Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653036353a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653036353a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          k/NxDucY3oBoXIlDfMmLqbGf4KxbQ2cbcxuL7na/vnw=
Subject key identifier:   4D:15:15:ED:D7:75:E3:E6:D0:83:64:C8:2F:95:43:36:A3:75:47:21
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       1620E816796F8762FE39059B06CDCB499CAF2F80
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653036353a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:42 +0000
ROA not before:           Fri 04 Jul 2025 00:42:42 +0000
ROA not after:            Fri 03 Jul 2026 00:47:42 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e065::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:20:e8:16:79:6f:87:62:fe:39:05:9b:06:cd:cb:49:9c:af:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:42 2025 GMT
            Not After : Jul  3 00:47:42 2026 GMT
        Subject: CN=4D1515EDD775E3E6D08364C82F954336A3754721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e0:9d:33:cc:d5:5d:e7:cf:9d:cc:ce:e3:bf:
                    28:0e:d9:9c:0e:33:b0:01:25:c1:b4:01:66:2e:7e:
                    4e:df:39:2d:9b:5a:d4:a4:92:b2:56:c6:3f:68:bf:
                    58:47:ff:bf:e4:9b:7f:0b:d0:cf:65:b3:aa:e5:fe:
                    97:47:7c:b7:af:c7:66:ee:77:71:b2:13:f8:1f:f1:
                    88:73:a5:6f:51:61:42:4a:7f:b8:5d:be:45:f4:69:
                    16:7e:18:8f:b9:79:5d:6c:54:a9:01:1f:5c:f3:c6:
                    8e:5d:a7:8c:52:b8:a6:35:cd:a1:68:89:30:99:5a:
                    a6:68:b8:ec:6f:99:2f:b0:c8:20:e8:04:c7:a2:b4:
                    6c:99:92:95:a9:88:73:51:8e:ab:7d:1a:62:5e:26:
                    f5:2c:6f:31:07:b7:56:d5:82:05:05:38:e9:62:82:
                    60:b3:e5:6f:df:c2:75:fd:03:cd:07:a2:33:7f:50:
                    f2:b3:81:96:cf:3f:be:88:ee:bb:fe:ed:41:a2:31:
                    cb:8c:76:bc:71:b3:40:89:b2:eb:19:20:34:d5:51:
                    93:6b:1b:f9:a0:da:92:99:49:0e:b3:ea:f7:7e:69:
                    1d:d6:c0:7b:d7:47:cf:37:43:b4:b2:70:2e:da:4d:
                    9a:11:5d:b5:55:5c:2c:47:1c:e8:57:2a:1a:d5:e0:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:15:15:ED:D7:75:E3:E6:D0:83:64:C8:2F:95:43:36:A3:75:47:21
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653036353a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e065::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:ac:d4:d9:31:b9:e4:95:86:a2:d7:d2:aa:55:c1:7a:c5:34:
         31:d2:76:66:86:3b:37:ff:48:ed:49:b0:ab:8b:c8:4b:cb:78:
         5d:5c:1e:c8:ee:01:45:a3:d1:f1:de:e9:8d:c8:1e:6d:dd:48:
         70:8d:d2:89:b4:09:8c:af:2c:0c:78:ec:9b:bc:67:b7:d1:e0:
         74:c0:60:24:8d:fa:43:ad:5c:9d:d4:4c:75:7f:22:69:fa:17:
         f9:31:99:70:1d:54:e0:c3:65:af:37:df:a8:76:99:e5:84:02:
         60:54:b9:bf:20:9b:78:b8:12:58:b8:ee:c7:89:36:b2:c7:e0:
         bd:be:8f:4e:fc:81:7d:6b:81:5b:85:c9:ad:36:60:5c:f8:b1:
         9d:39:30:0b:d0:04:ca:af:66:cf:9f:c4:bf:4c:76:8d:a3:3f:
         9c:2d:80:42:b5:23:70:c5:ad:3c:6e:b3:27:c7:80:c8:f3:d8:
         e7:17:d5:80:70:42:e7:d1:00:9d:88:7d:81:7d:b3:4e:ea:8f:
         a8:9f:d9:c8:a8:97:74:5c:7c:10:b5:22:bc:39:f9:e8:cb:b6:
         65:b9:81:b3:02:72:d3:b5:b0:cd:52:5f:d4:4c:a5:6d:77:33:
         d6:e1:61:83:9c:a2:90:1b:60:78:d8:62:12:d0:32:9c:27:05:
         a0:56:b8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:44:44 2025 by rpki-client