Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          FtyxLabI9slGRfAl99Bc/SY47U8OBcS+x3zH6oIg1vw=
Subject key identifier:   90:4F:CA:E3:E8:78:36:8E:B4:15:83:85:01:02:0F:4A:21:B2:02:DE
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       61B5FBADF495FB47EC3C58C9ABC799AF6AFA3558
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:41 +0000
ROA not before:           Fri 04 Jul 2025 00:42:41 +0000
ROA not after:            Fri 03 Jul 2026 00:47:41 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e4a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b5:fb:ad:f4:95:fb:47:ec:3c:58:c9:ab:c7:99:af:6a:fa:35:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:41 2025 GMT
            Not After : Jul  3 00:47:41 2026 GMT
        Subject: CN=904FCAE3E878368EB415838501020F4A21B202DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:eb:01:5a:85:bc:b1:26:b3:82:aa:b8:1d:f8:
                    d2:db:40:ce:94:6e:e8:af:76:06:c2:0d:43:84:cb:
                    e1:94:62:3d:b5:0a:70:3a:73:68:12:f4:cb:88:10:
                    c5:41:ef:0e:3a:0c:ed:7d:59:02:fe:78:f7:87:a9:
                    3b:44:fe:78:02:83:6b:0a:e3:2f:02:a4:13:9d:8a:
                    d9:d4:7d:2b:c0:97:3c:26:3e:fa:0a:dc:d4:7d:34:
                    81:b0:ac:27:92:de:32:3d:d0:57:ed:c7:b9:ea:c7:
                    a2:89:84:8d:35:42:a7:d6:fb:79:eb:71:ec:68:c1:
                    ea:ee:16:5b:47:94:7c:50:bc:8e:33:d7:a8:80:94:
                    60:1d:67:c6:ff:2a:2a:93:15:b1:12:f2:1b:57:bb:
                    f4:5e:2b:2f:2c:07:76:0a:a0:67:10:b3:a3:b2:ab:
                    90:0a:af:f8:9a:19:0b:c4:d8:a0:c7:83:f0:e2:a6:
                    bb:2f:6f:38:f1:74:1f:87:29:e8:9c:cf:d3:04:ca:
                    e8:94:ee:63:0f:4c:51:43:03:be:d8:5b:42:6e:b3:
                    d2:39:53:67:9c:90:ed:4c:0a:83:35:90:11:88:f2:
                    fe:0b:9d:ad:2f:c2:db:f5:c9:53:4f:a5:dd:a6:57:
                    b6:04:3d:cc:8b:a4:a4:9f:50:c6:b1:56:23:ab:47:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4F:CA:E3:E8:78:36:8E:B4:15:83:85:01:02:0F:4A:21:B2:02:DE
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e4a6::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:37:ba:be:be:b7:fb:96:6e:7f:1c:19:1e:5e:dd:46:d1:42:
         fd:57:0c:e7:ac:d5:5c:79:79:7d:49:8f:ef:b5:27:d6:92:fd:
         5f:be:ef:95:9e:51:4b:d6:3b:e7:ba:cd:1c:9b:b2:dd:4f:d1:
         e9:e5:3c:7f:66:94:82:78:e1:60:4e:c0:8d:89:e3:42:33:8f:
         63:c4:a9:d6:1a:6e:76:5f:5f:67:57:26:d6:b0:87:89:a9:5f:
         99:6b:67:3a:89:a8:4a:3b:6a:6a:94:45:f4:a1:17:00:7d:b7:
         8c:72:f2:2c:65:c1:a2:e8:b4:56:e1:a7:f0:69:6f:ea:95:2d:
         3a:bc:25:80:46:81:fa:e8:98:d7:7e:ed:83:e0:a2:a2:0f:38:
         80:68:bc:20:b0:5d:99:0a:ed:fb:aa:1b:5f:ee:e4:4f:62:f4:
         94:28:50:f8:45:8d:05:1a:53:4d:7b:43:0b:97:e6:cd:e2:ab:
         99:4e:f3:2e:c5:00:fa:bb:2c:99:45:a2:a8:04:ef:74:a0:cb:
         06:97:a3:5b:2f:d3:89:06:0d:00:63:69:65:05:9b:7f:49:f2:
         ae:ab:65:67:fb:57:3c:1f:42:42:1f:dd:2d:60:8f:f0:fd:02:
         15:0a:ad:e6:a9:90:c1:79:44:c6:75:2f:0d:e7:ae:98:89:da:
         7d:36:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:10 2025 by rpki-client