Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50836.roa
File:                     AS50836.roa (raw, json)
Hash identifier:          /b8H4ympQWUx7INBoRgf/mnmeD15PfRcIq3r9FA82lY=
Subject key identifier:   EA:BB:F4:CD:8B:9F:64:5B:65:BE:BC:F6:C0:18:8F:9C:3E:FF:F1:96
Certificate issuer:       /CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
Certificate serial:       47AA19F82A3084CAFECD54DD32CFDBE0F2832A6E
Authority key identifier: 6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50836.roa
Signing time:             Fri 04 Jul 2025 07:51:24 +0000
ROA not before:           Fri 04 Jul 2025 07:46:24 +0000
ROA not after:            Fri 03 Jul 2026 07:51:24 +0000
asID:                     50836
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:aa:19:f8:2a:30:84:ca:fe:cd:54:dd:32:cf:db:e0:f2:83:2a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FF76AC421894FD5CCD6332FA2A9CF330312CEA8
        Validity
            Not Before: Jul  4 07:46:24 2025 GMT
            Not After : Jul  3 07:51:24 2026 GMT
        Subject: CN=EABBF4CD8B9F645B65BEBCF6C0188F9C3EFFF196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:0c:11:49:c0:3b:3a:5d:c1:f3:6d:97:03:
                    71:0d:da:d3:1a:8b:57:ac:38:fa:ce:cd:74:7e:36:
                    d3:53:af:35:e9:69:95:15:05:9d:8f:ca:0d:4e:77:
                    c8:0d:22:ec:82:20:f7:b5:0b:25:03:42:86:3c:76:
                    c8:62:61:e5:f4:85:75:4b:5b:b0:dd:13:e0:64:6f:
                    69:97:a7:b6:45:dd:08:ac:1e:05:5f:0b:a0:5f:10:
                    d1:8b:25:45:ae:1d:69:10:8c:65:3f:70:e6:ac:70:
                    c8:63:9e:dd:be:7c:88:a8:1f:d4:15:5d:33:c3:a1:
                    d5:6c:46:dc:a7:eb:8d:1e:cb:2e:ea:ce:62:81:3c:
                    01:80:90:c7:db:8c:a8:9d:e3:f4:5b:48:2c:61:c4:
                    98:4a:8e:20:56:2d:c7:3a:3a:0a:94:7f:7d:fd:f9:
                    b2:a3:30:02:de:36:8a:92:38:a5:20:44:41:8c:62:
                    cf:3b:60:cd:05:28:82:aa:25:f6:0d:8d:b3:e9:54:
                    38:ca:67:98:78:b9:66:a0:96:69:59:8b:c8:4f:34:
                    e4:5f:d2:27:ca:e1:c8:9d:40:45:f6:03:90:24:44:
                    c3:05:17:fb:31:ce:88:1c:e2:f6:7e:65:41:c1:dd:
                    d5:23:b7:f7:07:8b:de:0e:12:41:fa:62:0b:b2:85:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BB:F4:CD:8B:9F:64:5B:65:BE:BC:F6:C0:18:8F:9C:3E:FF:F1:96
            X509v3 Authority Key Identifier:
                keyid:6F:F7:6A:C4:21:89:4F:D5:CC:D6:33:2F:A2:A9:CF:33:03:12:CE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/AS50836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:d4:59:0b:20:58:a3:ae:3e:2b:48:91:84:f0:91:f2:3d:ba:
         39:8f:f7:5f:4a:b4:47:33:d4:41:11:6b:c7:82:01:81:30:1e:
         2c:d0:3f:07:f5:5c:d4:e5:38:14:ed:bd:22:b1:9f:5b:f6:3f:
         74:b4:88:09:fc:71:53:86:42:7b:f6:63:6f:5e:60:a7:97:78:
         ee:9c:5c:5a:47:34:9e:92:52:2e:74:a5:41:ef:e5:3d:92:57:
         54:67:83:02:33:1a:76:66:c3:e4:8c:a6:c3:2d:e6:fb:ea:ee:
         9c:2a:73:5f:cd:49:07:87:20:90:4e:f8:5f:44:93:73:dd:27:
         a6:9b:8d:fd:c9:d8:35:d3:72:63:47:0e:5d:4d:27:df:1d:fb:
         99:5e:c5:83:2f:c9:b8:ef:b6:af:35:82:14:c7:36:07:01:2f:
         28:8a:4c:1f:3d:4e:78:0c:13:ef:51:d2:05:b8:43:e5:9a:39:
         4c:8d:a2:1c:a4:4c:5a:df:26:a5:66:93:51:98:2a:c7:08:16:
         de:ea:4c:55:0c:c8:57:a9:63:64:01:c3:fd:07:f6:f1:e8:ee:
         ce:4b:b5:54:bb:40:39:a9:6d:e4:7d:34:4b:19:7a:f2:87:0e:
         4b:5a:2b:c7:99:17:32:d4:34:7e:cd:d4:a3:f2:8a:e7:7f:c6:
         e0:d4:cd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:18:07 2025 by rpki-client