Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          9BYJ/e2g+ka7G7rLkdx8wH3wGEAIl5EBS9xbLaNGWuo=
Subject key identifier:   F1:C3:46:02:8B:6A:E5:16:54:C6:6F:C1:C3:CC:1E:A9:F4:F1:DD:34
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       57B1ECC10D6A2621681A4119B6D632901728A38B
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:46 +0000
ROA not before:           Fri 04 Jul 2025 00:42:46 +0000
ROA not after:            Fri 03 Jul 2026 00:47:46 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f5f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b1:ec:c1:0d:6a:26:21:68:1a:41:19:b6:d6:32:90:17:28:a3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:46 2025 GMT
            Not After : Jul  3 00:47:46 2026 GMT
        Subject: CN=F1C346028B6AE51654C66FC1C3CC1EA9F4F1DD34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:06:a7:a8:2a:d9:72:82:b7:ec:a7:24:ea:
                    ee:e0:3d:86:1a:7b:bb:50:3f:75:a2:f4:33:be:14:
                    7e:98:86:41:6d:1a:72:e2:ac:41:be:22:37:9f:7a:
                    10:10:ec:3e:55:87:68:03:dd:f7:59:ac:9c:ba:36:
                    35:0c:31:33:01:5f:f8:34:70:ff:0f:e7:33:2c:59:
                    98:e7:83:a2:ef:a3:e3:b5:b5:e1:31:6d:80:ee:fe:
                    be:1a:e8:80:35:70:f6:f6:52:75:19:95:44:c9:9b:
                    0c:be:ee:52:53:d6:f6:a2:1a:48:d7:a6:d0:70:23:
                    33:ff:29:85:35:48:09:49:c6:82:be:ff:09:c4:4f:
                    82:55:e9:99:1c:07:00:fe:19:4c:61:84:40:ae:b0:
                    af:50:dc:9b:ab:9b:bb:8f:c8:d9:3b:11:b3:96:69:
                    0d:6a:d8:a2:a3:ee:f7:e5:94:f5:f2:b2:e8:ab:92:
                    bb:c7:0a:ee:bd:81:67:a3:f5:8f:56:ff:68:d8:b0:
                    05:e3:36:02:9a:72:98:02:63:3e:47:90:dc:b3:ba:
                    24:bf:5a:90:54:a9:3d:3c:54:ab:fb:51:4b:71:39:
                    ca:0a:4f:2b:26:cb:c0:13:39:85:19:3e:22:fd:a3:
                    6c:bc:22:88:2f:fc:64:63:6e:17:a4:c5:e1:cc:9d:
                    c3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C3:46:02:8B:6A:E5:16:54:C6:6F:C1:C3:CC:1E:A9:F4:F1:DD:34
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f5f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:3a:92:19:2c:61:b3:5a:cd:c9:93:9f:7c:0b:39:51:45:
         bf:9a:d2:65:50:dd:0c:b0:b2:ed:be:db:ac:72:21:da:3a:1e:
         35:13:53:21:b3:d0:c1:3f:13:5c:11:19:cd:e7:f3:df:45:56:
         95:a5:74:9d:e2:00:07:ae:f3:92:74:78:63:a1:d6:fd:43:10:
         c5:dd:07:6f:2b:65:8d:3f:06:ff:0b:0d:69:fb:cf:33:6a:56:
         58:c1:63:6e:35:5d:59:01:b4:93:25:b0:14:37:9d:64:f5:fe:
         1e:b1:5a:3c:14:8b:67:d8:99:a3:7f:6b:e0:fc:d1:84:56:3b:
         24:a5:87:81:2c:dc:97:7e:73:ea:c4:6f:c7:b6:b2:54:9b:b5:
         b9:b3:77:dd:59:96:9b:31:37:31:06:68:c4:ad:4c:e5:f0:8f:
         6f:21:0d:9d:09:54:7a:87:34:73:84:bd:00:46:4c:50:a3:2c:
         9d:db:1e:5e:aa:39:83:e0:2f:1c:80:e5:43:07:e5:aa:d1:9b:
         2b:ea:6d:20:3e:90:8c:78:5a:df:f1:0d:25:e5:b6:8d:2b:22:
         7d:a5:0a:92:23:e8:09:da:8e:eb:c6:a4:4f:4d:d7:5d:57:2b:
         ae:a4:33:cc:1d:4d:3a:dd:9c:e7:48:83:df:5a:7d:be:07:18:
         03:08:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:49:45 2025 by rpki-client