Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          dn3TaMCHV7ovX2Qlo6YxrMRejHA7BYYVwEW9niBEY+4=
Subject key identifier:   A7:C7:DD:64:4C:2D:5B:D6:29:7C:5C:18:C8:E7:C9:9C:CF:02:42:66
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       3067DE06125B918081EAF0EA5A8958F7368F2DDB
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:47 +0000
ROA not before:           Fri 04 Jul 2025 00:42:47 +0000
ROA not after:            Fri 03 Jul 2026 00:47:47 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ff43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:67:de:06:12:5b:91:80:81:ea:f0:ea:5a:89:58:f7:36:8f:2d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:47 2025 GMT
            Not After : Jul  3 00:47:47 2026 GMT
        Subject: CN=A7C7DD644C2D5BD6297C5C18C8E7C99CCF024266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:c7:14:a0:65:a7:4d:03:7d:26:93:0b:26:
                    27:76:73:2f:0b:64:33:31:b0:1d:c8:1f:dc:26:b9:
                    a9:1f:3c:cb:db:01:51:bb:62:36:9a:7b:8e:c4:8b:
                    9c:30:81:b7:2c:7b:87:93:01:a2:1a:da:b7:a0:45:
                    68:a7:12:25:39:9e:e4:6d:e5:14:af:e7:e0:f7:72:
                    ad:75:2e:08:1c:76:de:b7:06:7e:7a:2f:c3:cb:27:
                    3c:2c:df:88:03:d1:f5:b9:63:b7:2b:8e:70:fa:f4:
                    22:67:f9:aa:1b:d9:2a:bf:a3:16:87:00:b3:3c:ad:
                    15:5e:51:59:dc:c4:0a:a2:ae:08:32:b3:32:ea:08:
                    f6:43:c2:c7:a0:ac:d9:e5:4b:d5:f5:0a:ee:dd:43:
                    46:e3:30:c4:62:21:37:19:0c:19:15:6d:da:bb:4a:
                    67:56:a3:51:5b:29:88:4a:05:cd:4c:92:4b:f4:a4:
                    7e:24:b8:c5:f8:26:4c:49:aa:a2:52:2d:e8:fa:c5:
                    ac:82:d3:a6:44:66:b9:4b:4b:78:ab:01:a7:12:b5:
                    7e:a8:59:41:c9:b5:cd:87:20:1e:49:28:82:f6:a3:
                    60:5a:d5:7b:c5:17:aa:db:30:e1:23:41:0a:08:c1:
                    c2:88:94:5c:fb:d2:57:01:c6:bf:2c:9d:b6:1f:92:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:DD:64:4C:2D:5B:D6:29:7C:5C:18:C8:E7:C9:9C:CF:02:42:66
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ff43::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:87:2d:81:d9:85:c5:37:89:87:fa:49:07:9a:03:c1:b8:e4:
         80:fe:f1:e1:32:4f:72:57:86:38:d3:ff:77:25:2b:58:19:d1:
         7d:dc:e6:06:bc:54:0a:89:bf:70:b0:53:2b:24:24:22:c1:e0:
         3e:69:0f:45:14:cf:ec:05:1c:1f:e0:01:2d:af:80:f5:94:52:
         33:de:f4:74:af:3f:a9:59:71:2c:5c:2e:21:77:c9:b0:12:62:
         f3:9f:4c:f6:da:5c:b9:87:96:ef:0b:2b:5f:01:16:c1:40:9d:
         b8:ee:c8:4e:50:f0:6f:9e:de:f7:6a:46:34:23:f4:c0:d6:01:
         dd:65:da:6b:83:7f:0c:50:d2:3b:88:5d:87:42:c5:67:d5:f5:
         23:8e:82:aa:6b:9f:d5:03:98:04:0b:26:14:77:2e:21:c7:e6:
         24:c8:1b:34:cd:33:66:25:c3:22:f9:78:99:3e:4a:8a:08:dc:
         22:e2:4c:0f:51:c0:9b:2f:53:9c:ca:70:6c:ee:91:ce:e3:bd:
         db:41:6a:25:db:60:42:d7:53:d1:2e:ff:60:ea:b5:3a:da:83:
         a7:dc:22:f5:e6:71:54:f9:1a:b4:9d:0c:6c:37:87:df:38:4b:
         73:c8:da:1e:85:1e:ec:8a:a8:b3:96:a8:41:4d:dc:92:c5:6b:
         6d:0f:be:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:02:02 2025 by rpki-client