Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          jWjtHz4qrmJiuFqxbZb70ISPWQWmndOflQhx7bolXF4=
Subject key identifier:   B3:0F:60:FA:51:C1:81:D5:0A:DD:68:26:35:5A:CB:29:0F:75:88:30
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       632DD1F5207B583BFA0534B54C911E678DAE9CE6
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:43 +0000
ROA not before:           Fri 04 Jul 2025 00:42:43 +0000
ROA not after:            Fri 03 Jul 2026 00:47:43 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ffdf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2d:d1:f5:20:7b:58:3b:fa:05:34:b5:4c:91:1e:67:8d:ae:9c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:43 2025 GMT
            Not After : Jul  3 00:47:43 2026 GMT
        Subject: CN=B30F60FA51C181D50ADD6826355ACB290F758830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:1c:cb:7c:0a:78:90:df:9e:24:a2:97:2b:
                    34:6c:ed:b1:c4:4b:09:f0:c8:75:e2:cd:b6:17:6a:
                    37:7c:ec:fb:0e:c8:e3:6e:22:2a:b1:cd:15:98:50:
                    7f:47:62:49:f5:ef:c4:82:4e:f7:1f:5f:28:5c:9f:
                    30:b7:38:62:39:9f:ea:8f:12:14:62:91:56:d2:e6:
                    5a:a0:73:bd:28:49:08:6d:3a:7e:ea:19:5f:3d:ea:
                    7d:7d:26:c0:57:23:7b:f2:95:12:57:e0:76:1b:12:
                    b5:17:1a:e3:74:eb:09:5f:3d:c8:4a:da:ff:42:35:
                    d1:5c:77:60:c8:bf:19:23:49:be:d3:1d:1f:2e:c1:
                    6a:8c:3c:54:b5:43:e2:b9:41:df:5d:de:f6:6d:52:
                    37:25:86:b8:ac:de:b5:29:ff:77:c3:bf:9d:02:34:
                    ce:e2:ce:c5:ef:7c:38:92:4c:af:3e:8e:b3:fc:f9:
                    0f:38:b3:7d:08:21:d8:1c:6f:43:e3:ca:f8:75:0e:
                    41:10:76:eb:76:1c:9a:b8:b1:a6:cf:4d:47:e6:81:
                    c5:4b:47:5e:45:91:8f:80:fd:0a:9c:27:de:4d:a1:
                    9c:46:16:1a:68:53:4b:60:3c:4e:90:77:33:ae:fc:
                    ef:36:7c:21:c1:1a:18:38:cd:0a:37:7a:ce:49:8a:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0F:60:FA:51:C1:81:D5:0A:DD:68:26:35:5A:CB:29:0F:75:88:30
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ffdf::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:14:80:c3:42:20:4c:07:51:5a:72:00:f3:55:c7:fb:98:10:
         7e:68:bf:3c:8f:e9:8a:de:41:ac:35:47:df:d9:f2:05:12:64:
         aa:82:3b:91:21:89:f0:32:f0:77:25:02:03:c5:10:b4:99:e8:
         c0:41:f5:a8:2f:3f:12:7e:ff:86:0f:a8:26:12:55:bb:af:cb:
         33:99:71:4a:f2:29:1f:d5:70:74:3a:d1:46:13:e5:ae:77:34:
         fb:b6:da:4f:5d:c6:35:62:fa:61:d7:1d:9d:24:fa:83:72:24:
         59:cc:00:c7:36:b8:35:2d:ec:8e:c1:97:da:61:cb:37:f1:80:
         86:82:ba:c2:0f:30:10:77:8d:8d:ac:a0:27:f9:69:d5:84:e8:
         49:e4:19:96:52:80:cc:b9:f2:36:02:67:c3:c0:0f:e0:ca:40:
         ea:fa:97:1e:86:7a:f2:1c:22:a8:19:7c:9c:61:37:57:24:df:
         69:5d:29:1b:c3:fc:23:d8:c7:c2:89:b5:6d:2e:52:14:a0:6a:
         88:51:d4:be:62:f0:86:e9:d3:51:01:3b:35:35:2e:f0:6e:b1:
         42:23:b3:a2:6e:c6:85:d7:19:4e:74:38:e8:88:e9:d8:fb:f9:
         62:13:1e:fa:98:5c:49:21:61:10:49:72:a0:4b:dd:e9:9a:9d:
         b9:f8:fc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:57:13 2025 by rpki-client