Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          AJOdI9j0HrDSqA3bPJQfvCyB4S9EdNyVWUU9ESGjg2M=
Subject key identifier:   59:B5:02:6A:84:65:09:DD:C1:79:64:B3:B0:FE:E4:E6:1F:E6:96:32
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       206E831B8317B6B1ABEE6AFE59C71E72DAF16E86
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:47 +0000
ROA not before:           Fri 04 Jul 2025 00:42:47 +0000
ROA not after:            Fri 03 Jul 2026 00:47:47 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f681::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6e:83:1b:83:17:b6:b1:ab:ee:6a:fe:59:c7:1e:72:da:f1:6e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:47 2025 GMT
            Not After : Jul  3 00:47:47 2026 GMT
        Subject: CN=59B5026A846509DDC17964B3B0FEE4E61FE69632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:20:95:8a:0f:08:18:fd:16:3b:fb:52:63:
                    a5:fd:3c:e8:fc:cf:b8:cb:f0:62:21:ca:7c:90:85:
                    92:81:1b:11:44:3a:f4:62:7a:3e:93:16:ca:05:7a:
                    47:5c:13:bc:3f:cc:90:b1:8e:28:9a:1d:9d:52:24:
                    db:29:3b:84:51:ec:ce:e5:36:71:b0:e1:21:40:d8:
                    70:2f:64:60:ff:60:06:59:69:e3:b4:9b:55:07:67:
                    c3:29:e4:a4:e5:4c:62:e9:08:38:86:69:dd:72:40:
                    c0:cd:48:79:bc:ef:44:e9:60:37:9b:95:8d:d5:7b:
                    a1:8d:a0:15:0a:fe:47:53:cd:78:4c:94:3e:22:27:
                    90:88:86:43:9d:d4:84:ed:c5:40:51:82:e8:d6:86:
                    17:0f:cf:dd:79:cd:ca:0d:8c:00:46:8d:87:66:27:
                    12:8c:43:94:45:60:bb:1c:52:e5:20:78:f3:78:03:
                    27:4e:3b:06:56:5b:bc:10:fd:9b:01:96:73:a8:eb:
                    50:7a:be:60:1d:9d:84:23:c2:c7:55:db:6d:f2:43:
                    7e:17:8d:bd:20:33:ab:4b:89:a9:c0:df:53:5b:eb:
                    bb:b1:a3:4c:de:ec:e9:79:36:d3:e8:35:ee:e3:51:
                    a2:6b:9f:c5:c3:d2:9b:cf:94:3b:57:d5:5b:c1:e8:
                    fd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B5:02:6A:84:65:09:DD:C1:79:64:B3:B0:FE:E4:E6:1F:E6:96:32
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663638313a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f681::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:c0:3d:55:17:6d:88:c9:9d:97:ee:89:31:16:33:5b:fd:9a:
         a9:46:6f:02:cf:87:22:1f:92:3b:bd:b5:2f:78:16:b4:00:b1:
         61:d9:59:61:f3:a6:1b:3b:ab:5a:2c:9f:46:a9:83:dc:78:e6:
         8b:55:93:47:33:1a:8a:be:01:da:29:24:5a:a0:1e:74:f7:d8:
         81:8b:03:cf:28:61:3a:4e:85:84:78:f1:f8:0c:0c:5e:f3:ec:
         85:89:ba:84:24:2c:dd:43:9d:16:fd:3c:dc:b2:c6:30:fc:13:
         20:18:bd:de:bd:28:d7:c6:94:10:27:93:e4:c0:0b:58:c2:e8:
         1e:8a:f4:75:dc:a5:ac:6d:42:8c:35:a8:39:0a:78:0d:27:4c:
         36:10:f0:5a:23:89:d7:c0:e7:71:22:c8:27:eb:a1:82:b3:d5:
         13:2f:91:e2:2d:6c:e1:83:5e:9f:27:6b:aa:8c:81:65:77:77:
         30:30:b2:0d:af:1a:17:f0:08:4d:bf:24:b4:49:1a:c1:61:4b:
         3a:d8:df:23:6f:62:28:68:fa:88:37:f1:93:2b:62:8a:1c:94:
         cd:b1:f5:6c:f0:2b:52:18:54:27:a2:fc:ff:ad:f4:03:6b:0a:
         10:54:bb:1d:43:ff:6f:35:58:8c:56:b2:12:88:47:36:2e:af:
         14:66:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:43:24 2025 by rpki-client