Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          ZowCM8N0qLHfWVmgraWZ9GTBNzsEqQiwxpRhW23+J9g=
Subject key identifier:   B3:44:02:2F:E6:F6:84:C4:F1:E1:8F:6F:61:13:2E:71:BD:77:2A:2C
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       48005E5534C708E19E5D1CFE80B7FDD0E53DE6BB
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:23 +0000
ROA not before:           Fri 05 Jun 2026 01:01:23 +0000
ROA not after:            Fri 04 Jun 2027 01:06:23 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e411::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:00:5e:55:34:c7:08:e1:9e:5d:1c:fe:80:b7:fd:d0:e5:3d:e6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:23 2026 GMT
            Not After : Jun  4 01:06:23 2027 GMT
        Subject: CN=B344022FE6F684C4F1E18F6F61132E71BD772A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:a6:b8:8b:1f:fe:04:8c:cb:a5:d6:1e:cf:
                    83:87:77:6a:1f:23:1d:41:64:f2:bb:08:3e:40:80:
                    8e:df:4b:f7:29:6c:99:fe:9c:9b:39:23:c1:31:d9:
                    ff:0d:af:83:0c:a7:8b:12:e7:0c:2d:0c:6e:37:a1:
                    a8:b1:25:87:05:78:ed:e2:60:c7:6c:dc:f6:61:a0:
                    69:c2:06:c2:bb:18:12:50:62:8d:6c:ae:3a:35:b6:
                    81:1b:ee:83:1a:73:71:98:35:34:c5:ab:f3:27:e0:
                    4a:c0:10:a4:f1:77:10:2f:58:85:3f:f1:43:67:53:
                    c0:a6:5b:79:18:b3:7a:78:4a:16:b9:8e:77:57:ca:
                    ce:b9:d0:a6:6a:69:44:f6:aa:54:6b:af:cd:75:0b:
                    55:14:b7:08:5a:99:fe:9e:fb:d2:23:1e:69:17:28:
                    2b:2e:4b:7d:40:03:74:d5:84:a0:c3:b0:69:04:e1:
                    ec:52:0f:99:aa:16:c1:64:29:be:ab:50:18:73:22:
                    e2:1d:27:d5:67:69:40:16:a3:30:81:5e:63:0d:4d:
                    a1:fd:55:11:51:a7:94:ad:07:10:e5:32:9b:94:23:
                    05:c3:91:62:06:90:8d:58:5f:5f:b6:5e:45:ef:02:
                    72:49:ed:27:7b:28:27:cc:34:fd:a5:d0:3f:35:93:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:44:02:2F:E6:F6:84:C4:F1:E1:8F:6F:61:13:2E:71:BD:77:2A:2C
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653431313a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e411::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:8a:26:46:58:0a:12:fa:1e:ae:e3:b8:2d:b4:c9:c2:6d:3f:
         64:2d:5d:94:37:a7:e2:42:3e:8f:a4:3c:c1:ef:67:84:79:1f:
         10:98:db:0f:7e:5a:d3:4e:67:ff:40:95:09:2b:29:e4:4d:7f:
         c8:2c:bc:0b:da:ba:ac:53:af:f8:96:23:f8:f2:dc:15:13:48:
         fe:2f:4b:44:39:8b:ec:ce:82:2c:e4:23:36:69:64:28:7c:cc:
         53:32:4e:35:d8:76:49:54:5e:63:6c:b7:10:a2:34:21:54:cd:
         90:60:e9:7b:ae:2e:f5:f7:38:54:bf:7f:9d:6e:14:20:35:63:
         98:7f:85:1a:b8:68:4d:96:01:87:ea:b7:a1:76:6f:d2:25:28:
         e6:d4:59:d9:79:d5:83:bc:87:7c:cd:7b:4c:f6:23:c2:74:97:
         1c:f5:39:5f:9b:10:40:25:c1:13:54:bf:3e:8c:8e:c3:dc:07:
         f7:e5:6b:89:ab:fd:08:fe:03:5d:20:99:98:7b:6a:40:e0:8a:
         32:5d:8f:64:f3:38:24:81:c9:88:73:95:99:2d:04:57:70:60:
         80:82:98:30:8f:50:d6:9b:45:51:80:e9:ad:fe:29:98:36:92:
         9e:3c:ab:74:68:2a:c5:71:4f:96:ea:bc:79:7f:fb:49:62:ac:
         c6:f3:f4:56
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUSABeVTTHCOGeXRz+gLf90OU95rswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjNaFw0yNzA2MDQwMTA2MjNaMDMxMTAvBgNV
BAMTKEIzNDQwMjJGRTZGNjg0QzRGMUUxOEY2RjYxMTMyRTcxQkQ3NzJBMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSP6a4ix/+BIzLpdYez4OHd2of
Ix1BZPK7CD5AgI7fS/cpbJn+nJs5I8Ex2f8Nr4MMp4sS5wwtDG43oaixJYcFeO3i
YMds3PZhoGnCBsK7GBJQYo1srjo1toEb7oMac3GYNTTFq/Mn4ErAEKTxdxAvWIU/
8UNnU8CmW3kYs3p4Sha5jndXys650KZqaUT2qlRrr811C1UUtwhamf6e+9IjHmkX
KCsuS31AA3TVhKDDsGkE4exSD5mqFsFkKb6rUBhzIuIdJ9VnaUAWozCBXmMNTaH9
VRFRp5StBxDlMpuUIwXDkWIGkI1YX1+2XkXvAnJJ7Sd7KCfMNP2l0D81k1K3AgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUs0QCL+b2hMTx4Y9vYRMucb13KiwwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzQzMTMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+QR
MA0GCSqGSIb3DQEBCwUAA4IBAQAQiiZGWAoS+h6u47gttMnCbT9kLV2UN6fiQj6P
pDzB72eEeR8QmNsPflrTTmf/QJUJKynkTX/ILLwL2rqsU6/4liP48twVE0j+L0tE
OYvszoIs5CM2aWQofMxTMk412HZJVF5jbLcQojQhVM2QYOl7ri719zhUv3+dbhQg
NWOYf4UauGhNlgGH6rehdm/SJSjm1FnZedWDvId8zXtM9iPCdJcc9TlfmxBAJcET
VL8+jI7D3Af35WuJq/0I/gNdIJmYe2pA4IoyXY9k8zgkgcmIc5WZLQRXcGCAgpgw
j1DWm0VRgOmt/imYNpKePKt0aCrFcU+W6rx5f/tJYqzG8/RW
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:11 2026 by rpki-client