Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50755.roa
File:                     AS50755.roa (raw, json)
Hash identifier:          asWvuV6e+/dHEGCEGlAkEqALnUt+NwiM9ev8fGoh2cU=
Subject key identifier:   01:89:9B:72:CF:00:EC:AF:3F:CF:C3:F7:EB:76:0A:7C:D9:38:9D:5B
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       738AA20CCB0435B626A70763177CF3660BDA1FE8
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50755.roa
Signing time:             Fri 04 Jul 2025 07:51:28 +0000
ROA not before:           Fri 04 Jul 2025 07:46:28 +0000
ROA not after:            Fri 03 Jul 2026 07:51:28 +0000
asID:                     50755
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8a:a2:0c:cb:04:35:b6:26:a7:07:63:17:7c:f3:66:0b:da:1f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jul  4 07:46:28 2025 GMT
            Not After : Jul  3 07:51:28 2026 GMT
        Subject: CN=01899B72CF00ECAF3FCFC3F7EB760A7CD9389D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:8e:4d:3c:0e:b3:57:a2:85:03:b7:8e:56:
                    35:c6:f0:f9:15:10:3e:50:5c:3d:52:8d:bb:a0:0f:
                    7f:bc:67:4d:3d:8b:b5:24:03:e1:6e:7e:c4:9e:31:
                    ff:2d:85:2c:f8:33:5e:bf:2d:39:c8:ef:a0:b8:87:
                    0f:8a:9f:1a:33:93:62:98:99:42:86:15:c9:59:f6:
                    a4:b3:69:5f:0b:ca:c8:9c:b6:a8:7e:0c:35:1f:aa:
                    1e:16:fb:38:4e:29:30:90:cd:ae:59:29:08:04:4d:
                    a3:45:83:64:5e:7d:1b:27:22:2b:38:c8:01:83:78:
                    2e:8a:79:99:ed:dd:67:d2:69:ef:0d:65:ca:44:3c:
                    46:37:dd:55:8e:9f:cc:d4:e0:06:61:c7:a3:b4:09:
                    cc:14:41:97:90:96:ee:c3:ab:b1:b3:ea:dd:eb:39:
                    89:80:0f:88:ba:0d:0f:4c:29:d9:b5:49:79:a9:c5:
                    37:38:04:21:2b:23:43:5e:57:d6:17:39:48:53:f3:
                    da:77:af:ab:9a:88:ce:26:33:59:a6:d1:e1:17:37:
                    39:17:b1:ad:6d:1a:bc:d8:0f:be:13:52:36:03:62:
                    8d:6c:67:9f:ff:f8:28:f8:a4:13:3f:40:92:47:32:
                    95:d5:f5:ee:fa:b8:ff:af:62:f7:26:86:ac:16:02:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:89:9B:72:CF:00:EC:AF:3F:CF:C3:F7:EB:76:0A:7C:D9:38:9D:5B
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50755.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:78:68:e4:32:22:36:fa:ad:4d:da:37:68:36:bc:6c:f3:5b:
         70:1b:c7:32:dd:29:72:c0:0c:5a:64:39:e9:9d:1a:ba:10:6d:
         8a:4c:34:89:4b:e5:45:94:c3:f5:8f:30:40:d3:37:b1:45:ec:
         8b:8c:06:b4:89:02:b0:e8:66:e1:df:2e:60:f6:4c:d1:6d:fe:
         e5:9d:bc:ab:24:2f:39:b0:5e:9e:a7:f4:0f:87:ee:59:cc:76:
         99:71:6f:82:cf:5a:19:45:d1:21:fc:30:cf:b4:3a:48:a4:8a:
         2f:10:07:2e:f3:ad:34:3e:6e:7c:2b:21:c8:59:fd:d8:81:b1:
         2a:79:b9:3a:51:c0:2b:92:5e:f3:97:01:e7:35:49:4e:82:96:
         96:3c:4f:3f:94:8d:78:6f:ae:9e:2b:d0:ab:72:62:c4:2d:cc:
         4b:4c:a1:05:63:2c:96:37:23:84:34:3c:39:c8:d9:f1:cc:32:
         56:81:5b:27:af:11:54:77:4d:f7:22:41:7b:67:41:95:7a:f3:
         bb:7c:e1:20:5f:2f:3f:d4:9f:ab:a8:4b:10:6c:36:4e:e0:0b:
         8f:0b:24:e4:a4:19:fa:21:df:48:ed:3f:1b:45:8a:88:ae:53:
         02:49:a1:cf:41:29:57:bf:52:5b:8b:9f:fa:a7:22:25:e6:6c:
         7b:22:b9:8f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUc4qiDMsENbYmpwdjF3zzZgvaH+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMw
MzEyQ0VBODAeFw0yNTA3MDQwNzQ2MjhaFw0yNjA3MDMwNzUxMjhaMDMxMTAvBgNV
BAMTKDAxODk5QjcyQ0YwMEVDQUYzRkNGQzNGN0VCNzYwQTdDRDkzODlENUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4I5NPA6zV6KFA7eOVjXG8PkV
ED5QXD1SjbugD3+8Z009i7UkA+FufsSeMf8thSz4M16/LTnI76C4hw+Knxozk2KY
mUKGFclZ9qSzaV8Lysictqh+DDUfqh4W+zhOKTCQza5ZKQgETaNFg2RefRsnIis4
yAGDeC6KeZnt3WfSae8NZcpEPEY33VWOn8zU4AZhx6O0CcwUQZeQlu7Dq7Gz6t3r
OYmAD4i6DQ9MKdm1SXmpxTc4BCErI0NeV9YXOUhT89p3r6uaiM4mM1mm0eEXNzkX
sa1tGrzYD74TUjYDYo1sZ5//+Cj4pBM/QJJHMpXV9e76uP+vYvcmhqwWAujNAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAYmbcs8A7K8/z8P363YKfNk4nVswHwYDVR0j
BBgwFoAUb/dqxCGJT9XM1jMvoqnPMwMSzqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzQvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEyQ0VBOC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNkZGNzZBQzQyMTg5NEZENUNDRDYzMzJGQTJBOUNGMzMwMzEy
Q0VBOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0FTNTA3NTUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqB1TC
sAswDQYJKoZIhvcNAQELBQADggEBAKB4aOQyIjb6rU3aN2g2vGzzW3AbxzLdKXLA
DFpkOemdGroQbYpMNIlL5UWUw/WPMEDTN7FF7IuMBrSJArDoZuHfLmD2TNFt/uWd
vKskLzmwXp6n9A+H7lnMdplxb4LPWhlF0SH8MM+0Okikii8QBy7zrTQ+bnwrIchZ
/diBsSp5uTpRwCuSXvOXAec1SU6ClpY8Tz+UjXhvrp4r0KtyYsQtzEtMoQVjLJY3
I4Q0PDnI2fHMMlaBWyevEVR3TfciQXtnQZV687t84SBfLz/Un6uoSxBsNk7gC48L
JOSkGfoh30jtPxtFioiuUwJJoc9BKVe/UluLn/qnIiXmbHsiuY8=
-----END CERTIFICATE-----
Generated at Sat Jul 5 08:26:08 2025 by rpki-client