Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          UQzR4fLV3/mdcGTFzizfVEceoIUIfUE8Ep1Y9vdvv2Y=
Subject key identifier:   D1:20:0B:84:CE:6A:A1:B1:76:8B:49:E6:A8:5D:F1:A8:0B:CB:99:AB
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       440D7B8C7901A4AF2A2989E3871B6484014E13C5
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e2f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0d:7b:8c:79:01:a4:af:2a:29:89:e3:87:1b:64:84:01:4e:13:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=D1200B84CE6AA1B1768B49E6A85DF1A80BCB99AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:4e:4a:c1:a4:24:34:b5:81:d5:67:f9:4d:
                    ad:8a:0a:27:8b:b8:45:f5:44:e6:d4:47:5c:6e:bc:
                    d5:19:13:ac:c2:f2:3f:03:95:de:c6:42:5f:fb:43:
                    62:a2:33:ce:72:91:f9:f0:35:87:d4:81:12:4e:47:
                    1f:c0:45:fd:c0:03:fd:83:63:3b:ef:35:75:b3:2b:
                    0c:4c:1e:9c:f2:a8:4f:f2:95:cb:fb:0d:18:f9:54:
                    15:ef:a2:66:9e:a6:07:0d:6e:39:fd:8b:4e:5a:82:
                    94:fb:65:86:38:74:0c:94:30:c0:ca:c4:31:57:a9:
                    df:85:ec:37:1b:cc:57:6c:39:83:ef:d2:0b:a8:10:
                    f4:db:6a:53:a9:e4:5c:3d:bb:cb:2b:37:06:b3:3d:
                    70:b1:06:88:39:0d:0a:fd:c4:36:11:17:71:0e:6d:
                    97:59:51:77:92:94:45:c1:f0:94:eb:0d:f2:80:20:
                    dc:49:8b:36:ed:cd:c9:a1:90:78:47:b7:e0:11:5e:
                    02:62:ba:80:98:55:67:fe:8d:0b:cd:66:9d:10:1d:
                    62:ab:8e:af:5f:a9:d8:98:12:60:7b:c1:7d:45:b7:
                    bc:3f:ec:ba:a8:6e:3c:6b:2d:27:69:b7:fe:c1:2b:
                    6e:fc:cd:2d:a2:44:16:91:76:46:5e:db:01:7e:97:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:20:0B:84:CE:6A:A1:B1:76:8B:49:E6:A8:5D:F1:A8:0B:CB:99:AB
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653266393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e2f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:fd:0e:ba:5f:e0:0d:77:cc:87:75:1e:99:08:cc:b1:a3:
         30:47:62:58:54:b8:ab:54:f4:59:5e:de:33:78:1a:a4:bf:f3:
         d8:bc:9d:3b:72:df:e3:f3:90:24:0a:f1:8c:6a:70:f5:67:26:
         c0:47:04:e5:c6:07:d0:bb:3f:65:0d:78:97:d0:3a:ee:5f:1e:
         fd:b4:c1:ad:b4:b6:1e:d2:15:bf:7d:04:0d:43:ba:82:4b:05:
         80:72:b2:ec:bd:0a:47:22:52:45:ae:da:3a:f7:a1:ad:d8:5e:
         01:da:e0:34:04:22:47:33:8a:da:15:99:91:00:40:ba:a2:74:
         91:43:ef:9c:6f:2e:5a:92:fd:de:e1:d5:a8:4d:85:09:9d:8f:
         e7:1f:7d:3f:e6:96:9a:d4:f5:bf:f5:15:6f:3b:ff:85:62:79:
         c5:a2:1d:a9:58:3d:ec:8e:e3:d5:60:ef:45:97:e9:56:10:01:
         c9:ec:3d:ed:64:c4:ec:a8:23:fc:ac:fe:e8:9d:1f:27:19:da:
         3b:12:d1:78:59:7a:01:d2:01:98:e9:08:f6:b2:72:f1:b2:e1:
         8d:99:d9:87:6f:7d:6e:58:cd:51:3c:45:95:49:a3:66:4e:da:
         03:64:c7:2a:c1:07:c0:24:90:d4:8d:1f:ea:8c:d4:48:59:68:
         eb:ca:e4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:36 2026 by rpki-client