Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653138333a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653138333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          KRVv/vRnNO6gJ80g9f2gP8zJL7Y9buoCoIBiX0Aj/Qw=
Subject key identifier:   C0:E3:CA:DE:BE:41:7B:C9:F7:5A:B7:8A:55:CB:C4:56:DC:9E:79:F9
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       3102D10ED80E7301431ABDE3470B8E13D1D81682
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653138333a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:40 +0000
ROA not before:           Fri 04 Jul 2025 00:42:40 +0000
ROA not after:            Fri 03 Jul 2026 00:47:40 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e183::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:02:d1:0e:d8:0e:73:01:43:1a:bd:e3:47:0b:8e:13:d1:d8:16:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:40 2025 GMT
            Not After : Jul  3 00:47:40 2026 GMT
        Subject: CN=C0E3CADEBE417BC9F75AB78A55CBC456DC9E79F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:ec:ff:c9:ea:d2:0f:1f:9d:dc:94:fc:b4:
                    f6:0d:d0:3f:66:c3:e6:17:a7:38:e4:cd:a6:83:cb:
                    9e:92:de:13:ee:cb:c8:d4:25:c3:84:44:a8:23:54:
                    c4:a8:93:61:cf:c0:a3:3b:fb:d0:a9:83:86:f2:81:
                    b2:e5:48:a7:02:16:81:6f:2b:3d:5c:27:31:ad:83:
                    3a:b7:8a:03:90:0f:10:e0:ee:66:50:8c:d5:ae:04:
                    5e:fc:b0:d6:1d:0c:31:e3:d5:5e:3a:70:86:37:3c:
                    ba:47:f7:8c:39:e9:03:57:ef:e0:0f:3a:ca:ff:fd:
                    32:e8:aa:6d:0b:39:e4:74:00:6a:05:a9:77:64:67:
                    29:48:b0:ed:1f:2e:5f:ef:1f:14:e7:83:c0:7f:fc:
                    71:d1:d5:87:35:bf:71:f6:3c:67:8d:3b:ee:b1:84:
                    37:ff:6c:49:3b:ef:6f:7b:dc:03:ae:69:ee:d1:66:
                    cd:26:50:4c:52:73:8c:1c:79:17:d7:94:c7:b2:40:
                    34:4c:fc:9c:ae:77:9e:b2:71:b3:fa:3a:32:52:07:
                    f8:3b:5b:e8:4a:06:88:e5:fe:53:5d:27:f6:e9:ac:
                    d1:b4:59:ae:4e:70:e6:27:e8:57:45:f1:95:17:a5:
                    5d:26:63:5f:d5:3f:f6:dd:c2:5e:91:9c:66:35:38:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E3:CA:DE:BE:41:7B:C9:F7:5A:B7:8A:55:CB:C4:56:DC:9E:79:F9
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653138333a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e183::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:88:58:98:66:0e:94:52:a8:de:1d:2a:b3:c3:bf:41:f3:51:
         9b:6e:4f:28:0a:cf:d8:7c:5f:6d:79:64:47:e2:75:e9:4d:03:
         47:16:57:69:51:e1:ab:3b:a2:fd:73:ff:99:c5:e7:40:6b:f9:
         a1:19:19:6b:24:79:36:98:80:d8:a8:f5:65:21:86:a1:a5:a2:
         9d:41:71:09:52:a2:bf:64:2b:87:4d:eb:a3:b9:91:ba:8c:7a:
         3b:17:53:4e:22:9e:6f:31:40:56:c6:90:68:9e:51:74:eb:1b:
         98:57:b7:3c:8d:39:00:5e:de:5d:84:f4:25:27:eb:c6:a3:a1:
         fe:19:e7:88:18:0f:1e:1d:ca:43:b5:6c:20:42:32:f2:58:77:
         c2:d7:e9:67:2a:d9:23:3f:a5:fe:9f:1d:1f:4f:62:7a:96:f3:
         95:f2:b6:96:ab:ce:23:56:79:10:6b:cc:33:27:4a:a0:0e:62:
         0a:72:b6:a5:7e:00:79:7d:da:b0:62:54:86:e0:a3:4e:6d:54:
         f7:91:59:72:c3:96:0c:66:83:df:b1:c2:a0:d4:c5:75:68:2a:
         9a:8f:9f:02:bb:4f:a6:58:35:15:b3:91:0d:01:c0:6a:8a:a6:
         9f:f8:7f:12:90:41:4b:1e:f6:e0:2c:3e:5c:0b:a8:cc:6b:8e:
         ab:b8:cc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:55:11 2025 by rpki-client