Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          B/oud1O8rKNGJgPVL8HUlVczVUV2ajJPUsYo8Touk1o=
Subject key identifier:   F3:14:7E:CF:59:BC:E0:2B:9C:F7:EE:04:9B:8E:61:31:14:B6:D4:F2
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       7171E690487D5C7648E6D730A1F350B9D9D420CC
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:24 +0000
ROA not before:           Fri 05 Jun 2026 01:01:24 +0000
ROA not after:            Fri 04 Jun 2027 01:06:24 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e153::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:71:e6:90:48:7d:5c:76:48:e6:d7:30:a1:f3:50:b9:d9:d4:20:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:24 2026 GMT
            Not After : Jun  4 01:06:24 2027 GMT
        Subject: CN=F3147ECF59BCE02B9CF7EE049B8E613114B6D4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:27:4a:0d:b9:94:e2:33:74:8f:ad:1a:6c:
                    83:06:13:c1:c8:19:6d:a1:2f:2b:c3:57:71:c1:47:
                    53:8b:db:ae:57:f1:06:7c:63:8e:79:f4:1b:2c:e9:
                    fc:47:7a:50:63:21:1e:28:9e:39:c6:a4:6d:d9:81:
                    73:03:cb:6c:80:27:0f:ae:d3:c0:a1:9e:3d:d5:9d:
                    c9:0a:55:47:59:4e:be:e3:02:3b:cf:16:bd:97:c8:
                    4b:c0:eb:20:ac:47:22:90:cd:51:36:bb:82:e6:e3:
                    b7:17:9d:2a:87:0f:1a:06:95:3f:8f:d2:f3:95:d3:
                    f3:84:7f:8d:a7:c2:85:71:b1:15:3a:95:a0:ef:f1:
                    2d:d3:2c:a0:35:70:08:ea:9b:e7:07:1e:8e:82:c5:
                    c9:0c:9f:6f:70:b3:06:a2:a3:b6:01:ab:6f:17:a2:
                    a6:94:7c:df:53:6e:f9:d6:e8:a6:a7:b2:67:0a:23:
                    3e:b7:fa:95:79:8a:75:49:6d:99:0d:f5:70:fb:d8:
                    6a:ee:29:66:bb:af:c8:5d:7d:07:bd:f9:66:c2:14:
                    a1:42:95:70:fc:78:37:de:93:13:3e:bc:af:d1:f0:
                    e4:14:43:ff:54:a5:84:ac:73:e9:54:b6:8f:bc:b7:
                    f1:bb:2a:89:b9:86:84:c3:06:95:dd:fb:c1:0c:43:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:14:7E:CF:59:BC:E0:2B:9C:F7:EE:04:9B:8E:61:31:14:B6:D4:F2
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653135333a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e153::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:b8:0f:f4:e2:22:a7:1e:1d:e5:88:66:b3:64:da:e1:4f:
         2e:cd:b3:78:2c:14:82:75:28:22:2a:ba:d6:a3:e1:a5:25:85:
         40:3a:01:55:51:68:fd:72:d7:69:9f:57:a9:ce:bb:86:2d:3e:
         f9:4e:45:c7:b8:26:1d:ef:d0:7d:c5:b6:8b:38:94:43:1d:ff:
         57:55:38:09:01:84:d9:be:91:c4:db:1d:73:88:61:2c:40:25:
         4d:c8:e8:c5:62:bc:15:34:3c:ff:4e:92:b5:43:81:9e:b7:42:
         ec:8c:db:75:cd:0f:75:18:6c:b9:9e:a5:6b:e8:c0:4d:71:34:
         ac:56:57:d5:e1:d6:81:1e:9e:17:e5:7c:21:7c:f9:42:06:ac:
         45:9a:0a:13:dd:9b:26:c2:eb:82:2a:4e:82:74:c4:bf:04:a0:
         ee:22:14:1d:14:e4:68:96:76:a2:c6:29:9d:0c:6b:c9:0b:f3:
         6f:f4:3f:6e:d8:0d:77:d0:6c:0c:79:2f:a9:9d:94:1b:2f:d0:
         fe:d9:91:1e:f1:97:f1:5e:26:63:ce:d6:c7:53:33:38:80:b9:
         c7:76:a8:f5:69:5c:64:74:d9:4d:fd:19:30:d0:01:25:f5:07:
         e2:63:40:91:fc:2a:8e:73:c7:d0:8f:9c:f2:d9:06:a5:d0:c3:
         c4:e9:e7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:03 2026 by rpki-client