74:85:f6:03:6e:d8:
         4b:7d:df:f2:84:d9:15:5d:96:89:70:60:05:fa:5e:dd:4f:ec:
         53:31:33:5a:20:09:09:81:6e:77:13:49:62:10:dc:77:e8:94:
         f2:fd:e1:36:8f:c3:34:e5:b3:89:b1:6f:a7:9a:24:4b:88:e0:
         49:53:cb:d3:b0:2c:dc:aa:62:c3:7e:99:ce:89:cf:a0:53:42:
         81:5f:99:5e:54:f1:0d:46:5b:1e:e0:e9:98:5d:74:36:d2:c5:
         ee:46:69:d5:ef:c5:ee:69:ad:6f:c0:f8:ff:b5:f7:72:7a:88:
         16:c8:11:12:cb:87:38:0c:93:59:e1:1f:af:05:0b:d9:6d:94:
         15:1c:36:f2:0c:0f:dd:32:32:58:c7:a6:9d:f7:0e:d7:62:9c:
         d3:8c:34:a9:54:bd:4f:4d:d6:b9:a7:f3:02:81:3e:3e:32:fe:
         8e:d4:2a:67:28:f8:5f:86:61:d1:3b:1d:4e:12:43:67:21:b3:
         be:eb:7e:c8:cc:49:75:e1:44:74:2f:fd:91:42:f9:8f:ff:02:
         4a:1e:61:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org