Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          AtB+i4NGCXzGbztVTD622MKxhGe2Q1Y0Y7qGNa1+f0o=
Subject key identifier:   5E:83:14:9B:CB:83:0D:42:38:0B:98:FD:79:73:B8:02:C7:2F:E5:9B
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       478878CC8364C4E18B2BF64C10C8A71DB3AB5190
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 04 Jul 2025 00:47:46 +0000
ROA not before:           Fri 04 Jul 2025 00:42:46 +0000
ROA not after:            Fri 03 Jul 2026 00:47:46 +0000
asID:                     16909
IP address blocks:        2a0f:6287:f7af::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:88:78:cc:83:64:c4:e1:8b:2b:f6:4c:10:c8:a7:1d:b3:ab:51:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:46 2025 GMT
            Not After : Jul  3 00:47:46 2026 GMT
        Subject: CN=5E83149BCB830D42380B98FD7973B802C72FE59B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:2d:af:1e:ec:6f:2b:13:29:d2:a0:22:af:
                    3e:1b:eb:a7:dd:3a:18:75:b5:ee:84:bb:eb:b2:3d:
                    58:fd:9b:02:2b:05:f1:9c:0e:93:77:0f:a9:01:b2:
                    f8:5f:81:8c:c0:8f:49:04:f8:9e:b6:bc:2a:21:62:
                    ea:c6:54:eb:14:57:6c:7f:51:82:89:a3:c2:7f:ee:
                    ed:eb:36:b1:4d:49:7a:bd:9f:06:15:36:14:ed:74:
                    4e:f4:4a:35:e9:5e:7c:73:3c:d4:c9:2f:32:fa:b3:
                    00:cc:23:06:d3:db:67:17:5f:3e:4e:f6:97:13:26:
                    bd:12:0b:a3:c5:9a:66:1e:7c:74:5f:e8:5f:41:c3:
                    0d:21:d9:45:b8:81:14:c5:06:95:b2:91:4a:ed:61:
                    ca:52:5c:dc:22:ec:4d:bd:f5:2f:38:00:c0:94:a2:
                    fa:a3:f6:5e:34:26:ca:e9:af:91:a0:8d:a8:a2:78:
                    7e:18:ca:54:b2:21:05:c8:74:8c:22:ae:48:83:4f:
                    4b:49:9a:67:1d:56:b7:a4:93:ba:68:2c:a5:fe:51:
                    68:40:3b:66:ad:b5:5f:fd:99:08:02:3e:f3:c2:ac:
                    7c:58:05:90:cc:46:2c:cc:aa:3a:53:3d:01:d6:45:
                    6a:7d:da:ad:a3:5a:fb:75:ee:7b:06:34:72:db:5e:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:83:14:9B:CB:83:0D:42:38:0B:98:FD:79:73:B8:02:C7:2F:E5:9B
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f7af::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:17:ba:4d:18:ae:e3:45:76:4e:4e:a2:74:a2:9c:00:13:b6:
         60:9d:a1:2f:e8:e9:85:c9:a2:d1:82:70:53:02:40:a2:66:fa:
         f6:a8:16:ae:db:25:b9:66:76:b1:93:05:79:77:f0:53:44:c4:
         55:cf:fd:0d:9e:30:3e:9d:07:f5:ca:f1:42:6d:e6:72:59:ea:
         0f:f1:76:af:99:ff:2c:43:f8:01:98:f6:22:c3:9b:bf:84:eb:
         48:93:59:36:15:b4:b2:e5:29:9d:c1:f5:3f:fd:d2:8d:df:d8:
         e7:62:a0:21:12:7a:25:d6:13:6f:98:ce:eb:ce:40:e9:4f:24:
         47:02:94:5a:4b:a4:45:e7:af:a9:d2:91:c4:fe:a1:ac:6a:8a:
         82:28:40:22:3d:b8:16:00:ec:70:63:6e:1a:2e:9b:48:10:50:
         10:37:91:97:86:87:3f:aa:a4:ef:1b:52:0f:3f:2e:5f:65:85:
         85:fa:b1:9b:a1:0c:a7:66:ed:d6:a6:6a:98:db:e8:8e:10:bb:
         4e:6d:54:72:50:f8:ab:57:1b:46:05:c0:56:0c:20:87:5d:76:
         25:cc:2c:43:3d:5d:1d:ec:96:01:1a:b1:00:87:67:d7:fe:1c:
         2a:42:a8:ea:ea:ef:7c:51:df:ad:60:7f:18:33:19:2a:7a:50:
         31:6d:7d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:48:29 2025 by rpki-client