Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          TvwVGfIzIeC3OBt+mEg546J2hQC4ACiWNVl0d4b3up8=
Subject key identifier:   51:D5:1A:B5:B4:71:E8:5A:18:39:CE:4E:5C:4B:84:00:2D:DB:19:58
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       11E6CE7DF432E86CD5B20D04CC2DC6C405DFCE3C
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:42 +0000
ROA not before:           Fri 04 Jul 2025 00:42:42 +0000
ROA not after:            Fri 03 Jul 2026 00:47:42 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e153::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e6:ce:7d:f4:32:e8:6c:d5:b2:0d:04:cc:2d:c6:c4:05:df:ce:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:42 2025 GMT
            Not After : Jul  3 00:47:42 2026 GMT
        Subject: CN=51D51AB5B471E85A1839CE4E5C4B84002DDB1958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:cd:b8:4f:37:e5:16:7d:d0:31:50:51:d3:
                    01:f5:27:80:83:13:49:b4:30:d8:b4:65:30:bf:90:
                    0c:fa:cd:03:d8:e1:05:8d:bf:e1:e0:08:71:90:c0:
                    e4:26:e2:01:e3:88:1c:e6:0f:87:b2:ca:bd:5f:8c:
                    85:c4:23:dc:2a:ff:51:70:15:f3:a1:d7:6b:8b:1b:
                    ba:73:fc:f0:27:97:65:ce:ae:bd:6d:32:4d:00:f3:
                    9d:d1:47:d5:3c:c1:32:49:e5:73:4b:f5:cb:db:53:
                    c7:0d:24:91:ab:5a:33:c1:41:1d:66:fc:08:59:29:
                    52:8c:bb:b0:64:4b:45:b0:07:c2:b8:da:1d:a6:d2:
                    90:51:34:ba:c3:7d:64:92:eb:93:36:48:fc:71:29:
                    dd:61:2b:01:4f:0a:48:85:c2:99:5b:22:8a:c6:2e:
                    fa:06:bb:3b:ea:a1:84:7b:a4:cd:7f:fd:68:b9:c3:
                    a2:0c:b8:9b:98:fb:4e:a8:66:51:e7:57:22:e6:6d:
                    30:bd:dd:7a:da:da:25:96:26:fe:ae:9d:b1:6b:7d:
                    0e:be:c2:40:7a:02:5d:ee:49:37:bd:66:04:db:f5:
                    84:53:2c:29:e8:e8:bc:dd:06:72:56:f1:26:c6:5d:
                    09:2e:cc:88:32:bb:df:dd:94:44:68:76:67:69:f5:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:1A:B5:B4:71:E8:5A:18:39:CE:4E:5C:4B:84:00:2D:DB:19:58
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e153::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:35:f1:85:73:64:7a:df:5a:34:53:d4:40:3c:ae:ec:a1:0c:
         f5:0f:21:60:bd:56:6f:45:5c:0f:4d:ae:78:13:bc:64:1a:0f:
         64:7c:20:09:a5:29:b2:ad:2d:81:67:f0:5b:dc:6e:32:75:47:
         5f:5e:19:a1:5f:03:fe:ef:dc:32:19:a9:48:ca:76:e2:8e:ee:
         e3:9f:ab:a8:90:d2:96:f5:11:42:53:7e:27:49:bd:9d:8d:d0:
         02:b2:e8:6d:f3:22:6a:8e:ad:42:e3:b9:0e:c0:29:00:ca:cb:
         4e:f4:83:df:dd:bc:fb:11:3e:dd:00:53:ac:1a:76:73:69:7a:
         73:13:38:b4:28:85:65:67:31:56:94:1b:a5:f0:85:60:56:ac:
         8b:fe:3b:53:20:d2:ba:ee:53:fe:c1:cf:4d:0f:29:e8:36:d5:
         e8:95:1e:5a:0f:eb:f6:25:72:e5:0c:fc:d9:8c:22:79:02:02:
         77:b1:e7:74:4b:bf:01:ce:b4:95:66:94:76:71:59:1a:38:b6:
         a7:a2:46:ee:bb:68:0c:52:b2:45:76:25:47:c7:19:94:d7:d8:
         bd:9c:d1:6a:9d:5e:e7:f6:e2:95:26:eb:0b:9f:ca:21:46:41:
         85:cf:71:8a:fa:a8:f5:e5:d4:c8:8e:f6:bc:2a:19:c6:78:83:
         0c:b9:26:73
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUEebOffQy6GzVsg0EzC3GxAXfzjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDJaFw0yNjA3MDMwMDQ3NDJaMDMxMTAvBgNV
BAMTKDUxRDUxQUI1QjQ3MUU4NUExODM5Q0U0RTVDNEI4NDAwMkREQjE5NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT0c24TzflFn3QMVBR0wH1J4CD
E0m0MNi0ZTC/kAz6zQPY4QWNv+HgCHGQwOQm4gHjiBzmD4eyyr1fjIXEI9wq/1Fw
FfOh12uLG7pz/PAnl2XOrr1tMk0A853RR9U8wTJJ5XNL9cvbU8cNJJGrWjPBQR1m
/AhZKVKMu7BkS0WwB8K42h2m0pBRNLrDfWSS65M2SPxxKd1hKwFPCkiFwplbIorG
LvoGuzvqoYR7pM1//Wi5w6IMuJuY+06oZlHnVyLmbTC93Xra2iWWJv6unbFrfQ6+
wkB6Al3uSTe9ZgTb9YRTLCno6LzdBnJW8SbGXQkuzIgyu9/dlERodmdp9a8pAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUUdUatbRx6FoYOc5OXEuEAC3bGVgwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzEzNTMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+FT
MA0GCSqGSIb3DQEBCwUAA4IBAQCVNfGFc2R631o0U9RAPK7soQz1DyFgvVZvRVwP
Ta54E7xkGg9kfCAJpSmyrS2BZ/Bb3G4ydUdfXhmhXwP+79wyGalIynbiju7jn6uo
kNKW9RFCU34nSb2djdACsuht8yJqjq1C47kOwCkAystO9IPf3bz7ET7dAFOsGnZz
aXpzEzi0KIVlZzFWlBul8IVgVqyL/jtTINK67lP+wc9NDynoNtXolR5aD+v2JXLl
DPzZjCJ5AgJ3sed0S78BzrSVZpR2cVkaOLanokbuu2gMUrJFdiVHxxmU19i9nNFq
nV7n9uKVJusLn8ohRkGFz3GK+qj15dTIjva8KhnGeIMMuSZz
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:55:15 2025 by rpki-client