Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          WA0J/D24EMSj8fhZwerVVxq797ZVkee0ctExf7rsaC8=
Subject key identifier:   98:2B:4B:B9:C1:FE:A8:21:68:B4:05:9D:A5:2A:41:EE:F0:4E:02:3F
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       080BBA043A71E14F5BAE31467C06153BC48C44AB
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:27 +0000
ROA not before:           Fri 05 Jun 2026 01:01:27 +0000
ROA not after:            Fri 04 Jun 2027 01:06:27 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e18b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0b:ba:04:3a:71:e1:4f:5b:ae:31:46:7c:06:15:3b:c4:8c:44:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:27 2026 GMT
            Not After : Jun  4 01:06:27 2027 GMT
        Subject: CN=982B4BB9C1FEA82168B4059DA52A41EEF04E023F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:8d:b1:31:56:36:49:cc:9f:30:ab:ad:16:
                    8b:53:cd:65:fb:fa:7a:a5:4d:15:70:b1:60:a5:3f:
                    db:58:2f:d4:1e:9b:17:75:46:78:ee:a2:66:3b:b8:
                    48:df:d0:f2:22:bb:61:94:f1:25:de:c9:9b:df:43:
                    6a:de:90:96:6e:b0:11:4d:c9:a8:34:79:01:a1:e9:
                    d1:45:92:a2:97:59:ef:74:00:45:80:d8:47:ec:3a:
                    d3:09:8e:9c:0b:ef:6d:02:47:28:c0:f1:2d:19:65:
                    97:02:e1:68:bf:a8:33:22:50:93:4e:16:06:0a:be:
                    32:52:76:36:be:7c:94:26:d6:aa:cb:b6:cc:88:18:
                    f9:4b:8d:54:08:fd:89:ca:8f:8b:3b:cc:3d:08:b6:
                    5e:8f:b6:72:b2:0a:22:97:29:f9:c1:a9:97:05:a5:
                    ef:b2:fd:f8:02:a9:cb:b0:51:b0:01:2b:3c:3f:60:
                    78:80:ad:9f:b5:85:35:02:bd:a2:15:6a:31:d9:6e:
                    64:d0:3d:38:38:4e:2e:37:e6:5e:3d:f3:f3:98:e8:
                    1e:1f:e0:5b:13:7d:42:be:98:4e:2e:6f:23:20:87:
                    79:93:99:b5:c7:85:33:93:5b:ad:04:d4:71:15:e2:
                    9b:0c:1c:d1:92:3f:82:66:19:aa:a0:76:db:43:36:
                    33:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2B:4B:B9:C1:FE:A8:21:68:B4:05:9D:A5:2A:41:EE:F0:4E:02:3F
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653138623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e18b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:06:87:e5:90:94:11:4b:f2:18:e9:cd:0c:6a:4e:fd:9d:
         71:b1:2e:12:14:c0:ae:84:bf:70:b9:f5:1b:c1:74:5f:66:03:
         59:73:29:bd:20:73:9b:d6:1f:8c:58:e3:74:4f:bc:30:2c:1b:
         54:ec:0e:c5:29:e7:9d:b2:27:4b:2e:67:a4:63:b9:9a:43:ac:
         fc:35:4c:bb:90:74:4c:53:18:bb:98:1e:dc:88:9d:77:1b:81:
         f1:c6:bd:9f:19:5f:f0:c8:84:9f:1c:e5:41:d7:24:46:c0:1f:
         d0:30:29:43:22:02:e3:83:23:2b:9f:b7:42:40:ce:5b:80:e8:
         26:87:31:80:d2:46:0e:5c:4f:e2:ab:01:43:02:20:e7:08:71:
         c5:5d:44:06:f8:c9:8d:49:91:5a:5d:30:dd:02:ee:4c:ff:2d:
         0a:2d:27:18:1e:1c:69:5c:bc:ca:59:bc:45:9e:84:cb:5c:dd:
         66:60:34:58:a6:b8:21:dc:be:20:16:33:50:d3:af:74:dd:8e:
         f1:ef:83:6e:29:6b:2c:16:10:53:2a:d2:1b:eb:96:41:17:69:
         fe:19:b7:3a:6d:3b:70:71:61:a0:3e:97:41:f0:10:2d:70:cf:
         57:53:f6:37:5a:d2:a3:17:26:de:fa:07:42:e6:75:cc:11:c5:
         f8:a7:fd:a0
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUCAu6BDpx4U9brjFGfAYVO8SMRKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjdaFw0yNzA2MDQwMTA2MjdaMDMxMTAvBgNV
BAMTKDk4MkI0QkI5QzFGRUE4MjE2OEI0MDU5REE1MkE0MUVFRjA0RTAyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwY2xMVY2ScyfMKutFotTzWX7
+nqlTRVwsWClP9tYL9Qemxd1RnjuomY7uEjf0PIiu2GU8SXeyZvfQ2rekJZusBFN
yag0eQGh6dFFkqKXWe90AEWA2EfsOtMJjpwL720CRyjA8S0ZZZcC4Wi/qDMiUJNO
FgYKvjJSdja+fJQm1qrLtsyIGPlLjVQI/YnKj4s7zD0Itl6PtnKyCiKXKfnBqZcF
pe+y/fgCqcuwUbABKzw/YHiArZ+1hTUCvaIVajHZbmTQPTg4Ti435l498/OY6B4f
4FsTfUK+mE4ubyMgh3mTmbXHhTOTW60E1HEV4psMHNGSP4JmGaqgdttDNjONAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUmCtLucH+qCFotAWdpSpB7vBOAj8wHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzEzODYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+GL
MA0GCSqGSIb3DQEBCwUAA4IBAQBb/QaH5ZCUEUvyGOnNDGpO/Z1xsS4SFMCuhL9w
ufUbwXRfZgNZcym9IHOb1h+MWON0T7wwLBtU7A7FKeedsidLLmekY7maQ6z8NUy7
kHRMUxi7mB7ciJ13G4Hxxr2fGV/wyISfHOVB1yRGwB/QMClDIgLjgyMrn7dCQM5b
gOgmhzGA0kYOXE/iqwFDAiDnCHHFXUQG+MmNSZFaXTDdAu5M/y0KLScYHhxpXLzK
WbxFnoTLXN1mYDRYprgh3L4gFjNQ06903Y7x74NuKWssFhBTKtIb65ZBF2n+Gbc6
bTtwcWGgPpdB8BAtcM9XU/Y3WtKjFybe+gdC5nXMEcX4p/2g
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:23 2026 by rpki-client