Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          35CWsW4Rmo2dQ5gHI+z0Wi2SQH/vpu3DgOSgC+eiblE=
Subject key identifier:   74:48:A4:8A:41:5F:7D:F2:9D:30:ED:26:CF:E4:57:FA:B8:83:11:EC
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       7C45A72FEE3B0D053E6338A9ED64ED18C7CEAF6C
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:47 +0000
ROA not before:           Fri 04 Jul 2025 00:42:47 +0000
ROA not after:            Fri 03 Jul 2026 00:47:47 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fc5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:45:a7:2f:ee:3b:0d:05:3e:63:38:a9:ed:64:ed:18:c7:ce:af:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:47 2025 GMT
            Not After : Jul  3 00:47:47 2026 GMT
        Subject: CN=7448A48A415F7DF29D30ED26CFE457FAB88311EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:aa:28:e2:9e:92:b7:33:a4:6c:8d:8c:ac:
                    21:bf:d6:a9:27:20:46:be:b1:be:71:46:9d:6d:d9:
                    0f:c2:cf:b2:8a:b1:c2:7f:16:20:e5:bb:95:52:47:
                    60:ab:fc:58:60:69:13:5d:f0:0a:f8:90:08:8e:37:
                    ef:b8:0f:69:fd:74:a8:d8:4e:3d:be:7b:ff:8d:60:
                    0f:3d:93:98:a3:6c:22:2e:e1:76:32:f0:ad:52:e4:
                    10:46:78:f5:92:c0:59:85:87:f8:e9:87:06:11:c2:
                    90:34:fd:50:38:16:1a:5f:83:d6:a4:57:f1:68:fb:
                    5f:a0:6f:bd:3d:69:e3:fe:e8:4d:3c:ec:91:aa:22:
                    64:38:49:f3:65:fc:14:16:e7:ea:a9:46:ed:69:8c:
                    ce:d4:88:66:6d:5b:9a:7d:a5:31:44:32:f3:71:79:
                    23:d2:f2:3b:20:19:ff:da:41:aa:ed:fa:e0:e9:79:
                    2b:7c:d0:b1:4b:a1:77:db:eb:c5:af:4b:f5:4b:4d:
                    82:dc:b1:48:ae:8f:2f:50:f5:e4:67:fb:f0:f0:93:
                    dd:40:ef:08:54:51:31:b6:a9:b6:c0:78:a6:38:48:
                    5d:d6:af:92:e6:9b:75:87:51:e8:33:d2:46:cc:ed:
                    5c:24:fa:d2:c6:f8:ac:85:f3:a5:e9:05:68:bd:bc:
                    25:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:48:A4:8A:41:5F:7D:F2:9D:30:ED:26:CF:E4:57:FA:B8:83:11:EC
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fc5c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:cf:81:1e:9b:2e:8b:be:a6:41:65:97:e9:bc:7b:1a:30:a9:
         d1:e1:cc:ec:58:c8:19:33:1f:08:d0:5b:dc:32:de:3d:4d:2d:
         45:8d:fc:51:24:f3:3f:1a:96:60:ca:b3:12:27:0a:ed:4e:3c:
         ee:a7:fd:84:e8:86:0a:9f:e3:85:ce:c1:92:ef:11:f9:1d:0b:
         25:27:f0:15:cf:c2:c4:20:d6:51:80:fe:15:9c:72:55:20:ed:
         eb:63:ba:04:95:d2:5d:f0:d9:01:46:18:3d:41:99:85:9f:32:
         af:fd:84:6f:39:29:be:d0:b6:59:20:0b:70:67:81:74:9e:2b:
         d4:3c:bb:1d:35:59:8a:5b:be:58:9f:04:62:1e:f7:3f:32:ff:
         cf:e1:f2:c1:b8:88:26:19:b4:f8:a6:db:dd:a2:4b:95:f2:8a:
         0d:47:62:14:7a:06:46:07:c7:c1:e5:3f:2a:e1:f2:14:ab:72:
         4a:ae:b3:c2:6f:48:28:b4:5f:d3:a7:cb:2b:83:61:e1:9f:b6:
         20:4d:73:30:8a:79:3e:70:30:12:22:37:64:53:e5:d9:44:07:
         c0:1b:d0:4a:20:e2:95:6c:2a:b2:dc:22:a6:be:dd:25:4e:5d:
         07:f4:e4:b0:82:c5:d7:33:a5:2b:17:c7:31:55:56:34:28:31:
         b6:62:b8:a5
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUfEWnL+47DQU+Yzip7WTtGMfOr2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDdaFw0yNjA3MDMwMDQ3NDdaMDMxMTAvBgNV
BAMTKDc0NDhBNDhBNDE1RjdERjI5RDMwRUQyNkNGRTQ1N0ZBQjg4MzExRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwV6oo4p6StzOkbI2MrCG/1qkn
IEa+sb5xRp1t2Q/Cz7KKscJ/FiDlu5VSR2Cr/FhgaRNd8Ar4kAiON++4D2n9dKjY
Tj2+e/+NYA89k5ijbCIu4XYy8K1S5BBGePWSwFmFh/jphwYRwpA0/VA4Fhpfg9ak
V/Fo+1+gb709aeP+6E087JGqImQ4SfNl/BQW5+qpRu1pjM7UiGZtW5p9pTFEMvNx
eSPS8jsgGf/aQart+uDpeSt80LFLoXfb68WvS/VLTYLcsUiujy9Q9eRn+/Dwk91A
7whUUTG2qbbAeKY4SF3Wr5Lmm3WHUegz0kbM7Vwk+tLG+KyF86XpBWi9vCV/AgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUdEikikFfffKdMO0mz+RX+riDEewwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjMzNTYzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/xc
MA0GCSqGSIb3DQEBCwUAA4IBAQA6z4Eemy6LvqZBZZfpvHsaMKnR4czsWMgZMx8I
0FvcMt49TS1FjfxRJPM/GpZgyrMSJwrtTjzup/2E6IYKn+OFzsGS7xH5HQslJ/AV
z8LEINZRgP4VnHJVIO3rY7oEldJd8NkBRhg9QZmFnzKv/YRvOSm+0LZZIAtwZ4F0
nivUPLsdNVmKW75YnwRiHvc/Mv/P4fLBuIgmGbT4ptvdokuV8ooNR2IUegZGB8fB
5T8q4fIUq3JKrrPCb0gotF/Tp8srg2Hhn7YgTXMwink+cDASIjdkU+XZRAfAG9BK
IOKVbCqy3CKmvt0lTl0H9OSwgsXXM6UrF8cxVVY0KDG2Yril
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:45 2025 by rpki-client