Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656461323a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656461323a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          HRfHFU5tX1KZaMSHxq9uqFDbixthu6OZVndYsx3M10Q=
Subject key identifier:   39:90:B6:43:7A:ED:BF:9A:9F:BE:5D:CB:B6:97:C6:BD:13:45:4F:2B
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       370EACB03F16038DBA7CE0A4C644579F8DF26B5D
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656461323a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     396968
IP address blocks:        2a0f:6287:eda2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0e:ac:b0:3f:16:03:8d:ba:7c:e0:a4:c6:44:57:9f:8d:f2:6b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=3990B6437AEDBF9A9FBE5DCBB697C6BD13454F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:de:8c:6b:57:75:3b:1e:87:88:9d:d9:c8:ca:
                    5f:42:13:70:f0:96:7a:86:1d:37:48:5d:1f:65:0d:
                    41:95:38:72:df:f3:3b:96:80:22:4c:a9:97:53:57:
                    cf:11:45:c8:b7:a5:cb:48:2c:b2:95:4f:16:cb:81:
                    6f:72:d8:10:9a:89:df:87:34:2a:8a:d6:2e:21:5b:
                    07:08:0d:3c:5b:4f:c0:fb:83:1d:f2:67:4e:4f:ce:
                    54:9f:34:26:56:02:6b:8f:77:ae:22:25:12:b7:43:
                    a1:ec:04:09:68:56:a3:44:12:f0:3e:e1:15:44:bc:
                    54:02:e5:03:49:ae:d8:c7:36:42:71:05:f2:b6:80:
                    b9:9e:6e:26:a0:15:96:8e:6f:88:12:be:44:b3:04:
                    e0:38:d3:62:4a:59:c0:ee:6a:76:5d:e6:ac:5a:df:
                    4d:a6:99:30:77:6a:64:3a:8e:43:eb:77:12:39:db:
                    72:91:43:1a:16:6d:01:27:49:d4:64:c5:81:8c:a3:
                    5d:b0:f9:e7:07:60:37:43:c3:ee:a8:b9:98:c4:ce:
                    dc:5d:b4:e7:59:7c:38:68:ed:b7:9b:fd:df:e4:10:
                    18:34:0f:d7:e9:00:4c:e5:26:45:fb:2d:0b:f2:4b:
                    54:6c:59:40:25:8b:76:63:3b:26:c2:77:53:7e:c5:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:90:B6:43:7A:ED:BF:9A:9F:BE:5D:CB:B6:97:C6:BD:13:45:4F:2B
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656461323a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:eda2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:55:a1:57:6e:8f:c8:01:37:f2:78:c7:c7:77:71:29:1f:62:
         91:9c:94:1c:26:f2:17:80:33:03:1d:ef:8d:3c:a4:26:08:4e:
         43:ca:e2:1f:59:ea:18:27:a8:e9:4a:b1:87:60:39:62:12:2e:
         03:59:3a:bf:78:ce:91:83:0e:19:c3:af:0a:2b:51:3b:9e:0b:
         0f:1f:d0:ca:ab:89:f1:ec:2e:e2:3c:e2:36:2e:e6:22:95:33:
         56:05:d5:47:25:9c:d0:25:c7:bb:5b:00:a5:1f:a6:0f:4b:95:
         87:1e:a8:26:59:38:24:ec:f4:3b:7e:90:c6:26:ac:e1:87:6d:
         ec:25:c9:2c:c4:8f:ab:ad:f1:95:76:bd:04:d3:cd:f8:24:bd:
         13:5c:bf:05:11:e1:bc:18:41:aa:42:02:ae:db:46:f4:63:68:
         a3:ef:07:fe:c3:64:18:59:07:87:55:10:ac:9a:0e:85:4b:8e:
         76:0b:f2:d2:95:d2:22:e1:0c:d5:bf:0f:58:18:5b:40:d6:75:
         29:50:3c:8d:97:e9:b2:00:22:23:b1:72:80:88:90:ee:e8:ae:
         07:6c:28:39:61:12:3c:65:cc:10:7f:5a:be:37:bd:0c:db:ec:
         18:74:9d:3b:62:a9:7a:7e:69:10:ef:a8:9a:45:0b:e0:31:9d:
         79:ae:9d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:22:22 2025 by rpki-client