Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          8blHsS9X0R/Ouek3qLPzYPzLz7ND+uVcfZVDGDy0VGc=
Subject key identifier:   CA:E0:B5:59:55:F8:5E:20:E5:CD:60:AB:19:02:5F:9E:00:F5:E6:D5
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       676E4B93DDDBF9FFA58D6831F189DCB7B7C73865
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 04 Jul 2025 00:47:42 +0000
ROA not before:           Fri 04 Jul 2025 00:42:42 +0000
ROA not after:            Fri 03 Jul 2026 00:47:42 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f811::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 21:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6e:4b:93:dd:db:f9:ff:a5:8d:68:31:f1:89:dc:b7:b7:c7:38:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jul  4 00:42:42 2025 GMT
            Not After : Jul  3 00:47:42 2026 GMT
        Subject: CN=CAE0B55955F85E20E5CD60AB19025F9E00F5E6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:57:10:54:b5:e4:d9:bc:64:dc:27:93:c4:
                    88:d8:4d:00:c4:91:45:45:c1:50:34:38:e4:48:f9:
                    6a:4c:06:72:1d:18:0d:89:f9:91:89:2d:2b:90:e6:
                    58:05:4b:e8:b9:a6:05:57:b7:7a:64:97:7b:d5:59:
                    82:75:ac:1c:b4:11:3d:00:ed:c1:33:9f:13:99:51:
                    13:11:e8:25:c0:ee:bc:93:5a:7c:e3:1c:01:83:16:
                    0a:81:db:32:51:94:d6:09:6a:e3:b8:e9:03:c0:61:
                    9f:de:05:2a:d4:84:bb:c8:37:33:9a:bd:01:70:fc:
                    b6:74:19:2b:50:7e:5d:32:de:24:cd:bd:b7:67:81:
                    e3:05:7b:8c:bc:a2:70:cb:85:ed:ab:89:b6:b5:85:
                    e5:57:5e:5a:d1:ed:a5:e9:fc:03:f4:f3:f2:fa:bc:
                    71:5a:bd:48:9e:94:b8:90:07:f8:97:11:e1:bb:7e:
                    51:29:9d:75:62:b9:5a:09:53:09:23:01:49:a3:4b:
                    4f:ff:c6:ce:ce:4f:80:bc:41:21:75:2e:f2:54:2b:
                    2f:4c:f0:48:ee:43:14:25:56:6c:21:e3:4c:92:da:
                    c2:5e:ae:9e:6e:a0:fb:8c:57:60:06:d2:c6:11:9f:
                    9b:c8:60:87:d5:9d:f5:13:b9:b8:15:ee:52:63:7b:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:B5:59:55:F8:5E:20:E5:CD:60:AB:19:02:5F:9E:00:F5:E6:D5
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f811::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:00:e8:5a:6e:59:fd:fa:3c:5a:6e:e3:2e:9e:dd:84:8a:fb:
         0c:0b:c9:91:31:e0:1b:c7:cd:c4:3b:69:21:c5:ad:ad:0d:57:
         e9:52:49:b5:8f:c7:00:ff:38:20:88:f3:9a:62:43:0b:da:8d:
         eb:ff:02:92:f9:f5:d9:ea:4d:01:87:3f:b9:5b:5a:d8:3f:3d:
         01:0b:9f:3c:af:2c:42:3d:63:5f:e2:b5:1b:0e:57:26:30:fa:
         fd:6d:c9:c0:f1:24:99:6e:39:05:df:49:99:83:cf:3d:88:5d:
         99:a1:6c:d8:a7:58:85:ee:99:49:62:1f:09:ee:6f:a1:f3:4c:
         28:b0:06:cc:a3:f9:bf:cf:e7:0e:49:82:81:1b:ed:e4:d6:fa:
         35:61:74:8a:08:88:68:5c:37:e4:fb:b6:02:f9:10:57:43:fe:
         1c:2b:68:20:47:f4:0b:37:70:de:9b:52:c6:d9:80:d9:b7:55:
         c1:98:6f:f0:c0:a5:15:51:13:9b:cc:60:11:ae:a2:7f:ce:ca:
         50:79:f2:b5:61:a2:8c:01:41:9c:a2:c8:ed:76:7b:a2:e8:c2:
         13:a1:36:c6:f1:99:f6:f3:e4:24:48:a4:52:93:8d:f4:91:a6:
         31:5b:fc:8a:40:d9:4d:e2:07:c8:7a:86:f1:d4:11:b1:22:55:
         f0:23:8e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:20 2025 by rpki-client