Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          zse4tM6lGlMYTgRYHyc+6nN3vm1QaByCA+puXglqU14=
Subject key identifier:   16:B5:F7:A4:9C:57:86:C4:7C:AC:C1:AD:2C:BC:5E:AC:BD:B4:D4:5E
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       238A3A348DC165C8F692DEB8101D3ED92BB54F48
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:23 +0000
ROA not before:           Fri 05 Jun 2026 01:01:23 +0000
ROA not after:            Fri 04 Jun 2027 01:06:23 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e55b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8a:3a:34:8d:c1:65:c8:f6:92:de:b8:10:1d:3e:d9:2b:b5:4f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:23 2026 GMT
            Not After : Jun  4 01:06:23 2027 GMT
        Subject: CN=16B5F7A49C5786C47CACC1AD2CBC5EACBDB4D45E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6e:34:12:c5:b5:97:00:45:ad:a6:dc:6c:c2:
                    9b:bd:a5:bc:7b:6b:31:c6:c4:76:66:68:7a:8e:15:
                    4d:64:84:a5:09:55:4d:85:ac:cd:c1:f2:21:73:8e:
                    9d:10:49:37:de:a6:68:ec:03:6e:b6:37:81:f8:74:
                    96:3b:5f:0c:bd:c8:fb:fe:d9:8c:c2:dc:ce:ba:c1:
                    a5:4e:63:8e:5d:bd:96:22:54:83:ac:a7:b0:67:87:
                    e5:fd:fe:67:41:6a:20:6a:76:57:4d:39:85:64:a3:
                    92:4c:fd:2c:cc:92:71:06:c7:a9:10:d4:7d:cc:5a:
                    0f:8b:c3:21:9c:8c:fe:6d:c9:ba:0f:dd:0e:a6:f4:
                    15:66:43:cf:10:1d:61:6b:1a:92:a7:97:59:41:06:
                    98:c8:19:cb:0b:4b:32:b0:9a:1f:d9:9c:55:13:ea:
                    d6:39:6d:df:a3:c7:b6:9a:33:6b:7d:2c:cb:83:ea:
                    95:d3:85:ef:a1:b7:53:0f:7c:6d:ea:9f:4a:63:c2:
                    cc:ff:7f:1c:ac:ef:0e:58:29:ab:41:d6:1e:f2:5b:
                    d5:81:67:46:e0:f7:36:12:cf:7c:01:35:d1:5e:85:
                    06:46:3d:ee:c1:d6:a8:18:fc:39:21:fd:cb:c7:3a:
                    2c:45:a0:c4:02:32:56:0c:54:76:a6:f8:88:88:75:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B5:F7:A4:9C:57:86:C4:7C:AC:C1:AD:2C:BC:5E:AC:BD:B4:D4:5E
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e55b::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:43:49:c3:4a:31:56:60:74:b8:d4:c8:c5:ac:0c:23:04:71:
         17:7c:d1:99:85:cb:94:4a:db:ca:ac:ed:ab:f8:1f:28:6d:12:
         62:fa:51:e8:35:cb:35:09:1f:ed:05:ad:e0:af:05:14:b0:4a:
         d5:27:3e:b7:bc:72:36:e4:ef:d3:50:80:70:a3:e0:48:05:56:
         43:45:a0:4a:0a:17:86:41:17:65:bd:37:26:c1:8a:90:ec:dd:
         4a:7b:eb:f9:ad:de:28:b3:5c:25:66:01:75:c8:0f:c6:bc:ed:
         24:36:13:4e:bc:ab:bb:dd:c1:02:6d:32:a3:5b:cf:3e:88:d4:
         29:36:bb:eb:04:bf:9f:07:ee:b5:a9:ec:c7:53:e5:05:9d:87:
         13:f3:a9:99:31:20:3d:78:cd:8c:7f:ad:76:c4:28:5d:4f:6d:
         4a:e3:e1:d1:d1:93:21:1f:d5:28:8f:dc:16:40:1c:bb:5f:e5:
         bd:11:cb:9b:ee:0b:83:28:d2:bd:f1:77:25:fa:9d:ae:cd:ad:
         23:2e:02:50:85:99:ee:be:1c:19:c0:2f:2a:99:83:8e:d5:c4:
         75:9b:6a:a6:f8:42:ab:6d:bd:68:b9:ac:64:77:06:8a:2c:8c:
         61:53:ea:41:f2:88:43:e8:82:44:02:07:6c:e9:92:06:0f:e8:
         3b:4a:38:8b
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUI4o6NI3BZcj2kt64EB0+2Su1T0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjNaFw0yNzA2MDQwMTA2MjNaMDMxMTAvBgNV
BAMTKDE2QjVGN0E0OUM1Nzg2QzQ3Q0FDQzFBRDJDQkM1RUFDQkRCNEQ0NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCbjQSxbWXAEWtptxswpu9pbx7
azHGxHZmaHqOFU1khKUJVU2FrM3B8iFzjp0QSTfepmjsA262N4H4dJY7Xwy9yPv+
2YzC3M66waVOY45dvZYiVIOsp7Bnh+X9/mdBaiBqdldNOYVko5JM/SzMknEGx6kQ
1H3MWg+LwyGcjP5tyboP3Q6m9BVmQ88QHWFrGpKnl1lBBpjIGcsLSzKwmh/ZnFUT
6tY5bd+jx7aaM2t9LMuD6pXThe+ht1MPfG3qn0pjwsz/fxys7w5YKatB1h7yW9WB
Z0bg9zYSz3wBNdFehQZGPe7B1qgY/Dkh/cvHOixFoMQCMlYMVHam+IiIddLJAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUFrX3pJxXhsR8rMGtLLxerL201F4wHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzUzNTYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+Vb
MA0GCSqGSIb3DQEBCwUAA4IBAQCTQ0nDSjFWYHS41MjFrAwjBHEXfNGZhcuUStvK
rO2r+B8obRJi+lHoNcs1CR/tBa3grwUUsErVJz63vHI25O/TUIBwo+BIBVZDRaBK
CheGQRdlvTcmwYqQ7N1Ke+v5rd4os1wlZgF1yA/GvO0kNhNOvKu73cECbTKjW88+
iNQpNrvrBL+fB+61qezHU+UFnYcT86mZMSA9eM2Mf612xChdT21K4+HR0ZMhH9Uo
j9wWQBy7X+W9Ecub7guDKNK98Xcl+p2uza0jLgJQhZnuvhwZwC8qmYOO1cR1m2qm
+EKrbb1ouaxkdwaKLIxhU+pB8ohD6IJEAgds6ZIGD+g7SjiL
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:10 2026 by rpki-client