Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          RUOa/C6ZeQkyvcJ46eYRBQL+k+MZHgtM3zlLYWDrqdM=
Subject key identifier:   61:0E:EB:9B:7C:F0:D2:40:DC:2E:6C:7E:96:42:27:8A:D7:C2:14:C4
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       5275E69B1E3D43A45DB13201821EEFB193E98A96
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:43 +0000
ROA not before:           Fri 04 Jul 2025 00:42:43 +0000
ROA not after:            Fri 03 Jul 2026 00:47:43 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e584::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:75:e6:9b:1e:3d:43:a4:5d:b1:32:01:82:1e:ef:b1:93:e9:8a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:43 2025 GMT
            Not After : Jul  3 00:47:43 2026 GMT
        Subject: CN=610EEB9B7CF0D240DC2E6C7E9642278AD7C214C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:59:c5:07:70:99:fd:18:80:74:7a:2f:18:
                    c7:bd:cb:0d:9a:1c:3b:32:3f:2e:40:4f:c5:41:5f:
                    ab:d2:e3:ec:e3:cf:00:67:bf:76:c0:6b:0a:76:81:
                    16:df:8d:3f:87:3a:8f:92:72:b6:5c:7b:09:56:84:
                    46:7b:98:c4:74:9f:04:7c:1b:72:c6:4b:dd:4a:66:
                    07:a9:5c:d9:84:9f:f5:a9:ab:49:cc:47:36:fb:4a:
                    f0:4e:ae:23:31:9f:de:9e:af:c1:8f:57:ca:0c:dd:
                    cf:f9:69:ac:56:ae:93:38:91:ef:93:81:1e:88:de:
                    f9:a1:ea:5d:bd:9c:84:b5:13:2e:4e:28:b2:3d:50:
                    a7:b3:24:94:3a:ad:99:23:f2:af:e3:66:4b:63:c1:
                    6a:ee:e4:dd:cf:09:75:f7:16:1f:74:42:d2:1f:34:
                    b7:b8:fd:e3:c1:14:41:5b:ed:ca:42:02:31:ea:a7:
                    02:5e:8b:b5:b5:5b:38:ae:e7:d1:23:49:70:d3:ae:
                    79:6c:e2:d2:c9:33:69:33:1f:b8:47:c9:93:62:d3:
                    f1:ac:01:70:e5:3c:dd:99:7a:b1:3b:44:0c:5c:97:
                    03:97:45:6e:a4:0c:4e:fb:25:51:3a:46:ea:d0:03:
                    e6:3f:d1:85:fd:55:0f:03:c8:c5:e1:85:91:cd:bf:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0E:EB:9B:7C:F0:D2:40:DC:2E:6C:7E:96:42:27:8A:D7:C2:14:C4
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e584::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:57:c1:64:82:dc:a6:a4:70:d8:5d:fc:68:dd:1b:f5:fa:ee:
         1e:0e:dd:a1:8d:db:f4:e0:7e:27:1d:5b:cd:24:a2:58:82:a1:
         67:9a:cc:8c:7d:ae:68:a7:0d:42:31:97:42:54:96:30:b3:d6:
         be:8f:e5:d9:a2:33:3d:27:68:00:5f:a0:56:16:8f:db:78:db:
         6c:f9:8f:49:af:ec:a3:8d:7d:cc:16:4e:a7:23:3e:5f:82:25:
         12:82:b2:ab:5f:52:da:04:00:65:90:d5:02:da:07:4f:3d:9b:
         0a:83:8d:29:df:23:63:d1:40:48:f6:ad:49:d3:17:56:4f:10:
         da:51:d1:d2:31:ef:0d:7b:2e:c5:e9:ef:fe:da:20:30:d2:d3:
         a1:11:ce:89:d1:09:c7:d9:db:01:d0:4f:bc:95:ec:e2:f2:78:
         f8:2b:c1:20:38:de:bb:d9:3b:59:4f:77:35:41:66:af:07:b8:
         b1:57:53:21:48:7a:b2:3f:7c:bf:c8:80:dc:70:0b:57:cd:fb:
         de:3c:d0:ea:fd:43:ba:0e:c8:11:73:8f:d0:c6:0f:c8:63:4f:
         55:7d:62:94:82:20:64:07:42:f6:28:70:63:86:92:06:c3:7a:
         86:d9:eb:f9:a4:a4:7f:9d:42:cc:fd:d2:bc:59:ad:24:3d:bb:
         ed:78:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:53:48 2025 by rpki-client