Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          TzyVB9cdnPPnatBobDPUCscNnXodYO0zE34vqwn1g0U=
Subject key identifier:   FB:37:B4:CF:1D:34:6C:46:23:2B:A7:B1:10:7F:75:D1:D6:BA:33:26
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       2A10B8198D5E7ECAB4A704D225D79207D5F75946
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     16909
IP address blocks:        2a0f:6287:f3a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:10:b8:19:8d:5e:7e:ca:b4:a7:04:d2:25:d7:92:07:d5:f7:59:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=FB37B4CF1D346C46232BA7B1107F75D1D6BA3326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9c:21:39:9f:47:9f:38:a9:af:e0:82:bf:e8:
                    2f:70:8a:2a:40:1f:6c:b3:99:47:17:ee:17:16:61:
                    4d:22:6c:2b:8c:a6:fa:5d:10:b4:f6:9b:75:68:70:
                    e4:2b:7d:9c:15:e0:68:d0:39:d7:04:cb:71:e3:aa:
                    00:c2:ba:74:04:91:01:65:16:46:9d:5d:09:ee:9b:
                    9e:33:38:c0:f9:5c:93:68:85:4c:aa:e1:77:5e:79:
                    fa:a3:76:a6:66:c8:ff:30:94:ba:b6:78:1e:9d:02:
                    56:61:54:aa:fa:11:55:8b:5e:ff:c1:3c:84:b4:44:
                    0d:d0:77:54:01:33:29:69:9c:57:35:d1:1b:54:80:
                    8e:7a:9e:df:6c:84:12:12:db:5f:32:e2:1f:97:6a:
                    31:ec:10:56:7f:9b:b4:0a:06:5e:87:95:92:52:5d:
                    8c:d0:6a:a1:b8:6f:4b:ac:6c:63:35:d2:0a:f8:a5:
                    7b:7a:b7:ea:94:9c:17:db:86:a5:5c:c8:ef:08:f6:
                    f1:14:6e:c8:f6:84:b3:75:2c:73:24:c9:65:62:69:
                    86:c2:54:f6:b7:d8:e0:3d:05:25:08:b1:c2:c4:1d:
                    32:cb:cb:a1:41:6c:67:d3:12:ff:7d:06:f6:d5:42:
                    75:8b:2a:11:9d:3b:65:49:45:03:16:e2:7e:3e:f9:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:37:B4:CF:1D:34:6C:46:23:2B:A7:B1:10:7F:75:D1:D6:BA:33:26
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f3a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:19:9c:0b:f4:92:88:1d:5e:14:b5:bf:d1:99:7d:51:a0:a5:
         01:b7:fc:bf:05:9c:e1:92:b3:89:ad:f1:8a:28:65:11:0c:f3:
         ce:9c:86:0e:90:19:90:25:7f:16:00:18:80:05:7d:0d:c5:86:
         d6:17:37:dd:73:fb:7a:3b:15:d9:cf:a6:a5:ce:0e:2c:43:91:
         8e:b5:15:2e:78:55:a7:51:63:90:64:5e:65:65:e4:64:15:82:
         21:65:9a:64:65:63:27:85:02:31:4a:1a:6c:45:6f:3f:be:03:
         92:92:f7:cd:2e:49:a7:44:ef:6c:71:52:86:58:3b:5c:f5:d3:
         0e:df:10:70:fd:69:42:78:01:46:bc:39:39:c9:6f:28:e9:e0:
         0c:2c:21:49:b2:29:26:bb:f2:02:10:b7:36:66:c1:48:67:ba:
         78:46:ce:78:a5:1e:11:ba:c7:34:3b:8e:15:c8:4c:c8:8a:ea:
         0a:90:cf:20:44:2e:98:f4:92:dd:13:6f:7f:17:87:8d:86:25:
         9d:6c:49:a9:d8:33:48:20:9e:48:d5:5c:af:c4:3f:36:a3:8d:
         b0:7f:9c:db:a1:10:03:40:9c:47:58:51:09:c1:11:ae:f5:e6:
         b1:2f:86:bd:ab:a3:4c:5c:25:e2:9d:86:ce:8a:95:aa:e9:d7:
         8a:e9:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:51:46 2025 by rpki-client