Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa
File:                     326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          SRN4ZZD/4KFV9TaFaO756zbuYbIPPqMjchViHF5KtRk=
Subject key identifier:   DD:D5:90:03:71:91:BA:F9:87:40:F9:91:EA:1F:94:51:F5:7E:5B:30
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       67BF529882F132B0DB156C269677278EFA065DD5
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:44 +0000
ROA not before:           Fri 04 Jul 2025 00:42:44 +0000
ROA not after:            Fri 03 Jul 2026 00:47:44 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bf:52:98:82:f1:32:b0:db:15:6c:26:96:77:27:8e:fa:06:5d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:44 2025 GMT
            Not After : Jul  3 00:47:44 2026 GMT
        Subject: CN=DDD590037191BAF98740F991EA1F9451F57E5B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:ec:a6:24:35:f0:5e:48:cc:dd:37:14:fc:
                    0d:b6:eb:b5:17:94:86:b4:4f:1f:45:3a:3e:c2:04:
                    28:14:3d:71:f6:96:d0:d9:a5:df:f6:95:be:06:d2:
                    9f:58:2e:d4:87:2a:bf:ae:6a:85:71:ba:0b:d4:91:
                    bf:28:5f:4d:d0:78:04:ad:de:cc:24:73:58:1a:3b:
                    0b:d6:18:f4:bb:32:da:1a:0e:45:e5:ce:87:9f:b2:
                    79:43:cb:b5:8d:44:2a:e5:2f:b8:df:9e:eb:27:d1:
                    cc:eb:1a:b0:3c:17:d5:f7:01:fb:a7:da:3a:46:be:
                    1e:de:e5:58:fd:90:cf:75:db:ca:34:d8:1f:59:3f:
                    da:9b:b4:ce:3f:d1:38:bc:7a:aa:dd:95:51:a8:b9:
                    02:b5:d0:56:ea:56:cf:5e:3f:90:ef:47:1c:0e:c3:
                    66:f4:67:1c:e1:35:9d:71:62:68:d6:6c:31:80:1d:
                    85:0d:a5:f0:d6:94:9f:8b:12:fa:17:2c:d9:e6:ee:
                    1e:83:93:a9:0a:88:32:84:10:9c:04:46:be:53:0e:
                    77:40:5f:5a:07:4a:c2:ea:17:be:e8:8d:69:6c:c3:
                    4b:1d:b0:bb:6e:36:04:09:79:71:90:ce:18:c7:1f:
                    e9:1a:bd:b7:43:08:44:eb:10:9e:51:4c:36:8b:e1:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D5:90:03:71:91:BA:F9:87:40:F9:91:EA:1F:94:51:F5:7E:5B:30
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         91:26:91:77:e5:f3:6a:c7:67:b5:ab:ee:bd:97:e2:5a:55:65:
         32:e3:b0:e7:ac:80:6d:fe:00:2a:e3:d1:8a:10:a5:28:fa:38:
         73:d1:e1:f4:06:83:1c:56:eb:2c:ad:da:30:78:09:40:15:02:
         10:bc:2a:13:d1:d3:fa:78:3f:74:74:b1:a5:ee:22:9e:56:d4:
         bc:2a:e9:af:0b:4a:2c:a6:36:5b:18:03:89:93:c3:83:cc:25:
         f9:4e:e2:ac:76:17:ad:9b:fb:8a:fd:75:d5:02:f1:28:f5:1e:
         d8:85:c6:af:97:ec:65:be:f7:fc:77:4c:36:b7:6f:89:b0:d6:
         ab:58:22:08:97:fc:6b:d7:60:18:23:9f:b9:39:36:9a:6a:1d:
         ee:e5:bb:28:c2:ca:c5:b2:57:4d:fc:d9:68:00:47:eb:f9:1b:
         fc:5e:f1:e5:fc:ea:14:97:64:9f:8d:96:07:90:b4:b6:fb:60:
         25:96:34:f5:43:d7:c7:80:c4:7a:9f:10:39:e7:14:25:a3:0e:
         b2:89:1f:c8:c6:dd:d3:78:af:62:0d:fa:9a:41:d3:53:28:e5:
         fc:96:50:fd:c4:50:9a:7f:1b:ba:1b:02:63:4c:6d:38:77:d9:
         4f:9f:ab:4d:e3:83:48:ff:87:6d:1f:40:66:b9:ec:6a:53:40:
         2f:a3:94:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:11 2025 by rpki-client