Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          R/80X4JSF4mUlzhTf6PHoQCQ2knOAzPHWhvF4iVCqeU=
Subject key identifier:   70:95:83:0D:18:93:FD:29:3F:4D:DC:2D:75:E9:0E:72:83:79:3E:61
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       2E5A580B27A8B863B370D7C415AF5C7F5CA0AC12
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:43 +0000
ROA not before:           Fri 04 Jul 2025 00:42:43 +0000
ROA not after:            Fri 03 Jul 2026 00:47:43 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f0be::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5a:58:0b:27:a8:b8:63:b3:70:d7:c4:15:af:5c:7f:5c:a0:ac:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:43 2025 GMT
            Not After : Jul  3 00:47:43 2026 GMT
        Subject: CN=7095830D1893FD293F4DDC2D75E90E7283793E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:81:b8:d1:61:dd:1b:cc:82:67:56:7b:df:
                    a2:e3:ca:d1:3d:7b:88:3f:2f:5c:bf:3e:d9:db:67:
                    ad:d4:a3:13:6a:3c:c3:83:88:5e:a4:67:67:04:bf:
                    84:f2:c7:f5:36:6c:b5:5d:f5:f4:55:b2:d4:51:e9:
                    1c:46:98:fe:41:70:31:eb:ed:85:35:6b:e8:a6:ad:
                    e1:e1:59:44:b2:0d:77:20:65:ec:24:18:60:64:a2:
                    f8:f2:cd:27:03:25:26:4b:53:c5:40:08:8e:be:d3:
                    e6:2b:78:c3:02:13:06:76:fe:76:38:d8:bf:58:b7:
                    0d:1f:b4:9b:76:99:91:a0:6a:a8:81:22:92:78:d3:
                    8a:de:74:82:98:2c:0b:37:ae:ac:e9:d8:c5:4b:2d:
                    c2:cb:aa:46:39:dd:d1:10:ee:c8:f6:54:77:53:6e:
                    85:ec:62:44:fc:8b:fd:f1:06:82:ca:46:9a:1a:1b:
                    1e:0a:0c:18:4b:bb:78:d4:48:a9:0a:07:a1:8f:b6:
                    41:98:70:1f:be:a4:f4:26:75:f2:4c:be:cd:b6:4c:
                    9f:e9:9a:42:2a:04:f0:b4:c1:16:90:89:86:ec:b6:
                    34:05:61:fe:04:e0:98:26:b7:e0:d7:8e:69:60:07:
                    b3:df:26:be:c1:b8:6d:3f:46:5c:91:b5:f1:b9:b6:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:95:83:0D:18:93:FD:29:3F:4D:DC:2D:75:E9:0E:72:83:79:3E:61
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f0be::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:b2:e6:d2:03:85:48:00:47:64:d4:a9:9a:41:41:11:78:d7:
         2f:c9:89:d6:01:12:13:e7:91:90:b0:2b:ee:b5:5a:eb:69:ea:
         86:e5:96:6f:8d:55:d0:b0:56:94:6e:30:38:86:59:a8:62:31:
         dc:ca:d8:4c:77:32:3d:fb:b3:60:f0:33:66:86:d5:71:9f:1a:
         85:a3:c7:d6:6b:7d:be:6c:de:1c:d5:c7:43:55:0b:3b:88:29:
         29:b8:9b:65:be:30:f8:da:62:06:dd:16:58:48:75:fa:74:0e:
         ba:72:45:07:4d:b5:dd:3f:92:0d:c7:d0:be:27:0c:e5:b2:30:
         83:22:7e:27:5b:58:ba:3a:59:8e:70:43:a0:91:bf:3f:27:93:
         e8:f7:f0:f3:58:0d:f7:a2:f7:3b:63:dc:3f:ab:be:98:9b:cd:
         84:ed:39:2a:92:2e:c1:7b:80:d4:94:80:57:99:f2:5a:74:42:
         d1:26:d6:85:56:4b:9e:6d:3a:07:38:76:08:11:b8:ae:4a:41:
         9f:7c:5d:ec:a3:78:0f:b7:41:6c:d3:ad:e7:ec:8d:67:10:73:
         65:5b:d6:f8:99:14:55:55:88:d1:40:72:c9:ef:4a:1c:77:69:
         5f:26:0a:99:3f:71:9e:3c:1e:d0:60:f5:9d:f5:7c:d3:40:d7:
         83:1e:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:48:58 2025 by rpki-client