Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656430653a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656430653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          VEQPPyqLbGQB6xGWoaU+3NNH94FMKgz3pd6welmjqes=
Subject key identifier:   77:F4:2D:07:04:2E:AE:20:05:75:F3:58:AB:39:17:2A:E0:42:0D:46
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       51AAC49834BD42D092A252884DB712FE1A01FE4F
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656430653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:42 +0000
ROA not before:           Fri 04 Jul 2025 00:42:42 +0000
ROA not after:            Fri 03 Jul 2026 00:47:42 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ed0e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:aa:c4:98:34:bd:42:d0:92:a2:52:88:4d:b7:12:fe:1a:01:fe:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:42 2025 GMT
            Not After : Jul  3 00:47:42 2026 GMT
        Subject: CN=77F42D07042EAE200575F358AB39172AE0420D46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:c8:f3:f2:5c:36:3d:7b:4e:06:0f:7e:b6:
                    6d:e5:0e:94:e7:29:21:51:07:70:2b:4e:20:e1:22:
                    0b:2d:60:13:11:dc:2f:79:48:ba:e6:64:0e:0d:9e:
                    39:16:ef:03:45:c4:cc:13:44:e0:9e:9d:2f:32:a5:
                    25:80:d0:58:41:f7:fb:52:69:2c:94:43:ab:c1:07:
                    82:77:8b:cb:aa:ec:da:63:62:cd:47:f1:51:89:16:
                    80:a5:f0:25:c0:2f:50:55:d3:15:0f:38:e0:8b:e3:
                    fa:fd:f5:77:96:43:fb:55:57:b5:b4:f1:34:b9:ca:
                    dc:50:bf:00:25:63:2e:a6:97:5f:a7:fa:94:b4:d8:
                    4c:1f:6c:f7:82:e1:2d:e3:b9:03:a8:d6:8e:6f:2e:
                    a4:19:db:db:ee:20:3e:a2:69:3e:a2:a5:85:5c:5b:
                    99:c6:04:22:25:59:c5:e3:45:0d:89:be:f8:1f:42:
                    3f:3b:3a:08:90:ba:51:36:7f:89:86:47:67:f0:9d:
                    70:f5:25:70:cd:e0:05:ae:0e:a3:af:f8:76:8e:2e:
                    3b:c4:44:5e:37:5b:96:50:be:bb:ce:3b:bd:84:52:
                    e5:33:9c:05:37:33:d7:f9:70:08:71:c9:6e:59:84:
                    23:e8:60:e9:46:3c:65:ad:f0:6b:98:48:1e:51:ef:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F4:2D:07:04:2E:AE:20:05:75:F3:58:AB:39:17:2A:E0:42:0D:46
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656430653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ed0e::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:0c:30:42:e0:62:79:2d:11:50:f8:0a:7a:58:5d:5d:31:
         59:92:49:39:50:93:01:27:45:e6:c9:c5:80:25:5f:07:96:13:
         3c:03:b4:6d:dc:aa:27:2d:9e:97:6c:e8:f4:36:4c:fb:91:77:
         67:f7:9e:7e:a4:d6:3e:04:6b:69:f8:b1:09:c5:81:6e:24:74:
         14:51:12:d8:7a:d9:0a:32:8d:47:80:ff:9a:06:d8:97:cb:56:
         41:e0:da:18:39:23:b5:92:02:6d:ce:38:8a:75:c5:eb:d6:da:
         fd:2e:3f:aa:10:b9:b7:c9:e1:78:cd:f9:dd:db:94:0f:47:77:
         ff:8b:6c:90:a5:1d:a1:ac:49:97:af:5d:79:18:4d:06:45:3e:
         bd:f9:60:2e:b6:17:ae:d8:a8:a5:fc:6b:46:aa:c8:07:76:4f:
         b1:b3:12:50:7a:25:95:13:8f:34:3d:25:87:11:80:22:a8:a7:
         04:99:e4:74:67:af:8b:d1:0e:60:63:15:a3:70:fc:9c:28:18:
         4b:43:55:3b:07:9b:8f:05:08:9c:dd:d3:7b:a0:8c:93:f5:5e:
         f1:20:24:18:e4:35:91:8e:4d:a2:97:f9:d6:bc:ff:97:27:2e:
         e0:c7:bd:25:eb:f1:a8:0c:5b:84:f8:f0:58:c6:f2:c2:b0:5e:
         5f:b5:15:99
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUUarEmDS9QtCSolKITbcS/hoB/k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDJaFw0yNjA3MDMwMDQ3NDJaMDMxMTAvBgNV
BAMTKDc3RjQyRDA3MDQyRUFFMjAwNTc1RjM1OEFCMzkxNzJBRTA0MjBENDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXRMjz8lw2PXtOBg9+tm3lDpTn
KSFRB3ArTiDhIgstYBMR3C95SLrmZA4NnjkW7wNFxMwTROCenS8ypSWA0FhB9/tS
aSyUQ6vBB4J3i8uq7NpjYs1H8VGJFoCl8CXAL1BV0xUPOOCL4/r99XeWQ/tVV7W0
8TS5ytxQvwAlYy6ml1+n+pS02EwfbPeC4S3juQOo1o5vLqQZ29vuID6iaT6ipYVc
W5nGBCIlWcXjRQ2JvvgfQj87OgiQulE2f4mGR2fwnXD1JXDN4AWuDqOv+HaOLjvE
RF43W5ZQvrvOO72EUuUznAU3M9f5cAhxyW5ZhCPoYOlGPGWt8GuYSB5R79vHAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUd/QtBwQuriAFdfNYqzkXKuBCDUYwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjQzMDY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+0O
MA0GCSqGSIb3DQEBCwUAA4IBAQCaAAwwQuBieS0RUPgKelhdXTFZkkk5UJMBJ0Xm
ycWAJV8HlhM8A7Rt3KonLZ6XbOj0Nkz7kXdn955+pNY+BGtp+LEJxYFuJHQUURLY
etkKMo1HgP+aBtiXy1ZB4NoYOSO1kgJtzjiKdcXr1tr9Lj+qELm3yeF4zfnd25QP
R3f/i2yQpR2hrEmXr115GE0GRT69+WAutheu2Kil/GtGqsgHdk+xsxJQeiWVE480
PSWHEYAiqKcEmeR0Z6+L0Q5gYxWjcPycKBhLQ1U7B5uPBQic3dN7oIyT9V7xICQY
5DWRjk2il/nWvP+XJy7gx70l6/GoDFuE+PBYxvLCsF5ftRWZ
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:18:42 2025 by rpki-client