Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663933643a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a663933643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          f8OSCGtGSQU3hpl+w4Z2egOw+t1sd4rfSOB+6QZvXX8=
Subject key identifier:   A2:D3:30:89:5D:EE:D9:6F:44:CC:9E:A5:3B:FD:60:88:FE:1B:E6:EF
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       2C1F79C2BEAD47EC1BDA8F7EBF8AC799B33091EB
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663933643a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 04 Jul 2025 00:47:41 +0000
ROA not before:           Fri 04 Jul 2025 00:42:41 +0000
ROA not after:            Fri 03 Jul 2026 00:47:41 +0000
asID:                     16909
IP address blocks:        2a0f:6287:f93d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1f:79:c2:be:ad:47:ec:1b:da:8f:7e:bf:8a:c7:99:b3:30:91:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:41 2025 GMT
            Not After : Jul  3 00:47:41 2026 GMT
        Subject: CN=A2D330895DEED96F44CC9EA53BFD6088FE1BE6EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:52:d2:8c:87:02:25:60:4e:9e:21:e3:5e:
                    29:d0:bc:26:07:63:fe:45:3b:7f:12:ec:94:5e:c3:
                    3d:3b:a3:b2:b0:8a:02:dd:20:dc:8f:e7:b5:3e:8a:
                    51:7c:9a:e3:75:80:f4:2f:f2:52:08:d2:ba:6e:ad:
                    d1:90:92:e8:fe:6c:5e:95:b0:6c:85:34:c4:28:97:
                    66:c0:cf:a9:f7:53:ff:58:4f:72:e0:1b:72:51:58:
                    67:83:b5:50:6b:35:02:00:87:4b:a2:94:69:60:29:
                    97:3c:7c:20:a4:1d:a2:63:96:3b:bc:71:d0:52:cf:
                    13:fc:2c:58:ea:fb:19:42:45:3d:a2:2b:f1:4d:fe:
                    e7:77:46:30:29:b0:8f:d5:1d:18:ac:b6:d1:e8:74:
                    34:46:23:16:84:59:76:35:5a:08:22:39:de:05:57:
                    e6:6d:1d:79:72:64:fb:5b:df:6d:02:e2:7b:0f:0a:
                    17:d2:2f:f1:fc:8e:e0:b1:e6:fa:b2:73:c2:9a:22:
                    48:9d:9c:6f:ed:36:5d:eb:16:b4:15:b4:d3:9d:f7:
                    b3:4d:19:4e:07:5b:5a:e5:6d:1c:3e:b1:2a:96:14:
                    3c:1c:1a:67:ab:d4:39:73:92:99:1e:9f:50:1c:92:
                    2f:67:c0:4d:0e:b4:32:4c:f6:97:93:74:5a:c2:f3:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:30:89:5D:EE:D9:6F:44:CC:9E:A5:3B:FD:60:88:FE:1B:E6:EF
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663933643a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f93d::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:25:85:63:3d:e5:c2:bd:49:49:11:32:16:66:59:2d:d8:45:
         cc:2a:df:18:0a:60:98:d4:24:be:88:8c:98:36:d0:1a:e4:60:
         6c:a7:38:35:41:c8:24:81:ce:9e:bd:a5:d9:17:ce:00:27:bd:
         9f:98:a6:a2:c8:94:c5:67:2f:9a:62:53:1d:f5:8f:1f:c6:f2:
         cc:e5:fa:eb:78:4d:83:17:3f:12:a1:69:f3:7a:92:5f:e5:c7:
         52:b2:53:3d:1c:7d:8f:b5:cc:50:e7:9d:6f:43:9b:82:f0:36:
         26:0c:44:bd:71:c8:5e:d5:46:ad:27:a3:5b:35:5c:54:71:48:
         a6:dd:1f:94:4d:ff:e6:fb:c9:cb:eb:4c:0c:ba:65:62:c2:ce:
         50:ef:2a:0d:19:88:71:bc:6d:e6:80:6b:59:fb:b0:d4:c4:67:
         4b:52:aa:52:2e:34:40:97:82:64:d9:01:43:bc:ba:39:50:44:
         17:59:bd:28:29:b6:61:cd:6a:46:eb:b9:a8:64:a9:65:7a:6e:
         d5:d1:21:a4:04:94:c9:bb:88:2f:ac:02:14:5e:7c:ea:70:4f:
         eb:f9:c8:ce:f1:15:8c:c0:6c:f2:51:c5:f5:22:9b:a4:95:ca:
         d2:97:49:36:5d:fd:b9:17:54:95:06:b0:6b:7d:0d:13:5f:68:
         72:4c:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:44:34 2025 by rpki-client