Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663064353a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a663064353a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          qjdTPx/MSTgm2Gb9prLi99sCB7UfLnaGSdLn99kYKvg=
Subject key identifier:   78:44:F1:D0:E5:13:86:04:E0:30:26:0C:86:C9:5C:4C:BD:64:F2:C2
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       60E55DD09C4E97F71AA28ACE5B46ADBD25586A51
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663064353a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 04 Jul 2025 00:47:47 +0000
ROA not before:           Fri 04 Jul 2025 00:42:47 +0000
ROA not after:            Fri 03 Jul 2026 00:47:47 +0000
asID:                     16909
IP address blocks:        2a0f:6287:f0d5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e5:5d:d0:9c:4e:97:f7:1a:a2:8a:ce:5b:46:ad:bd:25:58:6a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:47 2025 GMT
            Not After : Jul  3 00:47:47 2026 GMT
        Subject: CN=7844F1D0E5138604E030260C86C95C4CBD64F2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:61:54:11:7e:74:d5:fa:db:cb:d9:37:e3:
                    f6:f7:50:50:45:81:d4:b4:04:0c:a3:c4:20:77:a4:
                    92:45:3f:7e:25:eb:8f:ea:91:2a:82:24:0e:17:6d:
                    68:1a:fd:f0:d4:a5:fe:60:28:5c:87:fe:64:75:6a:
                    31:c8:7a:58:7d:dc:42:a0:6e:4a:36:88:b0:4b:ca:
                    00:97:e5:dd:55:9c:86:4d:62:a8:50:46:1d:3a:94:
                    29:e9:fb:a9:4a:98:8a:95:30:d3:be:95:5c:32:37:
                    71:84:73:65:5e:ee:1d:81:4b:14:99:dc:27:b5:0e:
                    64:98:ba:05:a1:da:cc:07:14:17:71:10:30:77:4b:
                    9c:42:a1:5d:b5:23:c4:c6:a5:31:89:cf:a4:a4:4a:
                    ea:6b:98:c2:09:48:29:2e:5a:f0:f4:3f:48:54:b4:
                    fa:c4:63:6e:78:54:27:c5:6f:b0:c1:f1:2c:93:83:
                    10:a7:f0:26:de:e0:fa:18:54:7d:c0:d5:30:11:1a:
                    77:b6:1d:25:e2:03:bc:b4:d4:bf:e2:e7:c8:77:0e:
                    70:ad:bc:cd:1e:0f:a9:a2:d5:1e:6e:80:a3:52:7d:
                    28:10:0a:44:a4:f4:4f:e7:c0:82:a4:85:25:60:21:
                    12:28:8e:d9:8f:b1:20:2d:02:2d:ca:48:60:7c:d4:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:44:F1:D0:E5:13:86:04:E0:30:26:0C:86:C9:5C:4C:BD:64:F2:C2
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663064353a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f0d5::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:ce:c5:b1:bc:f5:3d:7d:c4:f7:03:3f:44:bf:70:2e:f0:d6:
         94:5f:fb:66:fb:f9:d6:e6:4d:37:88:d1:d2:6b:3e:de:ce:24:
         98:64:3b:fc:2e:0c:f8:35:0a:8d:a5:ec:77:3a:5b:fa:e2:08:
         1c:1b:30:cf:15:59:cf:43:e3:33:32:75:30:53:fa:8c:fc:16:
         48:87:9a:80:a4:a5:53:24:c6:34:81:09:98:1b:d8:e4:77:80:
         6f:8c:dd:20:35:ee:59:84:1f:39:ed:d7:4a:62:c5:0a:fc:af:
         f4:72:1a:0d:c6:3c:06:fa:10:d5:ac:ff:1f:0b:2d:30:7c:c0:
         ac:a0:a1:71:f9:e8:4d:39:47:6f:a8:70:e5:de:56:99:56:eb:
         c0:d5:68:74:ed:62:e8:b1:63:5d:cd:9d:f5:90:66:96:54:de:
         63:d2:e3:6b:96:3c:e1:cb:52:a9:66:5f:fd:51:c6:88:7b:c3:
         9b:31:20:b4:67:6e:2a:07:e3:c2:f9:fc:bb:69:28:60:d5:10:
         79:c3:e3:b8:f2:56:08:28:3d:2d:68:44:07:d1:75:d8:eb:03:
         dd:2d:e4:06:bf:c4:1c:60:64:f5:e0:ca:4f:9c:c5:94:6a:7f:
         1a:be:88:0f:7a:3a:5e:83:d4:26:16:6a:f5:78:57:af:4a:16:
         be:b2:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:00:22 2025 by rpki-client