Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          z9vO/FtvscSwEN64n7n/J8RrcKqR/BJ5Iumq0vY3hO0=
Subject key identifier:   A0:9A:B0:A5:BA:B1:22:EB:AB:54:73:84:2C:B4:57:17:D5:F6:D0:E8
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       4D3ECD847A06D3B753B572B39B5CECB5713F9F76
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fb74::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3e:cd:84:7a:06:d3:b7:53:b5:72:b3:9b:5c:ec:b5:71:3f:9f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=A09AB0A5BAB122EBAB5473842CB45717D5F6D0E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9e:66:ef:6b:16:c6:49:8e:5a:53:28:75:eb:
                    92:50:70:1d:90:3d:5a:dc:ea:76:0a:89:9c:d9:4e:
                    2f:79:6d:bf:ee:8c:43:1b:f9:ce:4f:12:49:82:66:
                    ac:b8:01:b7:f5:45:c9:cc:2f:90:7c:dc:81:ee:bb:
                    13:94:51:36:f6:ba:0f:8d:03:93:fa:49:c4:1c:bd:
                    e2:fb:c2:24:46:3b:75:86:48:8a:80:cc:42:2e:0f:
                    f3:51:91:69:23:a4:4d:1b:16:27:bf:8e:7e:ba:bf:
                    1e:c3:45:df:e3:92:37:01:28:d6:ba:ea:f9:07:3f:
                    dd:21:07:b6:e5:b7:04:ed:52:95:c2:37:06:fa:da:
                    1c:47:4b:8a:89:41:ce:6a:33:53:9f:c2:3f:4e:77:
                    7f:f1:a7:6e:e9:d6:17:64:a9:9a:bc:bc:86:80:db:
                    0e:94:02:2e:39:59:16:c8:4b:94:dc:d0:b8:12:7d:
                    2d:fd:ce:f1:22:5e:bc:ab:2b:d7:18:4b:db:00:a9:
                    16:21:36:d1:1b:3e:4c:b0:39:e8:b4:21:9c:69:e0:
                    10:f0:f8:9b:ad:c7:e4:ff:53:c4:a5:f5:cd:9b:07:
                    b8:e6:27:88:54:f2:21:b9:75:d2:3e:38:66:22:09:
                    8a:80:27:60:f9:80:78:50:39:8d:70:04:40:30:ca:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9A:B0:A5:BA:B1:22:EB:AB:54:73:84:2C:B4:57:17:D5:F6:D0:E8
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fb74::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:03:5c:a2:39:97:10:16:94:34:39:1b:29:95:19:91:4c:ca:
         23:8b:2b:8c:a4:e9:31:f5:1b:c4:44:c5:2d:af:cf:56:63:42:
         ce:4c:c6:a1:43:f9:7e:64:8c:c5:14:53:41:dc:56:a0:49:ca:
         1d:e4:5a:01:54:82:de:97:f3:07:7b:df:25:e3:4a:6b:48:14:
         9a:c3:b1:de:47:d8:b3:c6:55:22:b9:7a:06:c4:95:71:02:f4:
         11:15:4b:5c:95:84:b6:60:f2:85:b2:77:fa:8d:92:5a:ba:26:
         21:d4:e0:c7:ce:3d:da:45:20:7e:01:0c:e6:44:ba:f5:6f:fd:
         bb:60:7f:81:69:d8:ff:8b:cc:15:d5:e6:6b:70:12:d9:aa:a3:
         a1:9b:bd:81:d4:76:4b:32:a7:5d:3e:79:96:20:8c:8f:bc:75:
         ca:7a:dd:08:85:4d:63:5a:12:61:4c:78:63:bb:19:51:b2:a4:
         07:45:db:ef:ae:0b:81:04:8e:13:be:56:55:f6:19:dd:41:ff:
         bc:2a:4c:79:12:09:11:13:7d:3b:cb:9c:5d:de:62:f7:a3:47:
         15:cc:4f:22:49:79:0f:1e:00:e6:94:fa:90:78:30:8f:c9:88:
         25:8b:e4:9a:15:9a:c9:2e:e1:97:21:98:3b:f5:f3:4c:f7:d7:
         26:d9:e4:ba
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUTT7NhHoG07dTtXKzm1zstXE/n3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV
BAMTKEEwOUFCMEE1QkFCMTIyRUJBQjU0NzM4NDJDQjQ1NzE3RDVGNkQwRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbnmbvaxbGSY5aUyh165JQcB2Q
PVrc6nYKiZzZTi95bb/ujEMb+c5PEkmCZqy4Abf1RcnML5B83IHuuxOUUTb2ug+N
A5P6ScQcveL7wiRGO3WGSIqAzEIuD/NRkWkjpE0bFie/jn66vx7DRd/jkjcBKNa6
6vkHP90hB7bltwTtUpXCNwb62hxHS4qJQc5qM1Ofwj9Od3/xp27p1hdkqZq8vIaA
2w6UAi45WRbIS5Tc0LgSfS39zvEiXryrK9cYS9sAqRYhNtEbPkywOei0IZxp4BDw
+Jutx+T/U8Sl9c2bB7jmJ4hU8iG5ddI+OGYiCYqAJ2D5gHhQOY1wBEAwyiK1AgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUoJqwpbqxIuurVHOELLRXF9X20OgwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjIzNzM0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/t0
MA0GCSqGSIb3DQEBCwUAA4IBAQAiA1yiOZcQFpQ0ORsplRmRTMojiyuMpOkx9RvE
RMUtr89WY0LOTMahQ/l+ZIzFFFNB3FagScod5FoBVILel/MHe98l40prSBSaw7He
R9izxlUiuXoGxJVxAvQRFUtclYS2YPKFsnf6jZJauiYh1ODHzj3aRSB+AQzmRLr1
b/27YH+Badj/i8wV1eZrcBLZqqOhm72B1HZLMqddPnmWIIyPvHXKet0IhU1jWhJh
THhjuxlRsqQHRdvvrguBBI4TvlZV9hndQf+8Kkx5EgkRE307y5xd3mL3o0cVzE8i
SXkPHgDmlPqQeDCPyYgli+SaFZrJLuGXIZg79fNM99cm2eS6
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:46:30 2025 by rpki-client