Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653233373a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653233373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          zipXWmW7E296jbvhf7kKvUEWAFCfWScJ+S01I0QCZ2E=
Subject key identifier:   3F:94:01:69:44:5F:0C:C2:4B:BE:50:CA:07:4C:34:4A:8A:27:B5:5A
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       6E74A4C34AD71EA8EE467C81F0F6D50C65D5DE4A
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653233373a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:48 +0000
ROA not before:           Fri 04 Jul 2025 00:42:48 +0000
ROA not after:            Fri 03 Jul 2026 00:47:48 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e237::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:74:a4:c3:4a:d7:1e:a8:ee:46:7c:81:f0:f6:d5:0c:65:d5:de:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:48 2025 GMT
            Not After : Jul  3 00:47:48 2026 GMT
        Subject: CN=3F940169445F0CC24BBE50CA074C344A8A27B55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:aa:23:f9:64:5a:22:50:ea:fe:43:72:3d:bf:
                    58:5e:de:4e:be:e7:a4:ae:67:a6:1d:4d:37:a4:55:
                    9c:14:5a:20:3c:e2:95:67:d2:c7:af:ad:1f:83:47:
                    4b:a3:74:71:08:7c:89:b1:68:20:0c:68:e1:93:45:
                    7c:90:5d:49:72:5c:67:39:46:51:15:cd:1d:9b:d4:
                    62:d6:82:97:81:85:06:4d:fe:bc:c9:e3:50:2b:69:
                    81:86:63:3f:86:fb:57:60:a2:ac:f4:90:06:8a:c0:
                    23:02:10:89:03:34:e6:fc:d9:5a:83:11:d6:91:f2:
                    75:4e:b2:37:42:5c:94:7a:72:19:f3:4a:f3:e2:f1:
                    67:18:f7:be:45:30:90:f6:ee:b8:25:a1:65:23:82:
                    c1:10:dd:94:fc:9c:c8:c5:ea:4c:db:c2:45:b7:48:
                    4f:dc:12:38:2a:a6:a3:98:b7:cd:8d:96:a4:3b:8e:
                    57:40:73:bf:31:62:4a:4e:f9:f9:7e:7a:f5:59:f0:
                    c3:99:11:97:6d:c1:0f:b8:e6:92:99:0c:9c:1f:88:
                    0d:29:4f:61:c8:6b:92:fe:e4:45:92:d9:95:b1:f3:
                    8a:82:a7:b0:e7:ab:54:eb:72:ad:b2:4e:82:a2:37:
                    6b:9b:f2:17:5a:9b:10:3a:7d:1e:da:d4:6d:b6:3e:
                    0a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:94:01:69:44:5F:0C:C2:4B:BE:50:CA:07:4C:34:4A:8A:27:B5:5A
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653233373a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e237::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:8b:30:96:98:1f:0e:5d:0b:50:fe:6c:f7:da:24:78:62:72:
         1d:a9:26:7d:c3:1d:e3:0c:5d:9b:23:cb:09:f3:b6:0c:10:f5:
         1f:49:fd:8c:b2:56:06:b1:b2:3c:4c:68:e9:88:b8:6b:cb:62:
         ca:d6:41:37:85:5e:7d:2d:58:dc:ca:17:72:be:2d:37:a5:d5:
         4d:5a:0d:dc:0d:36:39:99:8c:58:ba:a7:34:6f:30:64:48:a5:
         cf:0c:52:ed:2a:86:82:44:5c:8a:7e:f3:30:5d:d1:16:68:b9:
         53:59:71:4d:77:21:f5:7d:5d:bd:18:dd:f2:69:5c:83:6e:86:
         5a:40:ed:e5:3d:dd:e6:16:02:68:f6:ac:24:f0:ab:24:7b:0e:
         74:84:5f:1c:cd:06:c8:15:cf:f7:66:e3:52:5d:85:e3:07:3c:
         c8:73:34:d0:52:0e:59:61:f6:0b:d0:af:6b:56:1a:6a:a4:9f:
         60:84:95:f4:16:a7:47:05:1c:81:63:0b:e8:c9:02:6e:12:52:
         20:51:24:ca:b3:0a:de:c4:4b:f2:47:71:a6:09:49:c6:63:09:
         e5:d0:cb:77:55:c9:ef:77:4b:36:5d:b9:31:31:86:6f:18:8e:
         66:d5:d8:39:89:b0:04:4b:50:96:26:51:8c:c2:f4:4f:bb:1c:
         c2:8f:67:db
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUbnSkw0rXHqjuRnyB8PbVDGXV3kowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDhaFw0yNjA3MDMwMDQ3NDhaMDMxMTAvBgNV
BAMTKDNGOTQwMTY5NDQ1RjBDQzI0QkJFNTBDQTA3NEMzNDRBOEEyN0I1NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsqiP5ZFoiUOr+Q3I9v1he3k6+
56SuZ6YdTTekVZwUWiA84pVn0sevrR+DR0ujdHEIfImxaCAMaOGTRXyQXUlyXGc5
RlEVzR2b1GLWgpeBhQZN/rzJ41AraYGGYz+G+1dgoqz0kAaKwCMCEIkDNOb82VqD
EdaR8nVOsjdCXJR6chnzSvPi8WcY975FMJD27rgloWUjgsEQ3ZT8nMjF6kzbwkW3
SE/cEjgqpqOYt82NlqQ7jldAc78xYkpO+fl+evVZ8MOZEZdtwQ+45pKZDJwfiA0p
T2HIa5L+5EWS2ZWx84qCp7Dnq1Trcq2yToKiN2ub8hdamxA6fR7a1G22Pgq/AgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUP5QBaURfDMJLvlDKB0w0SoontVowHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzIzMzM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+I3
MA0GCSqGSIb3DQEBCwUAA4IBAQA+izCWmB8OXQtQ/mz32iR4YnIdqSZ9wx3jDF2b
I8sJ87YMEPUfSf2MslYGsbI8TGjpiLhry2LK1kE3hV59LVjcyhdyvi03pdVNWg3c
DTY5mYxYuqc0bzBkSKXPDFLtKoaCRFyKfvMwXdEWaLlTWXFNdyH1fV29GN3yaVyD
boZaQO3lPd3mFgJo9qwk8Kskew50hF8czQbIFc/3ZuNSXYXjBzzIczTQUg5ZYfYL
0K9rVhpqpJ9ghJX0FqdHBRyBYwvoyQJuElIgUSTKswrexEvyR3GmCUnGYwnl0Mt3
Vcnvd0s2XbkxMYZvGI5m1dg5ibAES1CWJlGMwvRPuxzCj2fb
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:47:14 2025 by rpki-client