Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          nzFafsAgeekIPJuwH9KgHpNqacQi00kYuJov4uiE1CQ=
Subject key identifier:   01:91:CC:6B:C0:C2:7E:59:0D:B7:11:56:E5:35:0B:46:9C:AA:C9:AF
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       798DC424AFF9AC4DD08C636C590CCCACCF7404A7
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:43 +0000
ROA not before:           Fri 04 Jul 2025 00:42:43 +0000
ROA not after:            Fri 03 Jul 2026 00:47:43 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e799::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8d:c4:24:af:f9:ac:4d:d0:8c:63:6c:59:0c:cc:ac:cf:74:04:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:43 2025 GMT
            Not After : Jul  3 00:47:43 2026 GMT
        Subject: CN=0191CC6BC0C27E590DB71156E5350B469CAAC9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:7f:cd:64:cf:b6:3e:47:c9:cb:a5:f8:79:
                    63:f2:7a:85:6f:a2:6f:27:4a:fe:73:5a:29:39:74:
                    62:6a:6f:19:c0:cb:a8:bf:12:32:ba:98:d4:b0:e5:
                    96:b5:20:5a:18:d2:8a:ff:7c:3b:fa:cf:58:f7:d4:
                    45:e5:19:33:f0:ed:e5:3c:ac:34:e6:62:81:84:61:
                    79:e8:e2:f8:e1:f0:64:df:87:22:c1:e3:8d:d2:6f:
                    ea:f2:98:8e:8e:0d:f8:f3:19:59:92:fa:46:23:fc:
                    e6:f4:4a:50:e8:cd:c1:07:57:35:e7:cc:9c:44:2d:
                    da:e6:28:81:18:f5:09:6a:f4:e3:59:13:ad:7c:06:
                    e9:50:f6:a6:33:35:dd:6e:66:37:a0:72:04:06:87:
                    6b:f7:c8:f7:1c:1a:91:d8:2a:e1:2b:dd:7a:cd:b3:
                    75:fd:b4:ff:27:8c:4a:da:cc:4e:52:94:1a:83:2a:
                    bb:fb:4f:0b:a8:5a:90:5f:d6:99:66:bc:89:27:87:
                    ef:be:80:6d:9d:2e:5f:6b:fe:27:45:77:50:35:12:
                    ad:83:81:0a:14:d0:e5:9b:32:fd:c7:f9:8e:84:3c:
                    11:72:69:bd:a5:31:59:bc:05:21:7e:1b:f6:68:59:
                    e1:77:a9:b8:89:29:63:41:95:f5:9c:10:f3:b7:01:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:CC:6B:C0:C2:7E:59:0D:B7:11:56:E5:35:0B:46:9C:AA:C9:AF
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e799::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:12:b1:21:c3:05:d4:51:e1:18:7a:11:d1:af:5b:f4:f3:63:
         0a:38:35:1e:8a:32:47:4c:8b:bc:cd:f0:c9:5f:b7:31:8f:ad:
         91:af:7d:57:6b:a6:a8:00:1a:ad:cb:42:fe:5f:20:2b:42:d2:
         95:fd:ff:a9:06:d5:a0:b9:6e:ea:2d:50:1a:aa:71:af:69:83:
         39:8c:f6:5b:a2:ea:3f:0e:99:a8:7a:c6:02:24:4a:3c:5d:36:
         48:27:a8:95:db:87:99:87:92:29:92:1b:26:14:2f:55:35:21:
         2f:c7:4d:0d:c4:b2:5a:c9:dc:58:4b:b6:61:2c:b8:57:05:1b:
         f4:8c:0d:5c:7e:7e:12:8b:bb:64:bc:da:94:45:7c:65:4c:b4:
         7f:21:c8:5d:28:a5:e6:25:43:02:17:a8:e6:ca:f3:7d:ac:24:
         f7:13:2a:96:ce:a7:4c:08:65:63:4b:35:54:66:85:cc:63:51:
         81:e1:27:6a:5c:4d:fb:77:cb:d5:c4:c4:3a:25:20:e3:a9:f2:
         69:38:cf:9a:2e:dc:8b:63:0a:c8:9f:21:cb:93:f6:5f:d2:56:
         9a:62:ff:95:e2:7c:03:50:a2:26:99:fc:dd:30:38:03:21:64:
         29:f4:70:c9:ac:e9:7b:c7:6e:38:95:30:19:35:8e:c5:ae:ae:
         49:d4:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:56:17 2025 by rpki-client