Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461383a3a2f34382d3438203d3e20343031353037.roa
File:                     326130663a363238373a653461383a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          FdTNkKt3QHyZmgmKHXVZXR/zuMHCm0LYxJjxRUncmyM=
Subject key identifier:   8C:B7:1F:16:B7:FE:A7:D8:81:A9:A6:2D:CF:1F:6E:81:5D:07:A8:BA
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       71300A6F07597BCC7652454CF85F83BFB7384E40
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461383a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Fri 04 Jul 2025 00:47:43 +0000
ROA not before:           Fri 04 Jul 2025 00:42:43 +0000
ROA not after:            Fri 03 Jul 2026 00:47:43 +0000
asID:                     401507
IP address blocks:        2a0f:6287:e4a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:30:0a:6f:07:59:7b:cc:76:52:45:4c:f8:5f:83:bf:b7:38:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:43 2025 GMT
            Not After : Jul  3 00:47:43 2026 GMT
        Subject: CN=8CB71F16B7FEA7D881A9A62DCF1F6E815D07A8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:e0:57:b5:e6:b2:ca:45:29:51:5b:dd:e8:
                    3e:73:f7:9a:b9:6c:da:03:5d:b6:ac:16:93:63:30:
                    65:a9:45:c9:55:8f:03:24:a7:fb:02:ce:ee:cf:80:
                    04:71:3f:8f:82:9a:a3:0b:ba:99:08:16:91:29:dd:
                    b7:78:dd:fe:75:7d:04:6d:62:f1:7e:aa:c7:04:df:
                    2c:cb:a9:87:0c:c0:41:9d:c1:ca:3b:84:43:34:5c:
                    d6:4c:76:fe:43:a4:e6:e4:62:91:28:65:6f:9a:82:
                    f0:79:c8:24:55:3b:05:b7:96:e7:2c:1e:50:8a:02:
                    36:14:21:7e:35:93:aa:93:dd:e1:9b:c5:05:02:84:
                    d6:ac:34:f9:84:1c:32:15:08:06:13:26:70:2c:5c:
                    08:62:27:5f:0a:ee:0e:4b:3b:16:5b:74:00:dd:d3:
                    2e:9b:01:04:a5:07:e1:18:59:f4:25:ca:57:d2:d7:
                    8a:23:5c:f9:63:ed:2c:fc:07:b3:f1:5d:5d:d8:54:
                    ff:e4:85:08:96:79:d8:6e:4f:7e:c7:7c:ce:23:9f:
                    55:72:bf:8e:44:29:f3:bb:84:8e:dd:7d:e3:8e:2f:
                    5a:c1:09:90:33:c3:9c:5f:5f:1d:59:b4:c5:6a:bf:
                    4a:9a:3c:e5:18:bc:c7:cf:36:18:f3:94:df:29:ea:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B7:1F:16:B7:FE:A7:D8:81:A9:A6:2D:CF:1F:6E:81:5D:07:A8:BA
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461383a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e4a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:1f:48:32:96:30:ab:05:b5:2f:0b:6e:c2:60:bb:a8:1e:
         23:fa:15:cd:17:2a:94:ce:a2:7c:92:a1:a8:7d:5e:7f:c9:a5:
         76:7b:ac:ac:47:8a:8e:2a:88:f3:90:8c:c0:60:9e:3b:42:11:
         73:74:0f:ed:d1:e6:d0:c0:85:62:ee:b0:44:e7:63:2b:5e:d2:
         72:9e:db:f2:21:8d:b6:a1:4b:b5:d9:f3:19:10:46:ea:5c:3e:
         0a:a3:bf:e4:4f:3f:42:90:8d:42:92:f2:ce:a4:a5:81:bd:ef:
         64:6d:c6:1d:7f:5b:7b:7b:2a:21:14:08:e8:2a:d2:a8:f6:76:
         45:9b:11:76:0b:31:25:11:53:ca:44:72:4a:8c:a9:82:35:60:
         b2:0c:9e:cb:86:e6:5b:24:c3:b7:2e:b0:dc:8f:2f:79:df:5b:
         ec:ed:87:43:ba:f4:1d:ac:eb:40:5d:b8:2e:a8:7d:c4:be:b3:
         ca:4b:07:00:66:59:9c:4b:ea:10:25:8b:e3:ad:e3:18:2a:55:
         6f:83:b0:ee:ea:d7:77:74:5f:f3:f4:7a:b5:b2:3c:fa:64:15:
         6f:01:eb:47:32:60:45:13:0e:28:51:f3:c6:3d:03:a3:82:91:
         0d:f4:42:0a:cc:f7:39:d4:76:8c:e1:fb:6d:ff:ec:b4:3a:e9:
         46:33:91:a2
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUcTAKbwdZe8x2UkVM+F+Dv7c4TkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDNaFw0yNjA3MDMwMDQ3NDNaMDMxMTAvBgNV
BAMTKDhDQjcxRjE2QjdGRUE3RDg4MUE5QTYyRENGMUY2RTgxNUQwN0E4QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0buBXteayykUpUVvd6D5z95q5
bNoDXbasFpNjMGWpRclVjwMkp/sCzu7PgARxP4+CmqMLupkIFpEp3bd43f51fQRt
YvF+qscE3yzLqYcMwEGdwco7hEM0XNZMdv5DpObkYpEoZW+agvB5yCRVOwW3lucs
HlCKAjYUIX41k6qT3eGbxQUChNasNPmEHDIVCAYTJnAsXAhiJ18K7g5LOxZbdADd
0y6bAQSlB+EYWfQlylfS14ojXPlj7Sz8B7PxXV3YVP/khQiWedhuT37HfM4jn1Vy
v45EKfO7hI7dfeOOL1rBCZAzw5xfXx1ZtMVqv0qaPOUYvMfPNhjzlN8p6tN5AgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUjLcfFrf+p9iBqaYtzx9ugV0HqLowHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzQ2MTM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzQzMDMxMzUzMDM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+So
MA0GCSqGSIb3DQEBCwUAA4IBAQA81R9IMpYwqwW1LwtuwmC7qB4j+hXNFyqUzqJ8
kqGofV5/yaV2e6ysR4qOKojzkIzAYJ47QhFzdA/t0ebQwIVi7rBE52MrXtJyntvy
IY22oUu12fMZEEbqXD4Ko7/kTz9CkI1CkvLOpKWBve9kbcYdf1t7eyohFAjoKtKo
9nZFmxF2CzElEVPKRHJKjKmCNWCyDJ7LhuZbJMO3LrDcjy9531vs7YdDuvQdrOtA
XbguqH3EvrPKSwcAZlmcS+oQJYvjreMYKlVvg7Du6td3dF/z9Hq1sjz6ZBVvAetH
MmBFEw4oUfPGPQOjgpEN9EIKzPc51HaM4ftt/+y0OulGM5Gi
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:00:48 2025 by rpki-client