Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          +IV8BGBxUTOUE94nbxQrID4LRme4QyMd6/1Cr9B6CdA=
Subject key identifier:   CD:A6:28:4F:57:80:18:5F:17:E2:A8:13:50:AA:18:64:26:C5:A7:63
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       5E1A2461DA3C7D92E6595501F04B842D69853534
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     396968
IP address blocks:        2a0f:6287:eae4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1a:24:61:da:3c:7d:92:e6:59:55:01:f0:4b:84:2d:69:85:35:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=CDA6284F5780185F17E2A81350AA186426C5A763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d1:c0:41:b6:d9:c0:d8:9b:b2:97:fe:2e:7e:
                    b9:49:b1:eb:c4:f8:de:34:6d:c5:03:20:9b:6e:ff:
                    94:35:46:b2:fd:a0:31:e6:92:4a:bf:1f:da:f1:97:
                    08:56:d6:40:91:68:a5:53:b8:cb:c1:c4:13:db:d5:
                    e9:cc:c0:3a:9e:fd:66:f4:84:33:fa:93:5f:af:45:
                    5c:e4:6c:32:c1:d9:01:7c:06:23:7e:21:ee:e5:d4:
                    d4:4b:59:a4:1d:c3:e7:d7:58:f4:0a:97:49:11:b9:
                    2d:db:5d:61:02:e3:05:c1:e1:fb:a5:28:3c:75:96:
                    8b:90:13:ac:90:8f:48:af:cc:67:d9:9e:c1:20:a8:
                    82:ab:47:bf:50:bb:c9:23:68:84:ee:b3:2d:c3:e8:
                    ab:c0:7a:e0:83:c8:b9:ea:b0:82:02:45:8f:ea:c9:
                    ab:49:eb:1c:bb:e6:30:f2:77:c9:06:27:01:b6:d6:
                    f2:c6:af:d6:db:a0:b0:a7:64:3c:ff:4f:64:28:6c:
                    d1:ab:e8:2d:e5:06:f2:19:10:45:a4:43:00:ac:57:
                    0c:a1:a8:49:c3:aa:72:19:ff:92:49:d4:bf:ee:80:
                    5c:de:6d:9c:4a:63:a2:54:d4:0d:4f:f3:ff:d7:0c:
                    97:27:97:0a:e2:2b:93:83:07:c7:1d:25:c5:38:27:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A6:28:4F:57:80:18:5F:17:E2:A8:13:50:AA:18:64:26:C5:A7:63
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:eae4::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:d6:ba:73:b9:66:33:7b:86:b2:eb:1b:7f:31:00:34:f5:
         4a:df:d3:a4:d7:5d:7e:f8:14:66:88:cb:11:c2:30:05:b6:0a:
         69:fb:65:d6:f2:5c:b2:c4:b5:05:3d:ab:48:d3:80:ca:8d:02:
         0c:60:1d:62:50:4a:0c:4c:95:39:7d:c5:bb:88:2b:e0:59:b9:
         78:18:1c:ed:39:31:01:31:f0:74:ac:89:df:bc:c5:9c:c6:a1:
         1a:67:f7:4f:d8:ea:8a:d3:04:e8:8b:24:1e:f2:3e:1d:63:73:
         60:1e:90:0d:9a:d5:b7:f0:bf:fd:fe:35:7b:49:b5:2e:63:66:
         4c:df:86:43:66:76:3d:e0:1a:82:aa:73:fd:d5:17:f3:9a:39:
         49:28:67:da:90:bc:7d:38:d6:6e:87:74:cd:0d:67:fe:c1:0a:
         62:fa:08:8d:c3:c2:17:9c:09:9c:0a:c2:5f:62:d2:b8:7a:ca:
         04:3b:b3:6e:03:5b:75:5c:23:8e:0f:55:2b:b8:ec:5c:ac:71:
         1f:10:5e:fd:f3:61:9f:13:3a:06:d7:e2:eb:03:95:00:b9:11:
         92:aa:07:17:75:b9:ec:f3:25:4c:1f:85:7f:aa:24:26:c3:50:
         a6:32:a4:4f:ef:5f:ce:2f:0f:9c:93:29:2c:0c:31:b3:2b:b5:
         c4:60:bd:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:45:36 2025 by rpki-client