Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          Udx2gjD3GgIiCTFITnSYsntkFD6THhhVXXnDZLlZwhE=
Subject key identifier:   91:8C:16:39:D5:14:D6:CC:4B:17:01:40:F6:98:D0:80:B1:22:22:39
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       07D4410B7BF4DEC78A95409E85A25D5A303283FA
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:43 +0000
ROA not before:           Fri 04 Jul 2025 00:42:43 +0000
ROA not after:            Fri 03 Jul 2026 00:47:43 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e27a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d4:41:0b:7b:f4:de:c7:8a:95:40:9e:85:a2:5d:5a:30:32:83:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:43 2025 GMT
            Not After : Jul  3 00:47:43 2026 GMT
        Subject: CN=918C1639D514D6CC4B170140F698D080B1222239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f3:b1:87:77:48:50:7e:0f:8b:00:e4:90:5f:
                    d6:be:56:17:6d:c8:5a:a3:b3:8b:ff:59:f9:80:60:
                    1b:d1:33:1b:ea:b8:d4:53:a5:1d:50:55:96:cc:e3:
                    ef:e5:1b:a8:16:4a:bb:8f:bc:c5:b4:21:aa:6a:2a:
                    d4:af:61:6f:fb:cb:6d:ac:93:99:f2:b1:25:d6:19:
                    8c:50:bf:ec:35:d7:93:94:ae:ca:8b:fb:c7:b0:e0:
                    ea:f5:09:e3:d7:4a:0d:de:b2:03:a4:29:16:17:24:
                    a8:f6:89:90:86:04:8e:61:9d:f4:88:1a:fb:00:b6:
                    bf:ee:bd:91:9c:b4:dc:7e:89:8f:6a:30:be:e6:b4:
                    d3:19:b7:01:5b:1b:4e:1b:7c:6b:ce:e2:8d:9f:00:
                    71:5c:5a:ff:c8:6a:81:b0:e8:8f:03:72:ff:3b:9f:
                    4f:3a:a7:5c:53:07:04:88:60:75:83:16:5f:37:7e:
                    33:20:00:2f:9c:9d:d1:0a:b4:ab:96:8d:a1:3a:d5:
                    48:56:41:a5:8e:82:d8:dd:70:14:42:35:b0:44:f2:
                    72:a6:f4:61:1b:76:59:2b:ec:bc:0a:21:bd:45:0a:
                    c2:47:b4:f7:b7:f3:9b:c9:13:53:14:45:8d:b1:8d:
                    c8:de:1d:53:dd:91:f7:20:ff:e9:54:7d:2a:c1:65:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8C:16:39:D5:14:D6:CC:4B:17:01:40:F6:98:D0:80:B1:22:22:39
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e27a::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:dd:d0:f0:1c:cf:0f:7f:9a:e8:43:ae:22:66:9b:25:0f:
         8f:24:73:8e:18:41:10:c7:73:e5:dc:65:ec:b1:f4:3d:4e:be:
         ed:6e:e1:30:d4:97:5b:7c:62:80:6d:f6:46:a9:75:39:90:79:
         bb:63:c1:21:8a:43:3d:4d:2f:3b:7b:ac:1b:ab:e9:ae:09:74:
         66:db:5b:63:c1:f0:e8:8d:c6:79:2c:58:47:d6:18:5f:a7:76:
         c2:b1:00:dc:71:e7:d4:bf:a4:a7:36:a4:f4:5f:87:13:6d:4f:
         74:f6:6a:d5:75:49:f7:a5:57:52:0d:5a:2f:e8:24:f5:5a:d0:
         7a:cc:90:35:21:34:60:36:a9:c7:9f:63:d8:97:2f:c7:69:24:
         4b:4a:bd:b6:53:e5:b0:08:a4:ee:1a:9f:fa:5b:96:a3:3b:8f:
         bb:46:2a:d7:ff:eb:3d:3b:fd:24:5e:56:49:fb:22:98:1c:18:
         4b:bb:9c:62:0a:64:83:af:b7:c6:97:19:b0:0b:48:ef:da:b1:
         8d:83:22:a1:5d:38:8c:0b:e3:cc:eb:53:b2:94:45:fa:9c:92:
         31:6d:43:a1:da:be:5a:6a:f7:51:c6:ba:cd:ff:26:b6:84:bf:
         cd:3b:d6:09:a3:37:dc:6f:94:f2:dc:e3:76:e6:25:d2:75:03:
         70:66:32:85
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUB9RBC3v03seKlUCehaJdWjAyg/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDNaFw0yNjA3MDMwMDQ3NDNaMDMxMTAvBgNV
BAMTKDkxOEMxNjM5RDUxNEQ2Q0M0QjE3MDE0MEY2OThEMDgwQjEyMjIyMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF87GHd0hQfg+LAOSQX9a+Vhdt
yFqjs4v/WfmAYBvRMxvquNRTpR1QVZbM4+/lG6gWSruPvMW0IapqKtSvYW/7y22s
k5nysSXWGYxQv+w115OUrsqL+8ew4Or1CePXSg3esgOkKRYXJKj2iZCGBI5hnfSI
GvsAtr/uvZGctNx+iY9qML7mtNMZtwFbG04bfGvO4o2fAHFcWv/IaoGw6I8Dcv87
n086p1xTBwSIYHWDFl83fjMgAC+cndEKtKuWjaE61UhWQaWOgtjdcBRCNbBE8nKm
9GEbdlkr7LwKIb1FCsJHtPe385vJE1MURY2xjcjeHVPdkfcg/+lUfSrBZTnpAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUkYwWOdUU1sxLFwFA9pjQgLEiIjkwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzIzNzYxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+J6
MA0GCSqGSIb3DQEBCwUAA4IBAQCCGt3Q8BzPD3+a6EOuImabJQ+PJHOOGEEQx3Pl
3GXssfQ9Tr7tbuEw1JdbfGKAbfZGqXU5kHm7Y8EhikM9TS87e6wbq+muCXRm21tj
wfDojcZ5LFhH1hhfp3bCsQDccefUv6SnNqT0X4cTbU909mrVdUn3pVdSDVov6CT1
WtB6zJA1ITRgNqnHn2PYly/HaSRLSr22U+WwCKTuGp/6W5ajO4+7RirX/+s9O/0k
XlZJ+yKYHBhLu5xiCmSDr7fGlxmwC0jv2rGNgyKhXTiMC+PM61OylEX6nJIxbUOh
2r5aavdRxrrN/ya2hL/NO9YJozfcb5Ty3ON25iXSdQNwZjKF
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:24:01 2025 by rpki-client