Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          4s2Utb+2CfAINlPQIxntyzVQIEE92sJ1KT5YpWI488c=
Subject key identifier:   EB:D2:0B:AB:C5:98:ED:A4:C5:80:98:ED:5C:B8:24:B8:B3:1D:FD:FB
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       6F371AF5F4421480E0079813941571B0C2EC1559
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fde7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:37:1a:f5:f4:42:14:80:e0:07:98:13:94:15:71:b0:c2:ec:15:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=EBD20BABC598EDA4C58098ED5CB824B8B31DFDFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:78:11:36:30:b7:d4:19:3a:1e:2e:bb:01:
                    7e:f8:9c:12:fd:a0:bf:55:56:c8:01:14:02:f2:66:
                    9c:07:e2:62:5b:f3:22:37:a7:f3:aa:26:9d:f2:f1:
                    43:67:83:57:37:c3:df:22:0d:9c:f9:72:96:11:34:
                    d5:a3:23:f9:6e:91:1d:97:18:92:25:7b:43:f2:84:
                    e7:e8:8a:63:0b:5c:a8:45:8c:97:83:fb:9f:8d:7d:
                    03:b6:6b:d5:36:2e:2e:69:f0:d9:a3:db:d1:36:0c:
                    9f:37:ed:9d:69:07:69:80:4d:14:85:d4:17:50:d1:
                    a6:e8:0f:64:7b:3b:a5:04:bf:31:f9:5d:47:65:cf:
                    c6:5f:39:8a:9b:5e:a6:4d:03:c0:fb:9c:d7:32:cc:
                    a2:38:48:a0:7d:57:12:98:3a:09:8b:d6:13:d3:8e:
                    f4:d4:b5:cb:14:bf:a6:8d:e6:b7:2d:45:1d:38:f4:
                    c3:a6:42:c4:d6:df:94:1e:18:4a:d9:b0:4d:30:11:
                    45:fb:19:af:fc:9f:4a:92:fe:74:42:17:8a:28:c4:
                    50:44:b2:77:9d:40:23:11:9d:ea:5e:ed:56:6f:85:
                    6a:6e:91:de:3a:8d:cc:1d:fe:87:b5:09:34:6f:36:
                    5e:8f:09:27:01:0b:ca:ae:37:e3:1b:82:ec:2c:e0:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D2:0B:AB:C5:98:ED:A4:C5:80:98:ED:5C:B8:24:B8:B3:1D:FD:FB
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666465373a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fde7::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:e6:c0:41:de:84:33:02:00:36:20:f8:c5:80:82:72:7a:
         ff:94:d8:3f:56:b2:61:87:69:19:42:60:a9:6c:ba:5e:67:e4:
         9c:b4:68:57:b0:45:24:8a:1f:dc:d8:c9:a5:46:73:14:17:c9:
         ed:c1:99:b7:4e:46:17:65:40:45:ff:d1:5a:7c:b9:3b:44:58:
         e3:45:12:53:9c:fd:9d:ea:1b:04:0d:6e:da:4c:04:dc:5c:06:
         95:7b:35:0b:55:95:27:ae:3a:79:aa:78:fa:64:0a:34:ec:c5:
         02:e0:4e:8f:92:2b:30:f0:c5:a8:91:6f:c0:b6:fb:66:d1:f0:
         4e:6f:9c:6f:e3:69:77:c6:ef:ad:0d:70:da:1b:76:f2:3f:c1:
         79:e5:67:71:7e:16:96:63:12:1f:77:1f:79:aa:da:db:7d:16:
         b2:7c:dd:06:5b:0a:fe:62:91:51:13:ca:3c:ef:20:5d:12:31:
         dc:76:0e:ca:95:37:93:30:3c:e8:c5:13:a2:c2:ac:e8:44:01:
         43:9d:27:e8:3b:e5:5a:16:14:03:1f:3f:9e:0c:0f:80:28:74:
         dd:a6:54:86:b2:73:07:b6:87:dd:71:22:52:27:a9:fc:bb:bb:
         44:f1:11:38:68:b6:80:25:b0:1a:9e:5e:40:3d:36:9b:32:e3:
         91:6b:5c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:31:27 2025 by rpki-client