Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          dQTOFgiprQMfO3uVXTFGRaNuUHhhnFuMXmCM5Gwt/Fw=
Subject key identifier:   CA:49:6B:85:AD:DC:DF:8D:56:1A:04:DA:EE:32:44:60:84:9D:F4:9A
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       332592B4DC9B73DA85ED18ABD5ACE65BA0F5D400
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:41 +0000
ROA not before:           Fri 04 Jul 2025 00:42:41 +0000
ROA not after:            Fri 03 Jul 2026 00:47:41 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e2f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:25:92:b4:dc:9b:73:da:85:ed:18:ab:d5:ac:e6:5b:a0:f5:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:41 2025 GMT
            Not After : Jul  3 00:47:41 2026 GMT
        Subject: CN=CA496B85ADDCDF8D561A04DAEE324460849DF49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:04:99:03:c8:ee:54:e0:9d:f6:4b:5d:46:
                    d4:d6:8b:7a:fa:90:b7:e1:53:31:d1:5f:4c:d0:1e:
                    d1:0f:3e:5d:7a:5d:ce:cb:8d:14:2e:64:07:80:52:
                    98:3f:41:9f:01:9f:15:06:5e:0b:93:d3:1a:55:c4:
                    07:e1:16:4a:63:b7:4f:d2:46:2e:ef:a2:f7:7a:bd:
                    da:7d:6f:4f:33:c8:19:2b:35:8d:5f:41:97:f9:89:
                    37:3d:5f:d2:42:e3:80:47:7d:b7:df:03:7b:0f:2d:
                    a5:57:d8:cb:0d:e6:48:b3:75:25:24:cb:bf:72:1c:
                    dd:8f:0f:de:71:5b:fc:08:0b:cf:cd:95:3e:5a:06:
                    ee:cf:3c:6c:b6:3a:77:ad:91:c5:90:d9:4f:4b:5b:
                    67:d1:65:8c:e4:96:49:2f:bf:16:c0:b0:b0:2f:e3:
                    3e:39:d3:20:79:cc:bd:f8:cc:5e:50:d3:61:36:19:
                    f0:49:24:7b:73:73:08:0f:f5:d6:86:3d:11:c1:10:
                    94:0a:45:37:a5:e7:9c:4c:39:f5:1f:3a:42:08:12:
                    ea:14:3d:23:2f:af:30:f1:91:e2:b2:dd:46:0c:78:
                    50:9f:84:8a:d7:b9:d7:b1:d7:9b:6a:fb:8f:f9:c5:
                    8b:bd:bd:c8:8a:3b:72:86:31:89:f1:73:c3:84:a4:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:49:6B:85:AD:DC:DF:8D:56:1A:04:DA:EE:32:44:60:84:9D:F4:9A
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e2f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:2e:a3:92:51:a7:ec:23:c8:7f:cc:67:ae:de:d9:16:d8:80:
         6f:f4:c9:3c:30:f1:63:0c:96:a8:eb:96:56:c7:06:52:1a:e7:
         8b:ca:e1:a5:55:5a:48:04:85:a2:48:b5:52:b9:6f:86:f8:24:
         b9:cb:f6:5b:03:9b:73:df:af:33:e2:cd:01:fd:61:c7:20:55:
         7e:39:e4:2f:93:8c:b8:9c:2a:64:cd:cb:09:95:41:80:97:f4:
         6a:7a:b9:d6:33:1d:aa:7b:fa:5c:55:1d:e8:6c:01:14:03:ef:
         20:ba:b2:2c:c0:93:d3:97:d5:a1:b8:56:b8:27:8a:36:a5:f4:
         45:31:8b:81:10:46:32:dd:83:07:8d:2d:b8:f4:ee:41:b2:c9:
         4f:28:b5:e0:49:28:1c:8f:ca:d5:3b:9a:44:a6:36:4c:97:ad:
         3e:81:6c:31:3e:ec:ef:d1:91:55:3d:9f:c5:95:25:eb:d1:4b:
         b2:76:a0:6f:a7:40:40:e3:03:07:e1:9b:01:a7:26:51:03:9e:
         42:a2:de:87:dc:9c:40:8d:e4:ba:68:ca:bd:78:59:40:58:22:
         88:ec:9d:cf:35:68:23:56:3e:c4:c0:f8:e4:55:f3:78:97:a9:
         83:8c:99:11:78:63:03:de:f1:f0:76:42:ad:b1:d7:28:50:14:
         c7:b3:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:56:18 2025 by rpki-client