Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          6s2DkoojltKqiQeg2mkVwLGRiXWrLKAZaEd99OmS1w8=
Subject key identifier:   60:CF:6C:D2:77:19:13:F3:59:A8:C7:B9:FD:5F:80:83:3F:89:CC:A0
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       28A61477F08C8752959C4BCEE07A0E17BB8B91F8
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:44 +0000
ROA not before:           Fri 04 Jul 2025 00:42:44 +0000
ROA not after:            Fri 03 Jul 2026 00:47:44 +0000
asID:                     396968
IP address blocks:        2a0f:6287:feff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a6:14:77:f0:8c:87:52:95:9c:4b:ce:e0:7a:0e:17:bb:8b:91:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:44 2025 GMT
            Not After : Jul  3 00:47:44 2026 GMT
        Subject: CN=60CF6CD2771913F359A8C7B9FD5F80833F89CCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:5b:64:61:af:1f:b9:42:1a:77:fd:2e:00:
                    3e:b9:1c:1e:81:55:45:84:a7:4a:a8:ea:1c:bd:bf:
                    c7:b4:34:95:6d:8a:31:d7:6d:85:ac:a2:a9:93:c8:
                    6b:11:61:f3:4e:27:e1:56:60:e2:2a:cf:01:10:c1:
                    8e:a1:ed:26:6b:bc:2a:6b:f5:b2:82:1e:d2:f3:40:
                    6e:e6:50:74:b7:14:5b:3f:db:80:d1:19:81:5a:2e:
                    8a:cb:5f:95:74:53:54:f2:1d:c4:b2:f4:df:09:12:
                    4a:1c:08:3c:e0:b0:f5:61:cd:81:27:a2:15:41:95:
                    33:94:88:6c:41:27:71:d1:86:ec:9e:98:90:93:7a:
                    ce:9b:b8:38:58:73:04:08:eb:13:b7:3e:b9:57:d3:
                    4e:56:65:4f:93:7f:4c:6f:16:01:a3:44:16:55:73:
                    4e:af:8e:6c:96:ae:a4:f8:ad:21:8f:41:40:7d:3c:
                    af:a3:c0:f5:b0:a5:08:9b:96:d9:7d:64:13:dc:0e:
                    c7:76:af:d9:d5:21:29:3c:1e:8d:4e:52:82:3c:c3:
                    bc:55:d6:77:44:46:69:72:6f:d3:04:c4:70:04:ea:
                    9a:a8:e6:d3:bf:0e:b3:fa:ff:22:02:6d:20:f0:98:
                    f9:96:b2:6a:ff:cb:df:5e:35:b5:8e:6d:8d:d7:23:
                    da:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CF:6C:D2:77:19:13:F3:59:A8:C7:B9:FD:5F:80:83:3F:89:CC:A0
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:feff::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:44:24:68:82:83:e9:51:54:51:66:fd:6e:c0:f0:f8:6a:
         87:37:e9:1b:89:60:5c:e5:3e:b7:3e:0d:4d:50:c9:32:da:e1:
         55:a6:c6:20:e4:51:25:d0:b4:a6:fc:2c:b8:8b:50:98:01:ba:
         d9:dd:40:cb:11:67:e4:64:6f:dc:47:56:d8:d9:70:80:7f:aa:
         0d:2e:57:23:09:1f:d8:08:78:96:e5:a2:65:02:e4:e5:e7:28:
         f5:23:fc:73:ef:7b:c0:a9:9b:c3:83:53:7c:50:3c:33:4f:db:
         f0:43:34:8d:5d:e1:cd:31:b8:c4:07:38:9d:47:42:f8:d8:da:
         4c:32:45:95:87:9e:a6:18:f6:14:09:02:66:8b:08:ee:a4:ca:
         8a:96:3a:e2:62:ef:bc:44:cd:1b:7d:f5:f5:19:77:e6:19:bd:
         84:e2:1c:2f:7d:f0:43:f5:17:6e:f9:93:b3:18:1c:9d:e5:18:
         fc:d4:5e:ef:12:4d:2a:3f:e8:b4:1a:09:ee:71:aa:64:f1:f3:
         7c:86:27:78:8e:a6:eb:2f:16:93:63:2a:ae:0b:20:d7:a2:89:
         56:e0:8a:d0:42:b7:41:e1:e4:b3:c8:80:c5:6d:5e:dd:6f:8a:
         6d:99:0e:1e:ac:17:71:a4:57:c5:51:58:fa:d3:85:f9:38:fa:
         e9:09:a6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:43:20 2025 by rpki-client