Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656239353a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656239353a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          TK8xyIVtoYA71BLQwMefkYq0unJuHU/ilL5w4DyhwBw=
Subject key identifier:   2A:6A:5B:36:49:1E:D2:6E:0B:D2:75:10:BC:B7:DE:FC:0F:9D:36:D5
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       63057E3B0F0E7601B67984EB54181635027D5283
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656239353a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     396968
IP address blocks:        2a0f:6287:eb95::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:05:7e:3b:0f:0e:76:01:b6:79:84:eb:54:18:16:35:02:7d:52:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=2A6A5B36491ED26E0BD27510BCB7DEFC0F9D36D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:32:ff:0f:76:c1:9b:1b:14:0f:c5:70:f8:f2:
                    59:37:06:da:46:08:0a:45:76:e0:c8:2b:8c:73:2a:
                    2e:24:80:fc:d7:28:3f:8d:33:70:59:b1:65:84:45:
                    dc:d1:a2:59:a4:51:e8:b7:a0:c5:59:41:3e:12:44:
                    bc:47:59:f5:6d:4a:b5:a0:c3:13:24:a3:d1:64:0a:
                    b6:e6:38:28:df:07:a8:e1:c1:ca:fa:d3:6b:96:75:
                    f0:7f:2a:ba:77:e2:c9:e0:2d:9d:d3:e6:49:e3:7f:
                    5e:6d:45:d2:5d:77:25:8a:7b:96:c1:87:b4:2b:ab:
                    47:b9:19:94:2a:58:8c:dd:2e:c3:e0:2f:6f:eb:23:
                    01:f8:50:58:56:f2:f3:41:c6:bf:ce:19:80:1d:6d:
                    93:f0:3d:0c:f1:0c:40:c2:42:29:18:b3:23:4a:72:
                    12:13:28:34:15:06:0a:95:40:4f:bb:38:a0:98:01:
                    81:75:b4:54:7f:70:26:c4:d5:31:79:50:60:23:35:
                    d1:8b:3e:79:c5:dd:90:42:05:b5:cd:08:d9:5b:d4:
                    ab:3b:3b:c8:c5:a8:b2:9e:ad:9b:8f:21:01:f8:25:
                    0f:2b:54:1e:6a:4a:78:aa:c5:e1:a6:3c:d6:bf:92:
                    56:bc:dc:24:8d:5c:5a:a0:f3:1f:3d:67:58:11:e0:
                    3d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6A:5B:36:49:1E:D2:6E:0B:D2:75:10:BC:B7:DE:FC:0F:9D:36:D5
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656239353a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:eb95::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:4a:d1:c3:77:de:d7:c0:56:42:b8:21:35:b5:ad:8e:11:05:
         5b:73:7d:fd:c7:75:b0:80:48:b2:26:b0:cb:6a:e2:a1:3f:15:
         f9:aa:49:58:41:7e:29:ec:85:c1:79:a1:64:73:30:6f:3b:7c:
         52:42:1c:51:27:db:5a:99:0f:3b:63:8d:53:f4:ca:8a:16:e1:
         19:0a:40:bb:5f:6e:43:36:aa:b1:d5:24:90:3d:b0:84:1e:67:
         04:60:b1:5e:94:80:4b:80:7d:42:70:5d:90:e5:52:5b:65:60:
         e0:44:d2:a8:6b:1e:fe:68:af:45:30:69:90:45:87:44:d5:07:
         e0:b6:d5:aa:2b:96:c9:1c:d4:c5:a8:91:12:c1:73:87:aa:35:
         9e:a4:4f:c0:cf:63:b5:39:b1:e5:d2:04:97:d6:0b:74:ba:7b:
         6f:73:fa:30:b2:74:df:98:a2:6d:11:69:03:f6:6d:66:fd:c9:
         ba:66:32:e2:b5:a9:6f:b0:e4:e3:d4:f2:f2:aa:b7:f6:db:dd:
         d6:3c:65:6a:80:a3:78:b0:30:d0:bf:59:8b:fb:41:a5:9c:37:
         56:41:02:55:11:25:48:bc:a7:fa:6c:d2:7d:2c:79:6f:fe:86:
         73:28:a7:16:b7:14:34:1c:32:12:f8:03:a7:73:4d:3c:55:d2:
         ff:7a:50:35
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUYwV+Ow8OdgG2eYTrVBgWNQJ9UoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV
BAMTKDJBNkE1QjM2NDkxRUQyNkUwQkQyNzUxMEJDQjdERUZDMEY5RDM2RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpMv8PdsGbGxQPxXD48lk3BtpG
CApFduDIK4xzKi4kgPzXKD+NM3BZsWWERdzRolmkUei3oMVZQT4SRLxHWfVtSrWg
wxMko9FkCrbmOCjfB6jhwcr602uWdfB/Krp34sngLZ3T5knjf15tRdJddyWKe5bB
h7Qrq0e5GZQqWIzdLsPgL2/rIwH4UFhW8vNBxr/OGYAdbZPwPQzxDEDCQikYsyNK
chITKDQVBgqVQE+7OKCYAYF1tFR/cCbE1TF5UGAjNdGLPnnF3ZBCBbXNCNlb1Ks7
O8jFqLKerZuPIQH4JQ8rVB5qSniqxeGmPNa/kla83CSNXFqg8x89Z1gR4D3lAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUKmpbNkke0m4L0nUQvLfe/A+dNtUwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjIzOTM1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+uV
MA0GCSqGSIb3DQEBCwUAA4IBAQBdStHDd97XwFZCuCE1ta2OEQVbc339x3WwgEiy
JrDLauKhPxX5qklYQX4p7IXBeaFkczBvO3xSQhxRJ9tamQ87Y41T9MqKFuEZCkC7
X25DNqqx1SSQPbCEHmcEYLFelIBLgH1CcF2Q5VJbZWDgRNKoax7+aK9FMGmQRYdE
1QfgttWqK5bJHNTFqJESwXOHqjWepE/Az2O1ObHl0gSX1gt0untvc/owsnTfmKJt
EWkD9m1m/cm6ZjLitalvsOTj1PLyqrf2293WPGVqgKN4sDDQv1mL+0GlnDdWQQJV
ESVIvKf6bNJ9LHlv/oZzKKcWtxQ0HDIS+AOnc008VdL/elA1
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:10 2025 by rpki-client