Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          GUdFzp0Ngexxb7DKaGipTLe8gQB2tlWE2Tt5t3VcaDE=
Subject key identifier:   12:D1:62:A3:0F:D0:B7:53:A6:88:80:6B:29:48:C1:E3:F6:A6:F8:13
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       017CCBF7C27838BB55945469C414EBE81C7BB70B
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:20 +0000
ROA not before:           Fri 05 Jun 2026 01:01:20 +0000
ROA not after:            Fri 04 Jun 2027 01:06:20 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e169::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7c:cb:f7:c2:78:38:bb:55:94:54:69:c4:14:eb:e8:1c:7b:b7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:20 2026 GMT
            Not After : Jun  4 01:06:20 2027 GMT
        Subject: CN=12D162A30FD0B753A688806B2948C1E3F6A6F813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:69:4c:6f:9d:fc:3f:c8:2a:e8:d6:9a:ba:
                    6a:3d:3d:b8:c7:2c:99:c2:43:55:b5:72:81:a0:db:
                    24:8c:dc:30:9a:8c:b7:1f:d0:d2:81:bd:c3:c3:1f:
                    dd:dc:6e:5c:a5:77:5d:35:df:7f:69:8c:c8:8e:5e:
                    d1:4d:13:95:42:66:ec:91:28:44:d0:1d:72:c4:14:
                    43:ce:ba:54:97:5f:21:fe:00:6e:f1:55:61:5e:51:
                    7f:46:d8:d0:6a:af:bd:27:7c:d1:0c:a5:1d:87:40:
                    52:0e:e4:16:81:9f:45:1a:fc:e3:55:e5:90:55:ed:
                    03:c8:e8:a1:e4:79:c4:ba:73:33:34:3b:fb:67:8d:
                    98:c5:9e:ac:24:39:3a:60:60:aa:50:ce:49:a3:35:
                    d3:38:f7:5f:f1:71:36:fc:5d:b0:e9:14:ba:9b:06:
                    35:3f:5e:25:d6:7e:8f:00:d7:3c:76:4e:72:9a:17:
                    56:65:0a:9a:28:2b:96:81:b3:4e:78:9f:54:03:45:
                    60:2e:92:f4:68:39:15:04:f6:00:cd:fb:13:21:c3:
                    ab:6e:4c:9c:72:92:6d:f3:bd:b5:e5:a4:42:b2:06:
                    64:a5:f6:23:32:16:0c:0a:ab:32:5f:12:bd:6b:19:
                    a7:5b:d4:6e:a1:af:7e:39:36:fe:0e:e0:ca:4b:cc:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:62:A3:0F:D0:B7:53:A6:88:80:6B:29:48:C1:E3:F6:A6:F8:13
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e169::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:b4:55:bc:ef:b2:ce:66:06:fd:90:0f:3b:90:f1:a9:4c:b9:
         08:39:a3:9c:45:01:e0:de:46:79:23:36:8a:f1:af:fb:97:a9:
         1c:cb:1f:aa:6b:2b:39:ef:6a:b6:0a:fc:b9:88:47:fc:c7:92:
         2c:83:f2:2f:ba:79:af:d8:f0:d5:27:9c:3c:6b:83:4f:7c:95:
         f7:05:97:99:d8:8e:e2:74:fa:86:8f:53:5d:2d:3a:1a:69:ba:
         a2:cd:b8:09:2b:be:53:1d:6d:75:20:57:75:33:1a:a0:95:00:
         2a:ea:1e:4a:4f:e2:b7:4b:96:0b:0f:27:5c:ba:f4:2b:3c:f0:
         9e:0e:91:f2:76:05:26:46:ce:4a:f3:dd:d7:bd:9f:f5:53:b2:
         93:50:5c:c6:85:a9:ac:91:12:90:f5:f1:64:08:42:45:77:66:
         48:b1:0a:42:92:20:b5:db:5c:4c:ab:b7:89:c4:15:ad:c7:12:
         ef:74:a0:f2:f7:e3:cb:cb:37:f4:8e:da:da:c1:4c:76:1e:1d:
         ef:be:1a:7b:0a:59:c4:34:fe:70:64:3f:1b:02:d8:63:6c:65:
         22:d8:49:05:60:17:2b:e7:cb:b5:0b:8e:97:83:41:42:91:5e:
         ec:22:98:c0:c1:9b:87:27:7c:f8:1c:37:be:a2:f2:4b:c8:52:
         9f:7e:50:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:03 2026 by rpki-client