Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          nWcLdurfZmgChk6r07NDZ8nFm4kH3gXdwgvytWj/MII=
Subject key identifier:   57:9B:26:19:2B:A4:37:74:82:B1:5C:A4:D8:0D:B4:79:46:6D:DA:89
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       59624B8C29D967BCC4FBEEB27CE04E16D2885F28
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:25 +0000
ROA not before:           Fri 05 Jun 2026 01:01:25 +0000
ROA not after:            Fri 04 Jun 2027 01:06:25 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e227::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:62:4b:8c:29:d9:67:bc:c4:fb:ee:b2:7c:e0:4e:16:d2:88:5f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:25 2026 GMT
            Not After : Jun  4 01:06:25 2027 GMT
        Subject: CN=579B26192BA4377482B15CA4D80DB479466DDA89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:9d:b7:a5:f5:00:fe:fb:3f:89:ee:08:0e:
                    f9:14:2d:4d:04:53:f7:d1:4e:1b:f1:b2:89:72:d1:
                    0e:ec:fa:4f:ce:3a:93:d6:0e:23:a1:7c:1b:a7:8f:
                    ec:5f:2e:83:96:73:25:a3:b7:2f:7d:e1:19:a6:78:
                    ad:20:3a:9d:2f:7d:7f:48:42:e8:8d:71:ca:d5:9a:
                    90:9c:df:9e:51:b4:d9:02:b8:50:7a:cb:62:04:b9:
                    af:ae:9e:28:6a:cd:e5:97:d6:b6:82:12:b1:ee:8d:
                    db:2d:23:2b:d0:37:eb:97:4a:eb:5a:21:93:de:50:
                    a3:9a:e2:2f:a8:51:fe:b5:f8:dd:97:df:84:0b:01:
                    7c:10:b9:00:5e:47:d2:d0:a6:f3:e5:fb:0c:c9:45:
                    17:8a:c5:27:8f:92:10:3f:44:a0:b2:48:23:6e:65:
                    b4:99:3a:6a:23:8d:a0:0d:95:9e:9f:09:2a:21:de:
                    3d:e0:d9:e2:e3:9a:d4:33:0b:91:6c:a6:e1:e0:50:
                    85:b6:7f:5a:dd:85:e9:6d:23:0d:3b:22:19:69:c2:
                    b1:64:b8:cf:a7:a1:55:4e:22:ec:b6:b5:78:f1:c5:
                    f0:c0:aa:b2:31:f5:e7:dc:41:ec:60:41:fb:95:dd:
                    14:44:4c:77:45:53:d3:20:09:30:b4:be:85:b3:d8:
                    25:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9B:26:19:2B:A4:37:74:82:B1:5C:A4:D8:0D:B4:79:46:6D:DA:89
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e227::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:59:51:91:f9:e3:a0:fc:4d:c8:0c:ab:22:d3:cf:46:b9:b7:
         8a:a8:c7:a9:74:36:1f:f3:c3:a9:06:ca:76:1f:f5:0c:5b:3a:
         f5:e1:1f:a1:f3:41:bf:91:fe:46:26:44:38:30:a6:1e:b0:b7:
         0e:78:59:8e:5d:cc:78:80:5c:a6:a6:ff:17:c7:ef:90:45:89:
         b3:b0:56:db:a2:02:e5:7c:33:fb:7a:4a:e2:c8:3f:6c:0d:62:
         e8:65:23:e3:7f:3b:5d:a4:0e:4a:28:c2:00:28:83:0e:98:cb:
         2b:ec:87:d6:01:55:10:9c:2b:8a:e8:0b:c8:68:35:af:ef:af:
         da:4d:bc:85:aa:c4:19:21:2c:8c:56:e3:38:36:e1:f9:65:5e:
         7f:dd:8e:87:c7:fd:bf:20:2c:4d:07:cb:c2:05:f8:b5:0a:77:
         1c:ac:64:de:12:7d:da:8b:c8:fb:c3:de:c2:1f:b4:b9:3e:00:
         08:60:4c:46:ca:7c:a1:a5:9b:1e:1e:c5:de:b3:f2:2f:02:79:
         a4:a7:35:bd:47:e0:d8:4e:4b:20:92:e2:0f:11:03:74:0c:cb:
         80:b8:45:92:84:fd:17:ef:fa:d2:38:d7:c0:40:4d:93:e0:91:
         94:63:ca:1c:73:58:5f:8c:c0:a2:5e:ca:37:b7:89:c9:09:db:
         ef:95:72:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:21 2026 by rpki-client