Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653533623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653533623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          EjBH1dZlD55jgVenBd/Qwc9+MuvjFKrBesaDPApCHTA=
Subject key identifier:   EF:7B:78:FB:66:89:53:58:18:75:13:F9:6C:5E:77:BC:2A:7D:C3:A2
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       309D87C7F2EF7C4C5220B4964C4F49EE361588C4
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653533623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:41 +0000
ROA not before:           Fri 04 Jul 2025 00:42:41 +0000
ROA not after:            Fri 03 Jul 2026 00:47:41 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e53b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9d:87:c7:f2:ef:7c:4c:52:20:b4:96:4c:4f:49:ee:36:15:88:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:41 2025 GMT
            Not After : Jul  3 00:47:41 2026 GMT
        Subject: CN=EF7B78FB66895358187513F96C5E77BC2A7DC3A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:cc:46:39:87:b9:01:2c:a4:87:21:91:30:
                    0a:59:88:2e:3e:44:e4:24:f5:be:10:25:64:a0:70:
                    4f:1e:91:16:b6:4c:90:78:47:ca:c7:6d:4f:59:a1:
                    0f:a6:f1:e3:ee:04:e6:1f:0e:73:b0:c0:11:a6:53:
                    d8:0d:ee:3b:0e:3f:5a:72:a6:f8:22:76:42:74:95:
                    24:73:ce:49:e6:e6:18:c8:8a:33:b1:b8:67:f6:ff:
                    ab:94:d1:24:4b:c4:bc:86:ac:15:2a:21:db:0f:d4:
                    da:2d:b1:60:71:84:82:49:cc:b9:45:3b:3b:3d:2e:
                    0b:f0:2b:67:de:af:78:50:6c:75:8d:a7:50:02:03:
                    9d:11:05:c1:f3:91:37:32:f5:e7:20:d4:9d:91:44:
                    f3:ee:69:89:34:16:b6:29:07:1e:ed:25:d4:74:f7:
                    07:18:25:22:9b:e5:32:7a:9d:70:69:33:52:4a:d7:
                    78:ba:4d:3d:3b:f9:9c:2e:14:24:0b:39:c8:75:ef:
                    a2:22:90:76:b0:5f:07:08:a0:1e:9f:3b:ac:8c:45:
                    d4:5f:f0:cf:6c:82:db:e4:c4:ad:ac:ec:63:18:35:
                    eb:ac:2d:d5:03:46:9a:6f:d4:1c:16:12:9e:42:12:
                    0a:8c:e3:cf:c1:6b:cb:36:b2:1b:8f:6a:6c:7e:cd:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7B:78:FB:66:89:53:58:18:75:13:F9:6C:5E:77:BC:2A:7D:C3:A2
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653533623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e53b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:e1:94:d1:fc:c1:60:d1:68:aa:00:5d:69:60:9e:59:ca:91:
         b1:bf:55:ae:52:a1:77:4d:98:94:73:88:7b:cf:14:b1:7b:86:
         01:5c:c0:c6:59:6c:58:3f:67:c9:f0:79:8e:c6:a1:a4:65:27:
         e7:fd:aa:82:e2:40:4e:3e:b2:bc:03:15:35:7e:97:e5:df:3e:
         09:c5:c1:e7:92:8b:57:63:61:e7:6d:30:57:3d:21:6a:51:e6:
         38:6e:46:68:ac:2a:1f:ea:00:5b:77:dc:cc:f6:02:95:b4:2d:
         17:8a:c8:7e:10:51:2f:c7:34:6a:6f:84:a5:fa:fa:ed:76:2d:
         c8:59:15:7a:bb:82:ec:84:33:36:c9:31:e6:5b:17:d8:21:d0:
         02:70:28:7c:ee:64:f8:c6:0f:97:17:4f:92:23:1b:c9:4f:3b:
         6b:37:28:6c:d3:da:bd:d9:16:cd:aa:d4:5e:fb:7f:af:7f:6c:
         32:73:30:71:36:ff:67:b0:96:ab:1b:f5:b4:bb:5f:12:0b:ed:
         ae:af:f5:d6:8c:13:29:ba:89:b1:f9:60:ee:c7:66:db:37:31:
         85:12:c0:83:bd:db:7e:62:dd:53:03:49:07:5c:59:fc:c8:bd:
         e1:df:b9:fa:37:70:a6:c0:15:9e:73:3c:ad:dc:8e:e7:00:99:
         84:15:3b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:26:46 2025 by rpki-client