Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          r9udUl9TrKuW145FxIuVjbVHVZiO74OZ9ppwNAH6QSg=
Subject key identifier:   91:46:5D:2E:FA:B0:16:36:6E:70:C9:63:F8:1D:EE:F0:BC:15:17:88
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       6DDCC7D025429DA48400887F2FF815967E57B3AB
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:47 +0000
ROA not before:           Fri 04 Jul 2025 00:42:47 +0000
ROA not after:            Fri 03 Jul 2026 00:47:47 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f1b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:dc:c7:d0:25:42:9d:a4:84:00:88:7f:2f:f8:15:96:7e:57:b3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:47 2025 GMT
            Not After : Jul  3 00:47:47 2026 GMT
        Subject: CN=91465D2EFAB016366E70C963F81DEEF0BC151788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:fb:68:de:d7:68:c0:d6:f9:05:4a:07:73:
                    e7:9b:6f:f9:55:79:cc:f0:24:68:13:1f:62:e2:16:
                    79:07:de:14:98:ff:fb:9e:aa:ed:00:25:c7:31:a3:
                    dd:83:c4:c3:39:31:7b:fd:87:08:92:7d:0a:f4:c1:
                    5f:ff:cc:ea:9d:41:ae:f2:64:22:8d:aa:45:e9:37:
                    94:f2:9a:fb:bb:d3:22:02:77:dd:d9:69:ee:2c:cc:
                    72:63:e3:b1:fd:36:46:fb:e0:a3:fd:77:0b:8c:97:
                    f7:f1:9a:e7:b1:10:47:ac:fd:7a:5b:9d:f9:07:04:
                    be:7f:b9:fd:dd:2f:77:b2:2a:12:16:f5:f9:36:25:
                    4b:a1:d8:5f:b5:34:e2:d4:21:ad:a6:cb:21:73:4b:
                    e1:4a:30:94:1e:e5:f2:8c:89:8b:72:d4:34:de:1f:
                    92:71:5d:ae:38:5b:bd:a9:d4:1f:a9:d4:94:a9:49:
                    18:81:20:7f:89:c1:7a:b3:42:e0:29:d2:28:35:4e:
                    d4:37:53:0d:88:19:66:76:97:d3:bc:92:88:a5:71:
                    bc:f4:45:ee:d1:07:3e:8b:ed:a1:68:55:30:07:dd:
                    cb:21:b2:39:27:76:5e:30:be:91:5c:f6:37:a4:48:
                    15:95:10:23:0c:d2:39:9e:b8:ba:84:68:ac:db:6b:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:46:5D:2E:FA:B0:16:36:6E:70:C9:63:F8:1D:EE:F0:BC:15:17:88
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f1b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:f1:9b:b0:c3:7b:f8:b8:13:c9:01:49:7f:51:6b:4c:21:6d:
         0d:49:ef:a8:40:03:a0:fd:82:ec:fc:1a:c4:aa:e8:45:07:ef:
         96:4b:0f:2b:a0:e6:94:d8:68:ed:0f:c0:52:fb:86:ff:75:da:
         b0:03:aa:0a:85:e6:b4:38:6d:89:f6:c9:27:d9:48:b9:ec:88:
         db:50:40:47:a8:d9:11:1a:f2:d3:24:50:d0:4c:a9:9d:fe:7c:
         35:a2:72:eb:11:39:ba:23:4a:03:1e:37:8f:e4:1f:0f:8f:e1:
         89:3e:6b:b3:be:0d:35:3c:b5:a1:ad:3a:78:bd:43:1a:97:16:
         4e:35:99:cc:ee:85:9e:d7:32:8f:9e:49:52:5c:1d:90:16:c8:
         68:64:e0:e8:20:0a:2c:c0:3b:08:9f:a2:9e:21:16:e3:1e:c2:
         0c:a9:ba:73:85:95:9f:7a:ee:93:4e:f3:6a:95:5c:2a:17:b4:
         d3:af:33:6c:dd:df:ad:f8:2b:26:a5:8f:01:09:81:e7:a2:74:
         d1:ec:e2:f7:b3:fa:ed:8c:39:fd:a2:d1:25:c6:bd:1c:3d:9e:
         e5:3b:a6:26:01:0d:04:cd:c2:5f:01:94:8d:4b:9b:74:e5:d9:
         d2:0e:c6:25:f9:1f:0c:24:6c:51:0e:e6:75:16:0f:eb:a8:bc:
         c3:46:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:45:36 2025 by rpki-client