Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          E5ljWL1iGZ77TGBQ7UIwrUsqPbDMTfNwLyy34plWess=
Subject key identifier:   4A:DC:68:E1:3D:24:DC:50:7C:5A:8A:72:B6:0D:D8:16:27:49:6A:C6
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       25952362F69ADA266F4D1DF60558E0BB3AA7026D
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e27a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:95:23:62:f6:9a:da:26:6f:4d:1d:f6:05:58:e0:bb:3a:a7:02:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=4ADC68E13D24DC507C5A8A72B60DD81627496AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5d:e9:c7:b3:40:97:05:b4:ba:bc:03:4e:93:
                    2d:1f:93:81:2e:92:e9:a1:7f:e2:7e:b1:59:34:cb:
                    d8:75:50:ee:d5:4c:41:bd:f8:58:0c:dd:10:35:0a:
                    0a:29:88:24:c5:bd:58:eb:29:27:0e:a4:3c:b0:58:
                    0b:a9:7a:84:7c:5b:b6:28:f7:49:98:9d:78:5a:a5:
                    68:b4:f7:a9:7d:49:e1:24:b0:a5:d4:a5:d4:ec:7a:
                    b8:11:d7:eb:67:9a:ac:74:f2:f4:aa:2c:f4:16:20:
                    eb:9d:57:f4:f3:ca:55:ba:f3:2b:6a:e1:7f:fe:da:
                    0a:dc:f0:5d:6b:94:37:8e:f5:ae:a3:4a:a7:f8:49:
                    a9:7e:6e:7a:81:cf:75:8b:73:0b:f4:93:a9:f5:61:
                    e2:8d:7b:2f:d7:d5:54:9c:fc:f2:86:35:8e:eb:73:
                    10:df:61:d7:9f:3f:a7:49:46:44:36:f2:1b:d5:c9:
                    55:9c:8b:8e:e9:73:d7:f0:aa:ec:bf:a2:0b:8e:c5:
                    28:55:17:51:30:4d:6b:45:fb:ba:da:e8:5e:27:8d:
                    a6:e8:92:d2:63:8f:61:3e:f5:ae:46:e9:3e:f5:ff:
                    6c:0f:7b:cc:07:0b:29:16:45:92:02:57:6e:92:1f:
                    d5:76:7e:7b:f9:95:8e:35:d5:21:e8:db:72:3e:f6:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DC:68:E1:3D:24:DC:50:7C:5A:8A:72:B6:0D:D8:16:27:49:6A:C6
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e27a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:3d:19:0a:ea:ea:1f:ee:d6:c7:53:42:8a:7e:e5:bb:7b:
         45:d1:bb:fb:ff:42:49:8c:8c:5e:60:1b:23:bb:03:b5:bb:1c:
         33:ba:36:56:ac:f3:85:33:6a:99:b5:90:c3:45:98:c8:40:ee:
         b1:da:02:ba:dc:61:40:18:bb:97:13:d4:89:e4:49:5e:ee:07:
         c1:1f:1e:f3:87:0d:57:59:c9:2d:9b:9d:e2:a1:29:8d:81:28:
         31:3f:0e:c8:54:b8:e5:0c:f9:d8:9d:bc:7d:d3:65:36:37:d8:
         17:0f:95:06:48:9d:52:eb:1a:46:f0:9b:80:25:c4:28:aa:92:
         42:b5:18:4d:4a:f7:27:ce:7b:58:be:ad:6c:43:a6:24:d3:91:
         a2:72:8a:23:67:2b:f3:ae:04:1f:aa:61:78:ed:50:ea:22:4f:
         5c:0a:ac:68:11:d3:f1:ac:cf:c5:bb:92:a9:25:56:a9:eb:16:
         75:f1:48:59:57:ad:da:4e:16:8d:29:95:f9:84:bb:d0:0e:ab:
         4b:0c:bd:fd:6a:35:eb:5b:89:b5:95:d7:4f:6d:bc:2a:09:a2:
         f2:3f:64:45:dd:ac:0e:14:69:50:8c:13:00:40:67:6d:2c:d6:
         f5:d9:f7:ed:4c:f9:3d:80:1a:76:21:94:fa:30:17:4b:7b:63:
         fa:1d:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:41 2026 by rpki-client