Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666564343a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666564343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          lMGIDs0S2YNltITpdfAmTD05XHRck3PJNb7wrRGEII4=
Subject key identifier:   01:E9:EA:01:01:B3:7C:D4:3F:5A:33:0C:28:02:BC:18:65:F8:C7:4E
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       69E65E9335C7AF014C61B48D142FD9F237035360
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666564343a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:45 +0000
ROA not before:           Fri 04 Jul 2025 00:42:45 +0000
ROA not after:            Fri 03 Jul 2026 00:47:45 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fed4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e6:5e:93:35:c7:af:01:4c:61:b4:8d:14:2f:d9:f2:37:03:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:45 2025 GMT
            Not After : Jul  3 00:47:45 2026 GMT
        Subject: CN=01E9EA0101B37CD43F5A330C2802BC1865F8C74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:b3:a3:f1:eb:98:a9:36:5e:fa:9d:e1:e2:
                    9d:02:d3:4e:bb:83:a4:71:fb:65:37:9c:e2:92:2d:
                    e5:6d:7a:a7:92:59:a3:09:51:52:f2:c5:d4:fb:6e:
                    60:e2:20:6a:04:7d:78:34:79:e1:aa:6b:83:0e:bc:
                    b4:61:f7:0c:6d:fd:c9:9c:0b:94:21:7a:16:f5:e7:
                    22:e6:a1:ac:39:5e:08:d6:a2:42:9a:a2:9d:10:58:
                    78:06:58:c5:63:79:c4:55:5f:00:48:af:7d:4c:d3:
                    fa:7a:07:f8:2e:d8:d0:27:e7:71:8f:1f:fc:6e:33:
                    76:d4:94:d2:bd:fa:c6:a4:95:21:3f:6d:dd:c7:b5:
                    05:65:91:e8:f5:49:c8:ec:d6:2a:06:12:e0:cf:28:
                    a9:0c:07:0d:b2:0b:15:bb:0e:83:44:11:50:80:0e:
                    0a:dc:bc:39:52:d7:29:a5:16:c3:fe:43:5d:aa:42:
                    31:0b:05:e3:74:f6:75:d2:9a:4b:3d:78:09:e9:73:
                    0e:42:c5:43:95:79:e8:65:82:fc:a0:3d:ba:b8:e2:
                    30:b9:ac:bd:b1:98:98:96:af:eb:8d:f8:1e:e6:3d:
                    c7:bc:d9:ae:79:ec:5c:39:70:41:09:a2:65:d0:99:
                    45:36:c5:2c:12:ac:8b:5d:c7:55:ff:7c:6a:a9:c3:
                    a2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E9:EA:01:01:B3:7C:D4:3F:5A:33:0C:28:02:BC:18:65:F8:C7:4E
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666564343a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fed4::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:10:87:4f:14:37:17:78:9b:bd:65:a3:34:2d:de:98:55:a6:
         8d:e2:c0:da:b5:82:ab:42:38:aa:fd:e2:66:54:62:74:43:0f:
         c9:ef:f2:0c:12:c8:dc:f9:c6:4e:f7:3f:da:15:bd:0e:b6:4e:
         27:14:18:ce:fc:7d:da:7e:74:2d:17:63:84:00:8f:2f:22:70:
         bd:c4:d7:c7:92:59:e3:71:19:0f:98:37:9d:a6:22:79:17:3a:
         1a:58:05:7d:7b:e2:d7:f5:11:c6:e3:86:3c:52:a4:6b:84:25:
         1d:03:e8:78:8f:b6:00:cf:ef:93:ea:05:f1:30:79:12:f6:cf:
         9d:90:7b:2a:fc:24:f0:ad:8f:89:37:8e:be:0d:27:dd:ea:3c:
         d9:e3:73:1b:55:12:63:49:3a:d7:7f:10:57:08:42:f6:17:81:
         93:c9:c6:46:f1:00:a5:49:18:3d:a1:b8:ef:c8:9f:c3:c2:72:
         b0:5e:ac:66:9d:7d:a5:ec:f6:2c:a9:5f:d7:9c:5d:55:af:a9:
         6b:5d:66:91:9f:ce:17:55:96:18:ae:49:2a:9b:08:35:01:e3:
         e5:09:63:70:fc:d1:92:9d:e9:07:ac:f7:08:c2:d4:2f:ef:90:
         08:16:bd:05:29:1b:39:c6:61:79:0e:ba:fb:f6:86:62:88:9d:
         e1:a1:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:19:23 2025 by rpki-client