Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653636643a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653636643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          NwAz3AaTh/Ub54fCI6igUDdC6G40V5fZn0JB3HUZs7A=
Subject key identifier:   79:F7:3D:F0:6B:39:0E:D3:65:7F:BE:92:A1:BE:86:A5:1A:38:72:45
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       17E793E249D19DA55A07F0B860E18B1A45AB7191
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653636643a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e66d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e7:93:e2:49:d1:9d:a5:5a:07:f0:b8:60:e1:8b:1a:45:ab:71:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=79F73DF06B390ED3657FBE92A1BE86A51A387245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:89:45:ba:7f:72:1d:d3:39:df:72:03:95:11:
                    8c:7e:f2:1c:fb:71:f1:6e:0c:0c:64:2e:2f:3d:9b:
                    57:c0:6d:7b:8d:1e:7b:d9:6f:02:78:11:21:a9:1c:
                    26:78:ea:0b:f2:0b:e0:f6:2c:6b:64:d2:c0:b7:a8:
                    12:05:35:2d:ea:12:a6:5c:9d:56:13:20:cc:e4:7a:
                    6c:34:2e:36:96:6d:fe:d7:8a:b8:c3:0c:0d:79:3c:
                    30:f9:33:4d:87:a6:03:66:04:a4:c3:91:2b:ad:19:
                    4b:41:73:fb:14:c7:bf:14:8c:be:67:80:92:6d:2c:
                    05:ef:90:29:37:ed:c2:be:59:fb:ef:4d:72:2b:ac:
                    a0:33:b8:ed:3f:a1:90:0f:0e:8d:68:0e:4b:1f:7c:
                    1b:27:53:fa:e5:44:70:6f:46:7d:6d:68:3f:3b:d9:
                    a1:8b:7c:94:e7:d7:aa:84:dc:d1:10:0f:35:e6:42:
                    cf:69:05:ce:b8:8b:c5:55:1c:26:17:af:18:9e:68:
                    76:6d:c7:b3:b7:63:e1:da:e7:39:e3:56:93:5b:2e:
                    04:e1:cd:b1:22:77:07:a3:10:3a:0f:04:17:b1:f9:
                    18:27:7c:35:b3:bd:91:b2:36:29:d3:05:e7:32:74:
                    6f:dd:af:b9:e6:68:8b:7e:d7:90:bf:5f:e8:b0:87:
                    6c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F7:3D:F0:6B:39:0E:D3:65:7F:BE:92:A1:BE:86:A5:1A:38:72:45
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653636643a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e66d::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:00:bd:2a:8b:c6:e8:cf:24:a3:19:49:09:ee:2d:a4:a6:43:
         3a:42:36:84:bd:4a:15:77:dd:b8:5f:02:a5:2e:e6:38:22:75:
         bb:00:73:ad:5a:46:fb:f4:bc:a4:e6:91:af:18:1d:b4:f9:28:
         62:20:0e:5d:46:95:57:33:da:71:65:98:44:eb:e0:b9:ac:68:
         12:a7:ac:35:99:22:05:c5:37:95:03:b0:7b:eb:f4:f3:54:0c:
         ba:a7:bb:64:b7:3d:8e:09:e4:3c:ca:a2:70:18:4b:bc:f6:c1:
         d7:b4:4a:ea:77:57:b8:b7:76:b4:fd:9f:24:45:6e:8d:4f:70:
         c7:8f:49:57:1e:82:e7:4c:1a:ea:67:4c:d6:86:f6:f0:e1:f3:
         d8:b8:c5:04:3a:ca:b9:4c:00:66:2e:07:be:24:ac:27:f9:cb:
         45:96:c5:95:72:0f:4c:4d:97:cd:4e:2d:cb:d4:ae:4e:6a:7d:
         de:6e:95:2b:99:3d:16:ee:3e:0c:95:93:79:15:d6:4e:b1:2a:
         17:18:c6:86:cb:91:6b:0f:74:9a:dc:07:63:40:f2:3c:4e:17:
         5b:23:43:bb:06:5c:2e:95:a0:4e:92:d5:17:2c:88:e8:cb:a5:
         08:6e:7e:ce:11:65:e1:71:45:24:97:1e:e2:3e:6d:25:8a:ef:
         b6:b6:63:fe
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUF+eT4knRnaVaB/C4YOGLGkWrcZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV
BAMTKDc5RjczREYwNkIzOTBFRDM2NTdGQkU5MkExQkU4NkE1MUEzODcyNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkiUW6f3Id0znfcgOVEYx+8hz7
cfFuDAxkLi89m1fAbXuNHnvZbwJ4ESGpHCZ46gvyC+D2LGtk0sC3qBIFNS3qEqZc
nVYTIMzkemw0LjaWbf7XirjDDA15PDD5M02HpgNmBKTDkSutGUtBc/sUx78UjL5n
gJJtLAXvkCk37cK+WfvvTXIrrKAzuO0/oZAPDo1oDksffBsnU/rlRHBvRn1taD87
2aGLfJTn16qE3NEQDzXmQs9pBc64i8VVHCYXrxieaHZtx7O3Y+Ha5znjVpNbLgTh
zbEidwejEDoPBBex+RgnfDWzvZGyNinTBecydG/dr7nmaIt+15C/X+iwh2z3AgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUefc98Gs5DtNlf76Sob6GpRo4ckUwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzYzNjY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+Zt
MA0GCSqGSIb3DQEBCwUAA4IBAQAzAL0qi8bozySjGUkJ7i2kpkM6QjaEvUoVd924
XwKlLuY4InW7AHOtWkb79Lyk5pGvGB20+ShiIA5dRpVXM9pxZZhE6+C5rGgSp6w1
mSIFxTeVA7B76/TzVAy6p7tktz2OCeQ8yqJwGEu89sHXtErqd1e4t3a0/Z8kRW6N
T3DHj0lXHoLnTBrqZ0zWhvbw4fPYuMUEOsq5TABmLge+JKwn+ctFlsWVcg9MTZfN
Ti3L1K5Oan3ebpUrmT0W7j4MlZN5FdZOsSoXGMaGy5FrD3Sa3AdjQPI8ThdbI0O7
BlwulaBOktUXLIjoy6UIbn7OEWXhcUUklx7iPm0liu+2tmP+
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:47:37 2025 by rpki-client