Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50391.roa
File:                     AS50391.roa (raw, json)
Hash identifier:          x7kBAegx0xpofk2VvWSO96Pe8IQfr2GqbhBw2+q7LRE=
Subject key identifier:   AB:77:83:1C:FC:D3:91:4E:B8:4F:5B:49:CE:FA:74:4F:7D:E3:1D:43
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       6BCD2716D83BB01C7B7739782BFC8AE37A716B7C
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50391.roa
Signing time:             Fri 04 Jul 2025 07:51:24 +0000
ROA not before:           Fri 04 Jul 2025 07:46:24 +0000
ROA not after:            Fri 03 Jul 2026 07:51:24 +0000
asID:                     50391
IP address blocks:        2a07:54c4:1760::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:cd:27:16:d8:3b:b0:1c:7b:77:39:78:2b:fc:8a:e3:7a:71:6b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jul  4 07:46:24 2025 GMT
            Not After : Jul  3 07:51:24 2026 GMT
        Subject: CN=AB77831CFCD3914EB84F5B49CEFA744F7DE31D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:33:ba:32:bf:8e:28:a0:16:ff:f0:44:6f:
                    89:f6:7a:b2:1f:67:fa:73:20:16:3f:5e:8e:fb:be:
                    84:ad:c3:2a:5a:25:74:91:77:44:32:4c:09:6a:7e:
                    7c:67:58:f3:5c:54:7b:be:42:85:f1:e0:23:52:01:
                    81:fd:1d:dc:2b:b4:77:d8:da:f5:8c:e2:af:a1:80:
                    f4:e4:e6:71:77:ee:c1:97:54:25:b1:0a:8a:c2:fb:
                    a8:34:5a:63:fb:48:d6:f7:aa:9a:14:72:58:56:52:
                    4b:6b:1b:b4:29:b8:b0:9c:1a:e4:af:9b:b9:42:22:
                    6b:ad:8d:59:cd:88:70:34:70:f6:b5:f8:b7:34:35:
                    b2:a4:a6:6a:de:02:ba:2c:f5:fa:7d:98:c0:09:e5:
                    3a:77:b9:eb:24:51:1f:2b:6f:90:58:06:f0:a7:22:
                    92:7d:71:15:e7:2e:40:b9:8a:4c:23:4f:56:36:b8:
                    59:f7:e0:e1:2d:17:0d:41:4c:40:c6:30:52:c9:bb:
                    22:8a:1e:8c:7b:c2:ba:6a:41:86:5f:8a:71:a7:b0:
                    15:53:52:d1:e5:2c:bd:3d:d3:93:d8:3f:c3:20:7b:
                    4a:93:5d:63:ca:0d:5a:11:f8:13:e4:a0:18:2b:da:
                    7a:b7:df:ba:90:20:0c:e5:85:9b:a8:eb:68:62:e7:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:77:83:1C:FC:D3:91:4E:B8:4F:5B:49:CE:FA:74:4F:7D:E3:1D:43
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50391.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:1760::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:8e:1a:d4:11:10:da:30:67:87:a3:eb:14:38:dc:cd:72:d9:
         b7:af:f4:b3:18:8a:a6:74:9a:bb:65:9e:43:c7:05:e8:33:6e:
         5e:71:6b:b7:76:e4:99:2a:6e:17:03:e7:a4:f6:77:e2:7c:5d:
         63:1e:a9:1d:d4:41:57:a5:50:0a:c4:63:4d:02:a2:78:62:76:
         54:72:3e:f3:78:90:f6:03:a5:74:c6:0a:c6:b6:fc:37:3f:3c:
         f9:cf:61:57:78:53:4c:c4:f0:f5:d8:ca:6e:ba:f1:c6:ab:46:
         74:64:3a:2c:18:ee:1b:93:41:87:74:c2:97:c0:bb:21:0a:e3:
         6d:29:5a:c9:f7:0e:14:1d:b0:99:df:08:a5:9d:91:18:87:ba:
         52:73:70:32:0b:cb:1e:89:94:3b:af:c8:dc:4a:cd:fd:24:33:
         8c:ca:62:ef:ea:59:e1:4b:1f:2b:3d:a9:ea:cc:1f:bf:80:57:
         43:fa:90:29:d3:6d:94:9d:e3:42:3c:c6:8c:b3:87:8e:68:d0:
         46:24:fa:32:7a:07:b7:47:03:41:4a:9e:1d:d2:99:ee:ab:13:
         19:f3:fb:97:e5:e2:c2:9b:cc:e9:e9:9b:0a:13:9c:c1:5a:ea:
         5e:98:ea:f2:ff:83:1e:3a:d3:c7:fe:67:f5:fd:f2:e5:2b:cb:
         b8:07:c9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:26:50 2025 by rpki-client