Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          IsggX1HtG6tTCsfWMsO1hitmA9gvPmc0/vIpsPANuoA=
Subject key identifier:   1F:D1:E5:D7:D6:1D:84:CE:05:22:63:2B:D9:3A:F4:14:B1:84:8B:8E
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       25606974410A2B15D0EA3AA09655698153A43B40
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:44 +0000
ROA not before:           Fri 04 Jul 2025 00:42:44 +0000
ROA not after:            Fri 03 Jul 2026 00:47:44 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e18b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:69:74:41:0a:2b:15:d0:ea:3a:a0:96:55:69:81:53:a4:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:44 2025 GMT
            Not After : Jul  3 00:47:44 2026 GMT
        Subject: CN=1FD1E5D7D61D84CE0522632BD93AF414B1848B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:bf:a9:cf:00:71:3e:bd:fa:d9:8d:d2:a6:
                    84:fc:7a:cf:1b:c7:f2:11:a7:7d:2b:11:65:76:44:
                    f0:ea:96:13:f8:85:fc:52:1e:3b:92:d1:95:74:02:
                    2f:db:b0:e5:50:8f:e5:25:3a:2c:d5:0f:b0:79:8f:
                    4f:71:ea:68:dc:bc:2c:fc:bb:de:14:cf:18:dc:31:
                    27:9c:60:92:ad:cc:1d:0f:1d:e6:6e:e4:91:8c:c0:
                    de:00:cf:44:f0:10:2c:86:d3:ed:40:39:7a:90:a3:
                    b8:e5:51:46:a7:c6:cb:97:ce:32:e4:0d:22:a2:ca:
                    d4:ae:a2:ea:88:8d:40:1b:70:3a:a6:5e:e9:d1:96:
                    20:01:5a:55:b3:c3:65:c3:5a:56:c6:c7:df:3c:88:
                    97:e8:fc:12:d9:71:17:71:ab:ae:b7:76:65:af:f8:
                    13:e0:e2:ae:56:1a:9c:5a:77:5a:67:ee:d1:b4:58:
                    0b:b6:f9:61:fc:22:42:22:78:90:f5:8c:d6:fb:e0:
                    88:4a:69:38:2b:0d:00:ef:cd:59:d7:2e:0f:14:6b:
                    d7:12:cc:f5:c4:98:1b:87:ce:9a:5a:c8:03:5d:4a:
                    c0:21:87:c1:be:ce:2d:04:04:3d:3d:fc:a6:b2:fb:
                    f1:2d:33:ee:b0:84:d3:ab:24:49:33:cb:9d:ba:97:
                    5a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D1:E5:D7:D6:1D:84:CE:05:22:63:2B:D9:3A:F4:14:B1:84:8B:8E
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e18b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:e9:aa:e2:af:db:7a:76:a2:55:43:ff:83:6e:33:9e:b5:6e:
         ce:ff:aa:79:af:f4:cf:7d:8a:71:b7:7d:7d:22:42:14:57:79:
         4d:6b:1b:56:55:fd:a3:cc:64:79:91:cb:b5:1d:6a:36:a1:1e:
         a3:af:ac:5a:c6:d6:07:d8:e4:4b:e8:20:6e:f7:5f:b3:dc:7a:
         d6:c9:36:3a:a3:47:0a:c0:2e:d9:f6:2c:e8:68:70:96:b4:6d:
         0e:29:56:83:bd:a3:8b:5e:60:de:50:4d:48:66:ad:e7:e9:35:
         06:64:2c:9d:44:09:22:ac:21:56:7a:1d:2e:26:c8:e8:19:48:
         08:bf:4b:24:b6:12:1c:1a:6f:13:12:62:95:06:3c:74:28:e0:
         6f:eb:09:36:08:78:cf:6e:86:af:ae:ce:4b:59:18:ed:ba:af:
         f2:b1:a7:21:79:2c:39:fb:92:9a:18:2a:a0:81:f0:5e:aa:62:
         aa:9e:b7:4b:50:42:d8:10:73:62:a6:58:66:b3:17:cb:50:d3:
         75:db:e7:b9:ea:93:d7:fe:e0:d7:d0:ed:40:9a:0e:18:7e:8c:
         b4:97:0b:31:4d:b0:2c:20:20:48:e3:9f:9e:3d:14:d7:31:d9:
         87:32:1d:64:de:f9:0b:a0:c5:f2:ea:e1:54:00:0d:b8:af:f4:
         93:9b:d4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:30:25 2025 by rpki-client