Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          jnMnA8OBH7euTcv6ob7KnYwB+sT3nSVSLVHr4nLLhFI=
Subject key identifier:   64:16:15:49:A7:57:1A:84:D6:97:08:0F:0D:90:7B:60:6A:86:78:21
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       62848A8EDB48D65EDADFCC8F89F1F50658B9791A
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:47 +0000
ROA not before:           Fri 04 Jul 2025 00:42:47 +0000
ROA not after:            Fri 03 Jul 2026 00:47:47 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e7e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:84:8a:8e:db:48:d6:5e:da:df:cc:8f:89:f1:f5:06:58:b9:79:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:47 2025 GMT
            Not After : Jul  3 00:47:47 2026 GMT
        Subject: CN=64161549A7571A84D697080F0D907B606A867821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bf:a5:56:b2:02:ff:4d:8f:85:6d:08:a7:95:
                    1d:2d:71:fc:d9:26:c1:b9:57:4d:5b:f7:84:0a:e7:
                    bb:33:a5:c2:e2:9e:51:e8:9c:33:6a:d6:71:b0:a2:
                    bd:f1:57:1a:0c:db:5a:dc:28:43:e6:18:41:d8:49:
                    18:a1:84:64:30:53:d5:9c:74:34:50:0f:8c:2b:db:
                    06:34:2a:10:13:33:5f:92:cb:90:6e:07:6f:dd:87:
                    1d:6a:6a:6b:17:7b:33:47:92:7c:aa:4c:65:32:f5:
                    e7:fb:bf:2b:7f:c8:3f:8d:6f:49:8c:42:ea:a0:1d:
                    ef:89:25:cf:03:51:e0:b4:93:e5:87:7b:c8:df:80:
                    31:76:46:19:9e:6f:da:8d:b5:91:95:f5:65:db:84:
                    35:3d:83:7f:b6:d6:15:0e:06:99:59:a5:32:ed:15:
                    03:bd:21:70:d3:e6:a3:5f:9f:ba:c1:c7:1a:cf:1f:
                    26:60:4d:e8:f0:29:be:72:6a:36:c0:57:19:82:b3:
                    e1:02:d7:ac:21:56:01:be:68:91:2e:97:f2:3f:71:
                    d2:38:95:08:75:42:8e:1f:22:70:d9:00:9c:eb:09:
                    a4:64:44:52:e1:dc:af:99:7d:5c:df:b5:78:1f:67:
                    fd:36:3d:5b:71:71:73:4b:81:c4:19:46:49:19:a7:
                    31:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:16:15:49:A7:57:1A:84:D6:97:08:0F:0D:90:7B:60:6A:86:78:21
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e7e9::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:81:49:ac:7a:32:f6:22:a0:04:3c:ed:a5:c5:42:05:ce:8e:
         d0:3d:d6:98:18:3a:fd:c3:27:9b:e1:da:12:b2:f6:c0:0f:3b:
         e6:8c:3c:90:79:a1:0d:27:e5:3c:14:0c:c7:38:01:4d:d9:54:
         c6:cd:20:bd:82:f8:aa:b4:3c:8d:23:6b:36:64:6f:e3:1e:e0:
         08:9c:db:42:ae:0d:92:90:df:c1:88:5d:83:e7:e4:2c:29:34:
         fb:a2:7e:54:d0:3d:a4:fd:be:36:1b:c3:d9:f7:2f:b4:64:29:
         55:f8:74:b2:97:86:eb:17:08:6d:41:3f:e7:dd:74:5b:7c:4a:
         a1:ba:c2:78:9f:3e:29:86:78:2c:e4:4d:d3:26:9f:34:42:51:
         7a:c0:28:99:9b:13:f4:9e:e0:68:ad:b2:91:c6:c4:fb:0b:14:
         ac:a8:16:07:3e:cd:d4:1f:8e:09:64:90:75:c5:4e:c8:08:c0:
         ea:36:25:2b:40:e7:c2:47:5c:ba:76:b8:1a:47:d5:53:7a:24:
         b9:5a:3f:c4:04:13:28:3a:f4:f6:a6:fd:bc:1a:14:37:85:6d:
         86:ac:3a:9a:85:a8:5b:24:0c:99:99:78:c2:92:df:75:3d:d5:
         19:f2:8d:fd:13:6c:34:a6:24:54:16:31:48:aa:f7:c0:51:a9:
         03:6d:8c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:55:11 2025 by rpki-client