Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          8DWOcWVnPOT9/1V8vpkQkHIQOqHMAey3FhHsMOaeM5Q=
Subject key identifier:   60:85:5B:0C:61:3D:D9:35:5A:EB:AD:AD:99:9F:EF:C5:E3:09:BF:00
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       355D31A9783B519C7711E2103811459E6AA3F713
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:23 +0000
ROA not before:           Fri 05 Jun 2026 01:01:23 +0000
ROA not after:            Fri 04 Jun 2027 01:06:23 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e4a6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:5d:31:a9:78:3b:51:9c:77:11:e2:10:38:11:45:9e:6a:a3:f7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:23 2026 GMT
            Not After : Jun  4 01:06:23 2027 GMT
        Subject: CN=60855B0C613DD9355AEBADAD999FEFC5E309BF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:16:31:a2:63:a9:3c:b5:c4:c5:bf:49:14:
                    22:fd:78:09:4a:64:c2:4f:6e:e7:5d:e0:ea:65:f1:
                    17:cc:1c:86:a5:e8:30:1c:72:44:29:da:e1:93:c0:
                    b3:3e:f7:d1:1d:76:c5:9f:ff:00:03:e5:9a:6b:38:
                    be:e0:cd:29:83:70:5e:2f:4f:ba:55:93:3b:9a:25:
                    9e:68:4f:cd:f7:28:78:c4:89:22:dc:70:0c:f8:12:
                    4f:70:18:3c:9f:e0:01:dc:2a:a2:2f:9c:ad:cc:1e:
                    95:96:98:ad:95:da:be:42:7a:a3:54:d7:16:dc:4f:
                    0e:5f:fd:13:0e:43:f1:15:9d:e7:27:c8:c6:38:95:
                    b9:68:9d:e2:37:36:ae:a3:83:ba:63:0e:88:0a:ac:
                    d2:e8:f3:68:0c:ba:d7:ed:cf:73:48:fb:34:7d:7d:
                    9e:ff:2c:34:27:fb:08:74:28:4d:07:9e:09:d2:69:
                    03:8e:60:35:4b:00:0c:22:d9:ab:8d:2a:b2:f7:06:
                    f4:dc:59:4f:fe:74:61:8f:f6:62:a9:09:c5:b8:62:
                    77:1c:95:55:42:74:e6:7c:c8:2e:1b:80:a6:03:55:
                    13:7f:a0:07:df:cc:e5:e5:ad:74:aa:a6:48:b2:f4:
                    e4:30:14:7e:08:51:44:59:64:56:c0:bf:f4:4d:e1:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:85:5B:0C:61:3D:D9:35:5A:EB:AD:AD:99:9F:EF:C5:E3:09:BF:00
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653461363a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e4a6::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:3b:0d:08:8f:24:c1:03:1c:24:14:df:8d:9e:81:6c:69:
         90:c5:51:c1:a8:4e:a4:f2:0e:3e:31:11:97:13:c2:f6:89:aa:
         37:f6:70:25:38:a6:46:e8:21:d1:b6:ec:e4:63:7d:d3:fb:5c:
         71:08:e0:6d:ac:ee:84:ee:f3:07:41:7c:bb:ce:2c:68:69:d7:
         e2:fb:2a:ed:1c:1f:01:c1:ec:0c:2d:fd:be:52:7c:ee:2c:0c:
         6b:89:5d:fa:e7:91:2c:06:50:fb:53:4c:f3:55:a2:e9:20:8d:
         2c:cc:d4:16:e5:01:63:72:ed:46:eb:c5:e5:e6:42:0b:12:9f:
         0a:76:bc:64:49:12:6c:71:a6:3c:da:23:16:68:ef:f0:98:78:
         2f:d0:a8:c3:eb:b3:5d:42:cf:d3:c7:08:3a:88:62:d6:78:3b:
         e6:f5:d6:98:c7:0b:b9:bc:24:ff:e7:c5:cb:e0:33:d2:6e:af:
         94:03:36:b3:62:12:2d:00:c7:41:b8:eb:0e:16:1c:44:c0:65:
         9d:38:e2:94:8a:1a:40:77:83:11:6d:75:66:a5:70:fa:ed:5c:
         a3:3f:79:5a:64:cd:3b:3e:78:73:35:ac:a9:df:e7:0e:6f:da:
         d4:ef:9b:0d:f8:ec:bb:00:8c:11:94:02:40:45:34:eb:7c:b2:
         8c:14:28:5b
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUNV0xqXg7UZx3EeIQOBFFnmqj9xMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjNaFw0yNzA2MDQwMTA2MjNaMDMxMTAvBgNV
BAMTKDYwODU1QjBDNjEzREQ5MzU1QUVCQURBRDk5OUZFRkM1RTMwOUJGMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxBYxomOpPLXExb9JFCL9eAlK
ZMJPbudd4Opl8RfMHIal6DAcckQp2uGTwLM+99EddsWf/wAD5ZprOL7gzSmDcF4v
T7pVkzuaJZ5oT833KHjEiSLccAz4Ek9wGDyf4AHcKqIvnK3MHpWWmK2V2r5CeqNU
1xbcTw5f/RMOQ/EVnecnyMY4lbloneI3Nq6jg7pjDogKrNLo82gMutftz3NI+zR9
fZ7/LDQn+wh0KE0HngnSaQOOYDVLAAwi2auNKrL3BvTcWU/+dGGP9mKpCcW4Yncc
lVVCdOZ8yC4bgKYDVRN/oAffzOXlrXSqpkiy9OQwFH4IUURZZFbAv/RN4QCDAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUYIVbDGE92TVa662tmZ/vxeMJvwAwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzQ2MTM2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+Sm
MA0GCSqGSIb3DQEBCwUAA4IBAQA8BTsNCI8kwQMcJBTfjZ6BbGmQxVHBqE6k8g4+
MRGXE8L2iao39nAlOKZG6CHRtuzkY33T+1xxCOBtrO6E7vMHQXy7zixoadfi+yrt
HB8BwewMLf2+UnzuLAxriV3655EsBlD7U0zzVaLpII0szNQW5QFjcu1G68Xl5kIL
Ep8KdrxkSRJscaY82iMWaO/wmHgv0KjD67NdQs/Txwg6iGLWeDvm9daYxwu5vCT/
58XL4DPSbq+UAzazYhItAMdBuOsOFhxEwGWdOOKUihpAd4MRbXVmpXD67VyjP3la
ZM07PnhzNayp3+cOb9rU75sN+Oy7AIwRlAJARTTrfLKMFChb
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:15 2026 by rpki-client