Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          NCK2leLuLy+kA5CvbCffyZl/Jok6gryy7Ad95j3sRxs=
Subject key identifier:   B6:ED:E1:C2:6A:4A:8C:10:2F:C3:D3:5A:D9:BB:4C:0A:32:CB:A2:B5
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       17194B31743379C843172F47ADD5B67C57CE6A2D
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:42 +0000
ROA not before:           Fri 04 Jul 2025 00:42:42 +0000
ROA not after:            Fri 03 Jul 2026 00:47:42 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ed2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:19:4b:31:74:33:79:c8:43:17:2f:47:ad:d5:b6:7c:57:ce:6a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:42 2025 GMT
            Not After : Jul  3 00:47:42 2026 GMT
        Subject: CN=B6EDE1C26A4A8C102FC3D35AD9BB4C0A32CBA2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:3e:44:3c:b0:e1:9f:b1:86:b9:12:c8:c9:
                    ed:75:ff:73:5f:1b:6a:d0:66:c7:fd:e7:c4:8d:a7:
                    ce:1b:24:f9:ec:41:8d:93:71:ea:86:46:8d:e4:75:
                    ad:7c:bf:6b:75:02:f8:37:79:98:24:ba:1d:ab:98:
                    5c:70:cb:8d:34:26:57:fd:1e:d9:d3:3d:53:d8:b3:
                    c5:fa:5c:56:b9:c5:db:1f:aa:74:3a:9a:69:a2:fe:
                    fe:17:d8:91:bb:01:b3:0c:08:3e:59:69:e7:94:b0:
                    5f:f3:11:9a:26:01:8f:c9:7b:d0:26:f2:77:14:cd:
                    55:b8:3c:f5:30:2d:c9:9a:3a:23:ef:36:a8:06:80:
                    d6:22:71:1e:df:e2:01:b8:85:75:38:5a:7d:99:4c:
                    96:27:cf:70:ff:ba:be:3d:c6:16:c8:b4:e3:8b:1b:
                    10:77:b6:77:9d:6b:59:74:40:94:28:c8:65:83:8a:
                    4c:90:e2:d4:bf:83:7d:c0:fe:21:2c:47:b0:76:19:
                    70:47:52:ab:c2:4a:fd:10:53:bd:d6:e9:de:b2:cf:
                    da:5e:67:f3:81:19:15:a8:a9:60:97:2a:d8:81:e9:
                    e0:e4:5c:d7:81:88:4b:aa:0f:ec:a6:d8:06:e5:d7:
                    4b:06:06:4b:0b:a1:59:ab:80:a9:b6:53:bc:17:80:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:E1:C2:6A:4A:8C:10:2F:C3:D3:5A:D9:BB:4C:0A:32:CB:A2:B5
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ed2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:87:92:a4:dd:4a:d3:bc:05:d8:0f:45:46:52:46:f6:ec:d1:
         0a:41:d7:74:9c:ad:e5:5a:7e:b7:fc:e9:8c:96:36:be:22:58:
         43:36:2a:76:02:cf:ac:b2:55:c2:10:e5:bd:5b:86:d3:d1:55:
         d8:16:10:a1:db:83:37:a6:32:ce:d6:16:39:87:9e:74:4b:77:
         30:6b:47:cb:94:e0:3a:c5:0b:79:4a:25:6d:ed:a7:f9:70:d4:
         49:97:c1:05:57:0d:eb:74:e4:0c:5e:bc:bf:25:c5:0a:40:2a:
         5b:fa:f0:f8:80:bd:fc:e2:aa:06:53:67:7e:97:fd:b4:28:d2:
         86:7d:02:34:cb:bb:64:78:39:39:9c:6e:10:f6:6c:f1:c9:d9:
         b9:f2:b4:c5:8a:62:91:df:a5:6a:35:52:94:50:3d:eb:3d:0e:
         37:e7:88:3b:28:63:20:04:d4:57:4c:79:a7:5a:67:6e:7d:42:
         53:d8:e5:7d:90:37:80:c0:89:c5:f9:12:9c:b6:12:b3:1d:4f:
         19:15:a7:ff:0e:c4:37:68:a4:82:23:fc:93:6e:56:67:94:72:
         c7:64:e8:47:e6:98:7e:04:ad:c1:52:99:a0:e8:89:91:05:82:
         4b:87:d7:75:fa:c2:83:65:57:f2:d3:6f:fc:7c:c4:7b:72:a0:
         93:fd:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:22:23 2025 by rpki-client