Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656435653a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656435653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          G2JlOBd6M34CZxg1saVXx8VriyIRQJfZs7XZFLZ7XD8=
Subject key identifier:   79:58:20:E4:62:CB:21:F2:73:F2:2D:CE:FE:71:B1:B7:B6:67:AC:D8
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       26C3E0E681850D70BEA502CFA739BB9A91E62F7A
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656435653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:42 +0000
ROA not before:           Fri 04 Jul 2025 00:42:42 +0000
ROA not after:            Fri 03 Jul 2026 00:47:42 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ed5e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c3:e0:e6:81:85:0d:70:be:a5:02:cf:a7:39:bb:9a:91:e6:2f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:42 2025 GMT
            Not After : Jul  3 00:47:42 2026 GMT
        Subject: CN=795820E462CB21F273F22DCEFE71B1B7B667ACD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:a4:45:00:76:9f:22:3c:f8:6b:d7:81:fa:
                    a7:be:b4:95:74:8a:1e:e9:38:b0:21:ad:30:84:a3:
                    a9:90:31:7e:99:f3:d8:c2:5c:94:77:30:aa:68:62:
                    bb:4a:cb:2a:b0:4e:b1:cc:ab:fc:4f:23:95:f8:1c:
                    71:45:0f:54:68:76:a9:bd:bd:bf:13:97:62:e2:c4:
                    de:72:de:7b:e2:08:6c:c2:46:89:04:b8:fd:6a:f0:
                    0b:70:7c:a9:20:15:f2:fb:c1:ad:5b:76:86:7b:3e:
                    00:31:f5:b3:15:96:67:b9:ed:b2:90:b2:bd:8c:dc:
                    b8:1a:e8:c7:e0:1b:71:0b:eb:40:08:38:47:dc:ae:
                    a6:3d:9c:a6:ec:87:b7:51:78:43:c3:8e:42:1c:9d:
                    1f:b5:1a:f9:e9:50:3e:af:54:5a:a1:39:5e:e2:10:
                    38:cf:69:89:0f:19:4b:bf:51:a4:c0:c9:8c:30:00:
                    32:5d:f4:3e:a5:37:fb:05:02:3c:ab:65:55:bb:92:
                    35:1a:93:d2:6a:83:74:70:25:fa:30:c4:82:32:9e:
                    e3:60:1f:41:3b:31:ef:5c:0a:f6:49:99:cf:9b:7b:
                    64:d9:74:8d:34:77:95:da:24:cc:d4:40:39:4e:49:
                    c8:8f:e7:62:8c:37:d2:9e:e4:49:91:fc:da:d7:a6:
                    82:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:20:E4:62:CB:21:F2:73:F2:2D:CE:FE:71:B1:B7:B6:67:AC:D8
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656435653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ed5e::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:6d:d0:a2:6d:9b:53:ab:b8:5b:75:b3:b5:41:bf:4f:61:d5:
         48:6f:d0:22:10:5a:6d:19:fb:fb:51:dd:ff:51:e9:99:47:38:
         59:e4:93:34:89:bb:45:ec:06:79:4d:ec:38:ef:70:ae:7d:34:
         bf:03:e7:09:ae:ec:db:42:6d:5c:16:a4:84:71:c7:47:06:55:
         b6:b9:f4:54:d3:6f:12:4f:2f:60:40:80:8f:16:08:44:59:de:
         5b:8e:0f:4e:8f:03:e9:df:f3:71:5f:2d:0a:82:c8:cb:4f:36:
         0d:64:e6:9b:03:3b:1e:e3:41:22:31:02:6c:b0:70:5b:9c:72:
         5b:b9:c3:c5:c5:88:9d:47:43:21:12:45:af:e0:ff:e2:b3:b7:
         bb:0f:85:70:f7:d1:07:60:43:76:f7:82:7f:e3:1a:ee:d4:4f:
         8b:0b:db:94:56:68:e7:56:84:95:86:2d:b8:61:40:68:f3:3d:
         70:84:0e:eb:b3:cc:e9:e7:0c:dd:60:f2:ce:9e:79:78:18:63:
         c3:e7:18:58:a1:a3:0d:00:7d:9c:0c:06:b4:e4:61:47:d2:32:
         92:88:e1:20:eb:43:55:01:58:41:ce:f8:25:c3:a1:00:0e:bd:
         0f:57:09:ba:d8:1e:7d:84:2d:28:57:3f:5f:b1:82:48:d6:34:
         4b:85:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:15:44 2025 by rpki-client