Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          URMZ9UPmoJb8xUWkSwd3lejgcMKwNXk4hnqMn7bgKuA=
Subject key identifier:   1F:69:B5:2A:E7:52:C5:CA:FE:1E:25:34:33:E7:A8:D8:07:C4:E2:E4
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       4081E2AE8EF54BC245B313C24F250BA1257384DB
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:46 +0000
ROA not before:           Fri 04 Jul 2025 00:42:46 +0000
ROA not after:            Fri 03 Jul 2026 00:47:46 +0000
asID:                     396968
IP address blocks:        2a0f:6287:edd4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:81:e2:ae:8e:f5:4b:c2:45:b3:13:c2:4f:25:0b:a1:25:73:84:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:46 2025 GMT
            Not After : Jul  3 00:47:46 2026 GMT
        Subject: CN=1F69B52AE752C5CAFE1E253433E7A8D807C4E2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d1:a3:57:3c:f0:31:25:1f:c1:c3:d1:6b:49:
                    30:f9:74:11:36:5c:24:1c:a0:27:37:88:f3:79:c4:
                    fa:93:6d:6f:e3:cc:b6:da:59:96:a7:36:ca:cb:f5:
                    96:f7:de:e3:9f:f2:ab:2c:5c:03:c5:4d:70:7f:55:
                    b5:66:0f:e2:96:16:d3:65:d3:b2:57:12:ba:a7:53:
                    48:4a:95:ae:49:ee:f4:70:41:84:50:7a:a0:e1:48:
                    86:57:a5:77:9d:fd:3c:54:df:e1:24:99:cb:19:69:
                    fc:38:ae:9e:9a:63:83:8d:f3:98:8d:93:35:03:af:
                    42:e8:9f:c7:cd:7a:ca:d1:b2:fd:35:28:f0:74:21:
                    03:ec:2c:72:b0:2d:6b:9e:c3:e5:8a:83:06:27:84:
                    7a:e7:ea:7c:a0:7c:8e:fb:5d:46:58:99:a1:43:47:
                    36:d1:cd:f1:cc:f0:8f:db:a5:74:31:e6:4a:ae:3e:
                    67:a1:e0:c5:70:61:3d:a8:3c:65:69:64:3d:f1:94:
                    62:61:8a:48:bf:84:5d:d1:c0:fd:1d:63:a4:12:d9:
                    a5:d9:53:ef:6a:a0:e9:f1:06:80:34:ef:49:4e:f3:
                    a0:ae:5b:73:45:fd:33:0b:ae:86:9d:c1:31:fe:98:
                    d6:db:e8:89:0c:fb:fa:2a:10:ce:e5:53:41:ef:44:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:69:B5:2A:E7:52:C5:CA:FE:1E:25:34:33:E7:A8:D8:07:C4:E2:E4
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656464343a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:edd4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:62:55:95:24:de:b4:4c:17:d1:42:36:5c:37:e8:fe:14:46:
         e2:ab:5d:0f:e9:5b:25:09:bf:be:7c:40:87:84:dc:e3:b3:a1:
         64:d4:8e:63:04:ae:29:f9:98:67:a6:8d:91:42:56:73:96:b5:
         b8:4f:b7:5a:94:3a:5d:44:8e:59:d0:29:ab:27:55:3d:a5:2c:
         bf:c9:b6:e7:84:1c:b4:87:f0:a4:88:20:fa:26:c4:8d:b1:f3:
         55:47:59:5c:5b:07:f8:b7:39:6a:d6:98:7c:b5:f3:72:0f:ee:
         0b:53:1c:e1:42:f6:32:ae:ce:35:81:bf:f5:c4:4f:46:fa:0e:
         ff:de:b1:30:8c:f0:b3:cb:63:ea:2d:a7:80:5e:fc:39:87:8d:
         28:7a:4b:01:e3:85:4b:bd:cf:07:58:58:0d:98:74:1e:54:8f:
         12:a4:60:67:a3:6e:bb:33:1e:e4:a8:ea:3b:15:a7:68:7f:79:
         a4:96:5d:fa:e6:b5:4a:60:c1:dd:2d:82:b1:85:48:f9:d2:31:
         f2:40:fc:35:5c:c1:73:35:9e:25:33:d5:e5:b8:8e:98:a4:39:
         19:21:32:3b:05:6e:ea:ff:1d:6b:37:ec:ab:1e:40:2d:dd:96:
         3c:3b:e4:b1:e8:96:24:5a:21:b6:ed:f5:6e:55:aa:d6:d3:0f:
         b1:49:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:43:25 2025 by rpki-client