Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          /+ckXg0/Cdop3CvAQF0chaNZdgkSMvNrkAmgRedrJ4w=
Subject key identifier:   39:77:52:00:FA:0B:C4:F6:7B:42:6C:EF:F8:6F:C4:EE:92:02:6A:81
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       06F615BB1983047991E051400237858B91F75991
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ecfe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f6:15:bb:19:83:04:79:91:e0:51:40:02:37:85:8b:91:f7:59:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=39775200FA0BC4F67B426CEFF86FC4EE92026A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:9f:e9:17:f1:31:31:a5:f1:50:a6:9d:3c:
                    da:0a:e5:f8:64:5f:43:d8:ad:05:f2:33:ae:16:90:
                    47:5d:34:87:2a:c1:14:9e:a4:28:70:09:3b:94:c0:
                    f9:68:4f:5e:a5:4a:3c:5e:e7:74:b1:11:06:39:14:
                    e9:4b:e0:4c:4b:97:db:db:4e:4a:99:d5:cb:37:14:
                    af:81:1c:61:53:5d:ef:1a:1c:c6:60:f7:1d:3d:b6:
                    6d:d1:f8:a0:c2:21:1f:86:5a:05:14:62:d5:d2:49:
                    00:d2:43:7f:e6:77:27:bc:ff:46:ed:1b:51:7a:6d:
                    39:e9:ae:85:a6:ca:5e:a4:ea:b6:de:18:8c:8d:1c:
                    83:5e:12:ab:a7:89:22:f6:90:b9:0e:f6:6f:81:5e:
                    a3:8a:08:72:9e:29:7b:29:c3:fa:7e:dc:44:7c:2f:
                    95:09:04:5c:8b:d8:b4:61:0c:64:55:5f:8f:8b:07:
                    fc:ac:cf:a4:de:0f:b2:95:97:a0:0c:b1:e8:a3:5f:
                    77:f3:14:73:f0:7b:30:cd:c7:a1:1f:ed:7c:25:a4:
                    4b:5d:98:51:b5:84:d6:f0:73:c0:fc:37:74:8c:52:
                    b5:c5:49:15:d5:9b:17:95:5f:d2:af:f9:d2:a0:93:
                    f8:4a:27:44:95:48:f8:b7:07:26:0c:dd:af:dd:c9:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:77:52:00:FA:0B:C4:F6:7B:42:6C:EF:F8:6F:C4:EE:92:02:6A:81
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ecfe::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:69:e3:0b:5e:b2:b5:b8:e7:fd:6f:2c:f9:5a:70:b3:6a:87:
         9f:59:0f:f9:22:f9:fa:c7:39:a4:75:84:ad:bf:6c:1c:ae:4b:
         6c:6c:65:b4:97:85:c0:fa:26:b6:ec:cc:0c:8e:f6:73:4e:58:
         a5:b3:9e:87:6c:02:ae:6a:20:0c:f3:5a:5c:e0:31:33:38:57:
         51:a9:e9:e7:a4:89:8a:de:2c:04:1c:c0:13:f6:46:37:e9:5a:
         63:a3:68:6f:f7:f2:e3:ff:b2:07:fe:68:52:3a:3b:dc:fa:44:
         eb:a4:e4:c8:af:f4:ed:13:9b:ee:f8:45:15:c3:43:f0:a9:bf:
         14:d8:f2:a7:6f:9e:8a:6b:76:29:58:6f:f0:3b:31:1b:95:11:
         77:23:85:de:d9:43:82:71:2c:1b:3b:34:6e:e4:75:2e:ab:04:
         fd:1f:e5:69:bc:92:9d:a5:f9:62:e9:c4:99:86:37:80:8f:7b:
         9e:93:ab:64:85:e7:ef:d8:9e:16:50:d2:e7:9d:1d:70:52:29:
         de:a1:a3:6b:f2:9c:06:7a:8a:72:49:89:63:fe:d0:19:32:51:
         a6:a9:49:4b:bb:12:37:ac:a7:13:b6:08:11:95:c0:23:24:c8:
         e6:43:6b:9b:a5:68:0d:e2:f7:26:49:05:eb:40:7d:8a:9f:82:
         46:71:e4:8d
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUBvYVuxmDBHmR4FFAAjeFi5H3WZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV
BAMTKDM5Nzc1MjAwRkEwQkM0RjY3QjQyNkNFRkY4NkZDNEVFOTIwMjZBODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqp/pF/ExMaXxUKadPNoK5fhk
X0PYrQXyM64WkEddNIcqwRSepChwCTuUwPloT16lSjxe53SxEQY5FOlL4ExLl9vb
TkqZ1cs3FK+BHGFTXe8aHMZg9x09tm3R+KDCIR+GWgUUYtXSSQDSQ3/mdye8/0bt
G1F6bTnproWmyl6k6rbeGIyNHINeEquniSL2kLkO9m+BXqOKCHKeKXspw/p+3ER8
L5UJBFyL2LRhDGRVX4+LB/ysz6TeD7KVl6AMseijX3fzFHPwezDNx6Ef7XwlpEtd
mFG1hNbwc8D8N3SMUrXFSRXVmxeVX9Kv+dKgk/hKJ0SVSPi3ByYM3a/dyTWRAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUOXdSAPoLxPZ7Qmzv+G/E7pICaoEwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjM2NjY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+z+
MA0GCSqGSIb3DQEBCwUAA4IBAQByaeMLXrK1uOf9byz5WnCzaoefWQ/5Ivn6xzmk
dYStv2wcrktsbGW0l4XA+ia27MwMjvZzTlils56HbAKuaiAM81pc4DEzOFdRqenn
pImK3iwEHMAT9kY36Vpjo2hv9/Lj/7IH/mhSOjvc+kTrpOTIr/TtE5vu+EUVw0Pw
qb8U2PKnb56Ka3YpWG/wOzEblRF3I4Xe2UOCcSwbOzRu5HUuqwT9H+VpvJKdpfli
6cSZhjeAj3uek6tkhefv2J4WUNLnnR1wUineoaNr8pwGeopySYlj/tAZMlGmqUlL
uxI3rKcTtggRlcAjJMjmQ2ubpWgN4vcmSQXrQH2Kn4JGceSN
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:58:00 2025 by rpki-client