Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663235623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663235623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          CyM/5zvq1bF8ye48qqXYhS3+1oefBJsmN8PxkOA5Zpw=
Subject key identifier:   3A:03:74:2C:D9:A9:8A:DC:AC:B9:9D:71:0D:70:4D:2E:0C:72:93:8D
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       377710CC1FA2C78D556E68FBD3EECEBF8C628B76
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663235623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:42 +0000
ROA not before:           Fri 04 Jul 2025 00:42:42 +0000
ROA not after:            Fri 03 Jul 2026 00:47:42 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f25b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:77:10:cc:1f:a2:c7:8d:55:6e:68:fb:d3:ee:ce:bf:8c:62:8b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:42 2025 GMT
            Not After : Jul  3 00:47:42 2026 GMT
        Subject: CN=3A03742CD9A98ADCACB99D710D704D2E0C72938D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:56:64:42:79:bb:0f:6b:9e:42:4b:90:e3:
                    f9:3b:7e:ca:3f:09:e0:bf:c7:b7:67:5a:d5:5a:19:
                    64:0a:1d:da:d4:0b:6c:2b:25:f2:4d:53:f8:d1:6f:
                    76:40:a7:a3:98:4c:16:14:1c:9e:a8:7d:c2:3e:08:
                    29:ed:4b:a7:78:c3:53:a1:db:8c:9f:5e:12:61:ee:
                    f9:80:f8:8d:62:09:f5:72:d4:58:a9:46:3d:a9:7c:
                    1b:ac:07:e0:7f:60:d7:ba:a0:0e:cb:ab:b7:f3:f0:
                    63:28:46:15:b2:cd:4b:cd:7f:f4:a7:c2:88:3e:d0:
                    c8:93:b8:8d:08:7e:61:f9:2b:eb:e4:0c:dc:0c:32:
                    d6:1b:4b:85:a4:65:ce:bc:52:e0:30:02:7f:7a:a7:
                    ee:ea:4a:dd:e3:34:0a:1e:36:47:f5:ef:e2:02:dd:
                    f1:df:a1:84:eb:01:22:57:62:7b:23:d8:a1:36:ed:
                    7a:92:af:dc:63:25:a1:95:79:a9:0b:bd:e7:5e:f5:
                    ef:f7:b0:59:d0:4a:c8:c1:1f:a8:0f:e2:d3:b9:a5:
                    25:2e:17:dd:30:5b:e4:03:31:39:cb:8b:9f:65:f7:
                    a4:b9:95:83:99:b4:7b:3a:e4:00:df:1d:4c:5c:47:
                    e0:ea:a4:c6:8f:62:7e:26:5b:dc:e9:6d:05:ab:c4:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:03:74:2C:D9:A9:8A:DC:AC:B9:9D:71:0D:70:4D:2E:0C:72:93:8D
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663235623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f25b::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:0d:66:e3:e4:8e:8a:ca:3b:17:a0:af:3e:80:c7:76:e7:a2:
         15:95:f0:29:8f:02:89:ef:4e:50:27:8e:61:03:40:23:96:98:
         3f:b4:e7:f5:1b:78:19:c8:55:51:d9:05:76:b4:a7:3e:2d:b3:
         09:77:a3:40:d6:45:c0:fe:0d:54:d5:f2:f3:e6:47:02:be:dc:
         a1:92:c4:dd:b0:56:02:7d:46:0d:e0:82:b5:b3:82:0f:24:04:
         70:42:30:2a:0e:2f:0b:19:e7:12:0a:78:1e:c8:a8:ec:e0:64:
         b7:8c:02:8c:85:66:e4:67:66:c9:44:ee:2d:0e:e7:20:01:82:
         c8:03:6a:a0:a6:40:03:0a:82:f6:2b:9a:7d:72:04:88:62:ea:
         b3:cf:be:6e:08:f8:d1:78:e6:7e:5f:e4:9d:b0:f1:c4:03:6a:
         3c:82:6c:4b:20:d5:ba:6d:12:ef:dc:9c:d7:66:db:58:a7:04:
         f4:42:e4:0c:b2:0b:b7:98:48:a8:ed:8b:41:3f:18:e4:a8:58:
         15:4d:71:a7:ce:63:07:53:8f:58:fa:ac:1a:6f:d2:91:d2:68:
         11:f6:17:45:5e:76:d4:f4:19:a8:9e:7f:0e:8a:ce:9c:a5:74:
         00:6f:ab:26:20:d7:fa:63:99:d9:cd:5a:52:24:6b:43:ce:c3:
         dc:7b:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:49 2025 by rpki-client