Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          m2o+ms8vfjPbUAQmcmgIpIeGwjmXPhsXBxwGoCmQsko=
Subject key identifier:   B3:2A:0D:D6:D3:5F:07:44:C2:9A:59:D0:76:37:48:46:D2:E1:A1:52
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       222BD666E39C37D609F2FE64AFE832DFA7967A9C
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 04 Jul 2025 00:47:41 +0000
ROA not before:           Fri 04 Jul 2025 00:42:41 +0000
ROA not after:            Fri 03 Jul 2026 00:47:41 +0000
asID:                     16909
IP address blocks:        2a0f:6287:ffc6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2b:d6:66:e3:9c:37:d6:09:f2:fe:64:af:e8:32:df:a7:96:7a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:41 2025 GMT
            Not After : Jul  3 00:47:41 2026 GMT
        Subject: CN=B32A0DD6D35F0744C29A59D076374846D2E1A152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:05:d6:24:da:44:06:6e:fa:52:5f:c8:33:
                    b7:74:df:be:8a:90:58:16:bc:9a:a1:f4:76:0e:86:
                    f4:1d:06:32:d3:5f:e1:40:f2:10:be:04:65:eb:16:
                    26:d8:96:54:13:66:24:ce:c3:bf:d7:ec:08:d2:e6:
                    6c:5e:36:b5:3f:c4:35:3b:ce:f1:09:77:da:a1:19:
                    02:e3:09:39:4c:38:c2:1b:ec:fc:13:5d:ea:15:15:
                    25:c8:a6:e4:54:c8:c3:46:fe:d3:99:9a:d6:70:b1:
                    37:2b:dc:ed:3a:b5:25:b4:6d:41:3f:85:68:dd:7a:
                    51:30:bd:41:bf:e3:cf:3f:8d:40:9f:81:d2:d7:a7:
                    9c:7b:67:ef:59:03:f7:e1:da:10:d7:07:cb:44:37:
                    a4:14:d6:51:fa:47:6a:ac:50:b8:4a:e4:a5:a8:05:
                    3d:28:7c:e3:e3:49:cd:be:d4:85:fd:54:8b:0a:44:
                    e5:1d:76:8c:ef:a4:70:b4:56:72:e9:76:10:b0:28:
                    9f:07:b9:ea:b6:fe:76:93:31:a6:54:7e:30:ed:c8:
                    f6:3e:fb:d5:96:66:86:a0:30:2b:9c:b2:24:d9:4f:
                    c4:8e:10:70:e5:2b:61:f3:6f:ca:87:96:ec:90:0f:
                    29:66:b0:23:af:98:e8:6b:97:9a:f2:07:bc:a6:27:
                    95:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2A:0D:D6:D3:5F:07:44:C2:9A:59:D0:76:37:48:46:D2:E1:A1:52
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666663363a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ffc6::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:f5:7b:22:9d:69:1e:f0:84:c0:79:d1:4e:4c:fb:c8:e1:
         6f:6a:89:ae:b3:d4:82:64:61:a1:86:35:3f:d1:0a:63:1b:d7:
         b3:c7:2a:28:19:e1:83:45:4b:35:cb:c4:95:99:8a:79:99:3d:
         07:48:36:2f:e0:35:82:5f:fb:2c:b7:eb:09:58:5c:db:44:b5:
         f6:67:eb:bd:e5:3e:97:66:83:7c:67:8a:3f:af:3f:4c:00:d5:
         9b:4c:31:79:7a:10:48:23:0b:57:45:79:cb:d7:5d:cc:e5:72:
         4c:55:2c:e9:44:b1:c4:29:04:05:02:94:61:0a:78:f7:5a:9f:
         34:8e:80:19:56:0e:f2:1e:0b:f7:ba:f8:03:8d:db:de:ce:72:
         48:8e:c5:a2:7c:52:ea:27:06:32:80:ee:4d:a9:81:1e:40:43:
         f5:c1:58:34:c8:22:c2:02:79:ca:1b:9f:a5:b1:90:6f:d9:d5:
         54:67:31:44:d3:01:64:61:95:62:f5:78:77:65:9e:f9:5a:c8:
         d3:28:11:17:29:93:94:3b:5b:25:75:b3:7d:ed:00:0b:d8:3f:
         d5:10:97:f0:c7:9d:c6:45:39:68:9a:a6:a4:c8:cf:35:48:4b:
         f3:cc:20:24:5b:fd:2f:25:aa:9d:44:67:d2:43:2c:cd:37:b9:
         42:fe:7e:87
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUIivWZuOcN9YJ8v5kr+gy36eWepwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNTA3MDQwMDQyNDFaFw0yNjA3MDMwMDQ3NDFaMDMxMTAvBgNV
BAMTKEIzMkEwREQ2RDM1RjA3NDRDMjlBNTlEMDc2Mzc0ODQ2RDJFMUExNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46AXWJNpEBm76Ul/IM7d0376K
kFgWvJqh9HYOhvQdBjLTX+FA8hC+BGXrFibYllQTZiTOw7/X7AjS5mxeNrU/xDU7
zvEJd9qhGQLjCTlMOMIb7PwTXeoVFSXIpuRUyMNG/tOZmtZwsTcr3O06tSW0bUE/
hWjdelEwvUG/488/jUCfgdLXp5x7Z+9ZA/fh2hDXB8tEN6QU1lH6R2qsULhK5KWo
BT0ofOPjSc2+1IX9VIsKROUddozvpHC0VnLpdhCwKJ8Hueq2/naTMaZUfjDtyPY+
+9WWZoagMCucsiTZT8SOEHDlK2Hzb8qHluyQDylmsCOvmOhrl5ryB7ymJ5WVAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUsyoN1tNfB0TCmlnQdjdIRtLhoVIwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjY2MzM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPYof/xjAN
BgkqhkiG9w0BAQsFAAOCAQEAijH1eyKdaR7whMB50U5M+8jhb2qJrrPUgmRhoYY1
P9EKYxvXs8cqKBnhg0VLNcvElZmKeZk9B0g2L+A1gl/7LLfrCVhc20S19mfrveU+
l2aDfGeKP68/TADVm0wxeXoQSCMLV0V5y9ddzOVyTFUs6USxxCkEBQKUYQp491qf
NI6AGVYO8h4L97r4A43b3s5ySI7FonxS6icGMoDuTamBHkBD9cFYNMgiwgJ5yhuf
pbGQb9nVVGcxRNMBZGGVYvV4d2We+VrI0ygRFymTlDtbJXWzfe0AC9g/1RCX8Med
xkU5aJqmpMjPNUhL88wgJFv9LyWqnURn0kMszTe5Qv5+hw==
-----END CERTIFICATE-----
Generated at Fri Jul 4 23:00:48 2025 by rpki-client