Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          DhplBgdW9aQ8bzuYGmwMMwTrCkuodKCOBaydauvW/go=
Subject key identifier:   C6:2D:BC:A9:29:0B:1F:86:E0:75:8A:E0:F3:CB:05:17:E9:94:39:FF
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       52C4AB4F99D7CEF2F4537026F76FE3238AC8F608
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:46 +0000
ROA not before:           Fri 04 Jul 2025 00:42:46 +0000
ROA not after:            Fri 03 Jul 2026 00:47:46 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e227::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c4:ab:4f:99:d7:ce:f2:f4:53:70:26:f7:6f:e3:23:8a:c8:f6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:46 2025 GMT
            Not After : Jul  3 00:47:46 2026 GMT
        Subject: CN=C62DBCA9290B1F86E0758AE0F3CB0517E99439FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:75:a7:a3:d9:47:37:26:80:ab:00:d9:1d:72:
                    35:a6:43:dc:82:02:b6:59:13:d6:91:f8:e1:a5:9d:
                    5e:08:89:2d:c6:f3:c2:83:30:98:a2:4d:e2:cb:16:
                    0f:41:da:15:3e:d3:1b:07:c2:48:db:f2:5b:26:72:
                    ed:25:6d:ac:a3:aa:1f:4f:99:1f:9e:55:e8:40:6b:
                    f6:b3:a4:b4:11:95:c0:1e:33:83:44:9a:ff:07:e1:
                    1d:ee:ce:fe:7f:f4:5e:81:b7:ac:af:28:a0:1b:5e:
                    0b:8c:66:5b:66:f9:e0:45:b5:58:78:7a:19:f1:43:
                    22:43:01:1d:e0:77:30:e6:00:1b:95:45:53:fd:3c:
                    31:cd:c1:ee:55:00:94:de:0d:6d:14:90:95:25:68:
                    89:0a:cd:96:46:18:9f:56:85:f9:fb:80:62:c0:46:
                    ea:48:55:d0:08:e2:64:87:00:83:f5:e9:67:0b:be:
                    65:1f:5c:25:90:c6:78:80:bc:d0:c3:a0:09:63:8f:
                    e2:80:4d:44:21:ab:44:c8:1c:2a:db:89:ba:51:9c:
                    6e:f7:66:3a:d9:30:8e:b6:2b:1d:58:d3:9b:4a:dc:
                    bc:8a:e6:71:ad:b5:19:57:c1:bf:e7:e1:73:e2:40:
                    2e:d3:ec:56:83:32:60:ed:0d:ac:44:34:41:ca:ad:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2D:BC:A9:29:0B:1F:86:E0:75:8A:E0:F3:CB:05:17:E9:94:39:FF
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e227::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:94:39:49:c0:7c:16:1b:99:fd:6d:d5:8c:05:f8:aa:06:4f:
         f3:8c:6b:1d:15:82:90:e1:af:5b:d4:67:e9:30:b5:e3:c3:64:
         15:70:a1:0a:dd:4b:55:c3:d9:8e:6b:5e:d9:1b:5b:73:34:57:
         21:d1:49:f8:3c:c7:9f:20:56:25:f5:11:55:97:4d:ad:8b:1c:
         ef:dc:ac:90:64:13:b4:fe:c9:ed:ff:ed:c2:44:3a:ef:d0:6a:
         a4:ba:48:9c:60:56:6d:a8:1f:5b:ec:a3:95:ba:b7:59:94:a6:
         f5:09:76:17:78:9c:01:00:15:58:2d:10:05:1a:7e:49:ab:e1:
         c3:6c:52:18:0b:82:ed:00:13:ce:69:a3:8b:54:b7:3d:4d:a0:
         c3:78:03:1d:b8:7a:6f:d3:12:5d:4d:41:50:e5:b2:2b:cd:f5:
         7b:55:3c:6d:61:dd:90:dd:74:ed:a8:9d:6c:b9:16:eb:21:21:
         2a:82:54:52:08:4f:24:47:2f:de:67:92:0d:7a:59:bb:b7:37:
         01:bd:ca:2c:14:e4:85:b7:00:68:01:35:e7:f6:d5:18:7a:fa:
         f1:02:dc:0b:65:b2:5a:0b:a1:fe:f9:ae:5c:a4:98:a9:b2:81:
         18:71:3e:ee:14:01:56:51:95:35:c1:e9:74:41:92:c9:6e:1b:
         a6:cb:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:48:54 2025 by rpki-client