Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          OQ7IISawk42SeGt/WXYtJQQs6akB+vPvo95NeGR2DDk=
Subject key identifier:   80:8F:1C:02:20:DF:B1:D5:84:F7:10:CB:2D:47:6F:52:12:0A:D4:64
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       5F7BED855D4F6BEBB207ADA5306E0155FAEC5329
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:42 +0000
ROA not before:           Fri 04 Jul 2025 00:42:42 +0000
ROA not after:            Fri 03 Jul 2026 00:47:42 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ef5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7b:ed:85:5d:4f:6b:eb:b2:07:ad:a5:30:6e:01:55:fa:ec:53:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:42 2025 GMT
            Not After : Jul  3 00:47:42 2026 GMT
        Subject: CN=808F1C0220DFB1D584F710CB2D476F52120AD464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:f3:54:ca:55:c4:ab:2d:b1:68:3f:1b:d7:
                    a2:c8:ed:fa:b6:9c:11:9f:7c:e0:7a:38:12:50:0d:
                    0d:37:05:1e:08:bf:55:31:76:36:ea:f5:9d:d4:ae:
                    04:d1:69:b0:90:60:57:d1:46:4f:e7:e9:f7:76:31:
                    6e:47:81:7b:94:70:cc:e4:f4:4f:2a:0d:ef:30:ea:
                    be:ba:4f:cd:59:aa:fc:6a:3a:9d:a7:7c:18:a5:4b:
                    03:59:a2:d3:f6:36:11:60:14:a6:27:0a:b2:0c:bd:
                    b5:96:6f:9e:81:6c:30:7a:00:23:30:bc:74:b1:0a:
                    99:59:44:79:c6:a5:6d:f2:ac:a1:68:e4:ef:dd:ac:
                    29:e1:1e:b5:f8:84:8e:da:7f:1a:13:94:68:70:53:
                    62:7c:5c:3c:5d:fe:14:61:b7:79:54:73:c2:65:64:
                    92:88:f2:08:97:c2:ec:04:70:90:cd:d3:ae:41:92:
                    4b:2b:ae:6a:f5:45:95:55:95:84:23:db:24:0d:fc:
                    38:3d:61:8d:7d:69:2b:39:62:87:40:0d:d4:4c:6f:
                    a9:df:e6:35:3f:a2:62:43:45:e0:4a:8e:7d:1b:99:
                    96:26:de:3d:e6:5a:ae:b4:bf:7c:e7:ef:64:4d:39:
                    15:18:cc:d3:64:02:29:bd:80:88:52:27:93:68:99:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8F:1C:02:20:DF:B1:D5:84:F7:10:CB:2D:47:6F:52:12:0A:D4:64
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ef5c::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:d6:03:a7:1d:57:91:fb:6d:7b:34:27:bd:db:2f:a1:52:
         f0:91:2c:cf:c0:68:74:e5:c0:3a:ff:0a:fb:11:da:26:37:17:
         b3:fe:53:f4:7b:cf:06:a5:6c:99:dd:a6:de:7f:6e:21:af:4c:
         5c:4c:7b:f2:3b:01:78:ba:1e:06:ba:65:21:b9:4e:ef:62:af:
         73:9e:27:b4:a4:06:b6:21:5c:43:8d:98:c0:94:3b:d4:3c:d7:
         61:2d:23:1e:bd:2a:b0:2c:37:ea:61:22:44:2f:e2:17:36:2f:
         c6:57:46:31:21:3f:de:8d:fa:0a:9e:1a:8a:0a:4b:77:9e:1a:
         f7:ae:6e:00:54:ee:06:11:f3:b4:df:83:dd:9a:1e:a8:e7:90:
         76:d2:79:93:b5:d3:f2:2a:e8:3d:98:64:43:21:5d:92:c2:ed:
         7a:2b:e1:d0:e4:ca:27:30:d8:84:fc:12:ce:5c:7a:98:6e:3e:
         57:1f:1a:0c:4a:25:d0:c6:eb:5e:0b:e2:19:18:08:45:3f:51:
         16:7f:8e:48:33:83:d8:75:ca:52:1c:f5:59:9a:fc:0c:d4:91:
         56:62:e6:7e:10:f6:77:3a:6f:bd:85:60:94:0c:ea:79:d6:df:
         37:f5:08:45:85:fa:3f:6e:71:0d:7d:4c:cf:d6:74:e6:7b:4f:
         6a:3d:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:48:13 2025 by rpki-client