Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          QwGYVgSamBEwTOItV5V+T5OGbtPSEPi/R0houuqKge8=
Subject key identifier:   B9:B9:5A:F3:20:96:34:CA:9B:80:9F:4E:12:74:46:F6:79:14:95:F3
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       7B73B84320DAB1EADCB234139CA1D38E78C02459
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:44 +0000
ROA not before:           Fri 04 Jul 2025 00:42:44 +0000
ROA not after:            Fri 03 Jul 2026 00:47:44 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ee58::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:73:b8:43:20:da:b1:ea:dc:b2:34:13:9c:a1:d3:8e:78:c0:24:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:44 2025 GMT
            Not After : Jul  3 00:47:44 2026 GMT
        Subject: CN=B9B95AF3209634CA9B809F4E127446F6791495F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:0d:0b:c9:89:3b:8f:ae:3d:4d:9a:b8:6e:
                    9d:3f:73:f0:d3:b2:c5:7a:41:75:a3:ae:2b:72:73:
                    68:3d:f2:96:4c:34:6e:be:3e:8e:0f:cf:40:a5:2d:
                    dd:8b:80:a1:8a:60:e5:7a:05:8c:73:90:4f:df:79:
                    b1:8e:f3:1a:9a:12:94:3c:72:a5:86:38:10:e3:22:
                    d0:71:17:64:89:81:16:d8:cb:a3:b8:3b:75:ad:74:
                    be:c0:82:f5:60:13:7e:c9:9e:73:45:7d:96:2b:76:
                    dc:3c:c7:a3:cf:8b:91:8c:51:3f:0e:cb:89:8d:6e:
                    cb:95:ae:bc:6e:00:dc:9a:29:61:1a:d2:2b:7c:38:
                    31:10:ec:b7:d6:2e:94:1d:b1:e9:9e:05:f6:dd:fa:
                    c8:1a:b4:e1:99:8e:af:60:e6:d6:a9:f3:ce:d1:fe:
                    42:65:08:8a:aa:62:51:68:51:ae:db:ca:d5:62:bd:
                    5b:76:35:bd:c4:7a:9f:ec:b2:9f:3f:39:40:bb:c0:
                    13:6d:10:55:bb:71:6c:71:92:85:78:91:8a:de:34:
                    10:33:09:a0:ff:69:52:76:a8:bf:1e:71:88:2a:17:
                    f8:b5:4c:34:52:3e:33:fc:25:64:b2:c2:72:d3:8a:
                    0b:83:d8:f1:19:16:5a:63:33:0f:38:e4:e8:39:3a:
                    8d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B9:5A:F3:20:96:34:CA:9B:80:9F:4E:12:74:46:F6:79:14:95:F3
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656535383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ee58::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:e8:6c:e2:a8:78:ce:67:de:77:b7:e0:da:37:97:cd:9d:
         ff:00:c3:37:9a:e9:4c:ef:bb:c1:09:33:9d:13:e5:ce:7e:78:
         88:7c:44:06:23:15:99:fc:f6:4b:e1:8a:3b:c1:b4:44:cb:c4:
         f8:da:f6:2e:0e:5d:8c:12:f9:7f:04:73:c1:6f:1b:4d:e7:42:
         f8:b9:8c:46:d9:a9:11:e6:59:d3:3b:42:a6:bb:66:92:44:59:
         7f:98:48:c8:ea:30:74:d3:11:86:df:4c:7f:11:9e:7c:eb:94:
         d5:44:e0:1a:bb:a2:23:f7:0b:1c:43:5f:c5:f9:8b:28:dc:5e:
         17:03:12:4a:64:87:d4:6e:49:13:8f:95:60:16:49:fe:d0:ef:
         5c:6e:37:29:f7:ca:78:b1:54:52:57:fe:ac:f7:c5:e5:71:c7:
         a8:e3:88:9c:0d:78:b8:bf:b3:ec:b5:3f:da:cb:d4:7a:9a:ed:
         58:d8:c6:59:8c:4f:ca:e1:5e:ae:50:d0:37:c0:24:6f:f4:b8:
         95:46:28:93:b7:57:4d:a2:bb:b1:53:6c:e6:37:e6:b1:9c:ee:
         6b:e1:ad:1d:b0:10:21:12:47:6d:17:8c:52:a0:8e:9b:e1:0f:
         fa:60:bc:0d:ee:f9:f6:09:88:28:0d:4a:42:b3:0c:00:67:dd:
         dc:da:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:45 2025 by rpki-client