Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666366323a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666366323a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          nUbMQpymnzzMlmrABxp76N73qUQZD+1eSUNzSeSLjYk=
Subject key identifier:   79:9D:D5:42:71:74:5D:81:7E:81:01:BB:66:9E:58:6F:3A:54:8C:20
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       22BF859495294AC7A3CED5442E692B6741ED2A6E
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666366323a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fcf2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:bf:85:94:95:29:4a:c7:a3:ce:d5:44:2e:69:2b:67:41:ed:2a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=799DD54271745D817E8101BB669E586F3A548C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:fe:0b:3b:61:12:f2:9a:2d:9a:34:fd:7c:
                    48:bb:bc:ca:d9:c4:38:9d:74:fd:c7:c3:a0:16:d2:
                    2e:72:cd:5f:de:89:d3:64:52:1b:a1:4e:3b:db:6e:
                    1e:81:2d:dc:fe:ac:35:2c:14:d9:eb:4d:c9:5e:0e:
                    74:a4:d9:57:6a:eb:15:f0:53:69:00:27:d8:25:53:
                    60:a7:2f:d6:c4:1a:53:45:f0:87:29:8b:b3:7a:6d:
                    af:52:d6:1d:97:51:f6:b2:7b:33:80:3d:1b:e9:76:
                    12:61:85:c0:08:1a:4d:8a:40:ad:bf:7f:f5:50:65:
                    df:5e:06:4b:15:b2:9c:36:88:a8:88:65:63:50:97:
                    23:35:49:2a:e2:49:cc:1a:47:53:13:3a:90:7a:90:
                    96:f4:99:f1:7f:10:1f:51:5f:d8:93:94:d2:c6:1e:
                    16:3e:43:68:ed:58:7c:db:ce:11:1f:49:67:27:9b:
                    7a:93:04:6c:31:cc:a3:f2:29:44:cd:b1:a4:26:0b:
                    57:e4:23:42:fb:f5:ce:50:86:c1:65:40:c9:8b:95:
                    31:54:82:5f:d0:a3:ab:90:a3:bc:9b:31:2d:92:44:
                    84:23:ae:ca:6b:5e:9a:e3:33:89:6c:25:07:be:39:
                    73:96:1a:88:a2:64:58:2d:aa:0a:b5:a0:1f:cc:b8:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9D:D5:42:71:74:5D:81:7E:81:01:BB:66:9E:58:6F:3A:54:8C:20
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666366323a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fcf2::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:32:53:df:85:32:dd:21:62:53:80:41:b3:4b:bb:d6:85:
         0d:13:98:a0:4d:dd:17:87:7e:38:3f:4d:81:0a:ad:33:17:38:
         4f:ad:45:c2:9a:68:5b:a4:97:ec:d0:79:e9:25:78:15:31:66:
         a6:85:77:1e:cd:3f:55:54:e5:52:f2:a3:42:24:1e:c8:8f:62:
         7c:20:2f:35:c2:ce:b9:a3:c6:e2:30:0a:5f:53:dd:3b:47:17:
         1b:db:72:f6:db:24:66:d1:e6:5d:e2:e5:59:14:1a:af:83:42:
         34:9d:ff:b6:e9:c2:61:fc:c2:be:44:04:28:7a:85:01:30:63:
         7c:ee:18:ca:f7:d0:b5:4c:9b:28:82:3e:4e:0a:c3:97:35:5b:
         f2:45:45:f0:ee:68:6c:02:e1:32:ca:7a:1b:92:e3:a1:e2:84:
         9d:21:fe:4f:9f:19:54:e9:e8:eb:6b:81:05:aa:f8:5f:47:5e:
         bf:03:d4:61:5c:76:ed:86:c5:41:c1:5a:7a:64:4a:9b:a0:18:
         18:cb:2f:38:bd:2c:81:4d:35:b6:49:b5:c1:e5:e9:df:2a:bc:
         43:89:00:ae:9e:88:5f:88:31:19:27:0c:64:1e:42:6f:e2:50:
         1b:15:1d:94:e9:6e:80:f4:5d:71:3b:06:6c:ba:76:b0:2e:28:
         24:70:eb:bf
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUIr+FlJUpSsejztVELmkrZ0HtKm4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDVaFw0yNjA3MDMwMDQ3NDVaMDMxMTAvBgNV
BAMTKDc5OURENTQyNzE3NDVEODE3RTgxMDFCQjY2OUU1ODZGM0E1NDhDMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD5P4LO2ES8potmjT9fEi7vMrZ
xDiddP3Hw6AW0i5yzV/eidNkUhuhTjvbbh6BLdz+rDUsFNnrTcleDnSk2Vdq6xXw
U2kAJ9glU2CnL9bEGlNF8Icpi7N6ba9S1h2XUfayezOAPRvpdhJhhcAIGk2KQK2/
f/VQZd9eBksVspw2iKiIZWNQlyM1SSriScwaR1MTOpB6kJb0mfF/EB9RX9iTlNLG
HhY+Q2jtWHzbzhEfSWcnm3qTBGwxzKPyKUTNsaQmC1fkI0L79c5QhsFlQMmLlTFU
gl/Qo6uQo7ybMS2SRIQjrsprXprjM4lsJQe+OXOWGoiiZFgtqgq1oB/MuNHFAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUeZ3VQnF0XYF+gQG7Zp5YbzpUjCAwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjM2NjMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/zy
MA0GCSqGSIb3DQEBCwUAA4IBAQAQrjJT34Uy3SFiU4BBs0u71oUNE5igTd0Xh344
P02BCq0zFzhPrUXCmmhbpJfs0HnpJXgVMWamhXcezT9VVOVS8qNCJB7Ij2J8IC81
ws65o8biMApfU907Rxcb23L22yRm0eZd4uVZFBqvg0I0nf+26cJh/MK+RAQoeoUB
MGN87hjK99C1TJsogj5OCsOXNVvyRUXw7mhsAuEyynobkuOh4oSdIf5PnxlU6ejr
a4EFqvhfR16/A9RhXHbthsVBwVp6ZEqboBgYyy84vSyBTTW2SbXB5enfKrxDiQCu
nohfiDEZJwxkHkJv4lAbFR2U6W6A9F1xOwZsunawLigkcOu/
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:18:42 2025 by rpki-client