Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663666613a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663666613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          uAHze+7Q6Izl3IZ5mCDcXccAbpeMJiypQAo0Eyb6azo=
Subject key identifier:   0C:77:E3:63:91:C6:19:EE:B8:C3:69:23:7F:E5:40:6F:73:35:2E:9A
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       4EC915F42228292C630D3B00A33288246E6D1DFD
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663666613a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:46 +0000
ROA not before:           Fri 04 Jul 2025 00:42:46 +0000
ROA not after:            Fri 03 Jul 2026 00:47:46 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f6fa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c9:15:f4:22:28:29:2c:63:0d:3b:00:a3:32:88:24:6e:6d:1d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:46 2025 GMT
            Not After : Jul  3 00:47:46 2026 GMT
        Subject: CN=0C77E36391C619EEB8C369237FE5406F73352E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:34:8e:db:32:43:98:af:90:a2:4a:3a:49:
                    2d:f8:aa:8c:29:ab:65:a8:69:b2:ac:11:03:c1:9c:
                    3b:ac:77:27:42:79:7e:75:6f:a7:10:64:b5:3a:97:
                    cc:79:80:64:bb:81:f6:d5:0d:3a:7b:4e:2a:85:ef:
                    4f:82:99:50:99:28:84:cf:d7:db:e4:ce:c6:77:00:
                    f4:3b:76:67:29:68:0d:67:d4:95:4c:d0:2d:c5:49:
                    72:4e:0d:f0:a0:7a:0d:8b:52:05:a6:66:0f:7f:6f:
                    68:2c:cc:bc:51:61:a8:3f:f1:aa:fb:dc:c4:74:4f:
                    d9:03:16:2f:c7:3f:ba:7f:23:6b:36:d3:19:4c:01:
                    5b:54:a4:1d:99:ab:f9:df:f5:92:39:2f:2d:05:fc:
                    7d:75:aa:df:1e:21:0c:14:b9:49:82:f2:2f:8b:cb:
                    92:63:32:66:8c:35:22:2a:d0:df:c8:36:3f:e9:f5:
                    b5:b4:ac:fe:cb:57:ca:8a:ed:40:59:f9:bf:d1:91:
                    9e:85:1e:74:a1:14:a7:2b:42:95:5a:fb:7d:aa:43:
                    fb:7c:db:82:d1:d6:95:d1:37:2e:e7:7a:9c:65:55:
                    2e:e9:03:f3:bd:f3:01:dc:d5:b5:da:8d:ab:e3:e5:
                    81:65:62:eb:e7:73:09:77:0a:8c:1b:85:30:4b:8a:
                    98:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:77:E3:63:91:C6:19:EE:B8:C3:69:23:7F:E5:40:6F:73:35:2E:9A
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663666613a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f6fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:e5:3c:d1:3e:06:d7:d0:9b:70:15:b9:e3:51:9d:3c:2c:
         9d:b2:2b:f7:ec:10:7c:4c:4c:39:18:41:88:d0:a8:b4:0b:45:
         8b:ea:bc:57:57:25:2b:c5:4e:a9:20:2c:0a:a1:19:58:97:0f:
         bd:8a:96:29:e3:3b:7e:36:51:c4:4b:b6:4d:bc:21:ff:0a:30:
         e1:9f:58:86:a6:90:be:06:c5:78:3c:34:0c:84:68:0f:20:57:
         fa:ee:ac:38:be:71:0a:a9:6b:b9:06:ac:00:bd:95:fa:34:0a:
         68:d3:7d:89:a3:65:7f:9c:26:2e:30:bb:ab:08:11:e7:3b:b6:
         13:6a:7f:b9:13:58:02:b9:d5:ed:93:9c:98:38:5f:df:cf:f9:
         79:f0:3f:51:e9:87:f5:44:47:92:66:00:ea:dc:7b:f0:91:49:
         90:5f:d7:59:af:2b:c9:33:80:5a:65:b6:cb:0f:1c:2c:f7:88:
         0d:6a:3a:d2:17:56:2b:e8:09:5f:db:c7:7d:44:7d:9b:f3:67:
         08:24:5e:73:25:b3:4c:88:25:c0:7b:e0:99:b5:6f:5f:c5:22:
         05:11:e6:16:33:f3:3d:6c:bf:6c:84:74:3d:5d:8e:a2:23:30:
         8d:88:35:7d:d8:68:d4:29:87:ed:c2:d8:9a:04:f3:f6:3a:cc:
         9e:6d:1d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:18:43 2025 by rpki-client