Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          jNCMvbSlC06Kk4arTrCxo74i66Wkgg3R7gqQ+ZeL1xE=
Subject key identifier:   78:0F:A3:C9:74:11:AB:B6:8D:E3:B9:5F:A8:67:F7:B2:E3:BD:A1:3E
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       2D5E551344C2ECA86062F20D8A6714EC3AC00870
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:44 +0000
ROA not before:           Fri 04 Jul 2025 00:42:44 +0000
ROA not after:            Fri 03 Jul 2026 00:47:44 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f696::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5e:55:13:44:c2:ec:a8:60:62:f2:0d:8a:67:14:ec:3a:c0:08:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:44 2025 GMT
            Not After : Jul  3 00:47:44 2026 GMT
        Subject: CN=780FA3C97411ABB68DE3B95FA867F7B2E3BDA13E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:a2:00:1f:b8:95:03:7b:42:45:6c:40:21:
                    c1:22:25:50:91:4b:9d:9c:60:1f:38:6a:0e:28:c9:
                    18:50:06:ab:4a:0a:5f:d3:b2:56:55:fc:20:f0:68:
                    0c:e3:71:dd:29:21:b7:f3:58:2c:ce:36:64:af:89:
                    15:62:9a:65:8a:52:cb:f4:5b:93:bd:a5:4e:5c:21:
                    f9:a2:62:a6:18:23:60:c4:5f:6f:5b:79:9f:a5:b9:
                    07:e4:71:90:e2:8d:e2:d2:ab:9e:d1:05:34:d2:93:
                    9f:ef:a1:7b:ee:37:b1:20:c6:b0:5b:01:c0:6e:8c:
                    1f:49:b4:19:ae:b9:b2:8e:96:46:a9:4b:c2:5c:76:
                    ee:d8:a8:d1:3d:10:d3:e3:25:00:10:43:3f:c2:0e:
                    3a:67:46:7b:ad:3c:8e:53:c8:2e:0b:fe:ed:83:11:
                    59:70:22:88:3c:c9:d8:14:1c:15:f7:1a:30:55:a6:
                    92:f7:b1:4e:99:dd:5c:a3:bf:1c:e2:84:73:c0:fb:
                    c8:78:0c:58:60:3d:88:da:c7:98:33:d8:f8:93:86:
                    2d:a1:04:70:e4:33:78:2b:20:f8:5f:ad:3f:f6:de:
                    d0:0a:05:e6:c0:ab:eb:a5:f0:9e:5b:f4:57:ad:32:
                    57:26:48:0d:5c:99:63:4c:d5:f6:9b:a3:99:19:db:
                    40:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0F:A3:C9:74:11:AB:B6:8D:E3:B9:5F:A8:67:F7:B2:E3:BD:A1:3E
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f696::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:af:3a:eb:7c:24:79:3e:f1:d2:22:d7:d8:aa:c1:81:15:
         f5:fc:3d:1d:4d:34:78:62:79:ac:26:0f:55:df:98:57:49:8c:
         61:ef:25:33:e8:7e:fe:7b:03:24:5e:fd:08:11:e5:d5:e3:34:
         26:c1:bb:41:fe:16:81:cf:b3:0e:48:d2:8a:67:d4:77:7f:90:
         4f:5e:a3:aa:4c:ef:40:1a:f6:6b:1a:63:0c:c3:7b:fc:38:4f:
         93:3b:04:df:d2:09:45:93:a8:4c:09:e6:d1:ba:3f:45:4b:90:
         d8:17:ad:86:e9:af:fa:47:dc:72:f2:25:14:01:ad:ae:bd:a7:
         bc:6b:f4:ba:52:49:09:14:e8:10:56:1e:d5:fd:a4:a6:6e:cd:
         89:48:25:ff:f9:c5:33:3e:73:f2:ef:a2:ef:17:c9:72:17:ee:
         8f:53:eb:7c:8a:b5:a4:64:e8:6b:33:80:ce:e1:d2:0b:08:ec:
         5f:ca:e0:d6:a5:96:69:e3:c9:01:2a:a0:37:37:13:fa:5f:ee:
         72:f6:7e:c7:76:be:22:bd:36:62:b3:c0:50:2a:c8:02:08:e6:
         8b:de:48:41:71:82:18:32:21:23:8a:6a:52:c7:2f:93:0f:44:
         fe:81:f9:68:3b:36:dc:e2:7f:3b:f2:46:df:f6:73:26:b8:17:
         e9:61:c7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:47:14 2025 by rpki-client