Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          0EUIrnpvV+WrJW8G92QbEW7gzWdhgLXbvhtmPQTzXSg=
Subject key identifier:   90:7D:98:7E:7A:0E:65:4B:7F:C6:D8:01:86:21:F4:C0:7A:F6:EF:19
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       7A9C6010A6EA3078509DF29CFDE72020DB558031
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:41 +0000
ROA not before:           Fri 04 Jul 2025 00:42:41 +0000
ROA not after:            Fri 03 Jul 2026 00:47:41 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f43c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9c:60:10:a6:ea:30:78:50:9d:f2:9c:fd:e7:20:20:db:55:80:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:41 2025 GMT
            Not After : Jul  3 00:47:41 2026 GMT
        Subject: CN=907D987E7A0E654B7FC6D8018621F4C07AF6EF19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0c:f7:d0:78:f3:08:ed:54:0f:ed:58:03:fa:
                    96:2f:0a:9f:3e:63:9f:b2:ef:68:a7:dc:76:2e:50:
                    e1:68:a0:c1:ea:6d:c9:a4:1b:0d:70:3d:23:1e:d1:
                    1f:6e:1a:12:54:98:dc:17:d2:cf:0a:92:47:9a:3d:
                    d3:37:86:36:22:12:3a:2a:e4:8a:ae:18:62:57:ca:
                    a5:8f:f3:77:ad:16:11:39:32:b8:b8:a2:d9:c7:e4:
                    10:1d:fd:ed:06:aa:d1:78:03:18:d3:f1:8e:a8:ca:
                    48:c4:ce:4c:21:e8:c0:b9:ec:91:96:40:c7:0f:83:
                    2b:dc:b4:fc:32:6d:a6:2a:91:e0:c6:7b:1d:46:59:
                    b7:fc:46:dd:f1:0c:7f:86:92:55:08:9a:4d:90:b6:
                    df:da:59:53:03:4d:0a:c3:1b:45:4a:ff:f3:c6:f9:
                    9c:7b:96:74:b1:d4:eb:07:c8:da:02:19:46:95:c4:
                    58:5b:a9:1c:6c:30:86:67:2c:65:c9:5b:cd:f7:70:
                    1e:e6:7d:81:7e:58:7f:1c:2c:a5:3f:b3:70:1c:34:
                    1e:7a:7f:79:37:a4:e7:00:2c:47:93:6b:58:e0:b4:
                    cc:23:52:53:b9:a8:ff:48:18:19:29:aa:f6:3e:22:
                    b5:ec:4a:82:25:a5:5a:f5:d5:b0:76:8b:80:be:f7:
                    ae:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7D:98:7E:7A:0E:65:4B:7F:C6:D8:01:86:21:F4:C0:7A:F6:EF:19
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f43c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:c8:b8:ad:7c:e3:92:30:48:9b:10:d3:ab:47:24:d6:ef:64:
         fb:59:ec:8b:d2:3f:85:44:02:d2:37:0b:8a:50:8a:3b:2c:d1:
         3d:b0:d6:98:41:b6:5e:d4:e1:ed:d6:1a:d1:38:c8:54:47:01:
         7b:4b:d2:81:f5:10:96:a1:ec:1d:82:fe:4c:f5:80:84:a4:4e:
         cf:ee:79:70:42:d9:3c:0c:d8:39:bb:2b:29:ad:f7:de:1c:4f:
         73:e5:2c:86:e0:b6:24:ef:28:c8:b4:ff:be:5d:12:45:71:f7:
         46:9d:84:6c:ca:12:30:89:75:9e:23:67:25:e9:65:d6:df:7a:
         97:c9:9f:dd:87:2e:6a:3e:72:37:b0:3e:60:d1:cf:f7:6e:fe:
         6c:0e:6a:1b:16:37:e2:8a:1a:53:4a:6c:81:5d:21:f6:43:1b:
         91:b3:46:a9:0a:72:f4:36:54:56:1f:65:06:32:a2:7b:3c:84:
         9b:d4:c5:10:b3:b7:b8:52:2c:8e:84:1e:ff:e3:0b:b8:b6:c9:
         c5:d5:15:a3:23:8d:43:17:57:28:2e:94:32:b9:c4:1c:81:38:
         de:e2:e0:5c:36:63:38:d7:b6:a6:b7:5d:58:eb:d1:3d:6d:54:
         22:ab:95:84:51:a9:f3:15:2f:8e:4f:6f:ce:24:40:61:61:5b:
         c1:86:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:25:58 2025 by rpki-client