Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          LF4f1gH9rCwpM98tx4JygEULsSUH02QNf2BAuEEtCw0=
Subject key identifier:   66:EC:42:DC:46:A6:22:62:D9:05:B1:E4:F6:4F:53:F2:A2:F0:0F:5F
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       6406C9667305285FE29921A634DBA7446E7DFE2A
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e584::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:06:c9:66:73:05:28:5f:e2:99:21:a6:34:db:a7:44:6e:7d:fe:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=66EC42DC46A62262D905B1E4F64F53F2A2F00F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7d:86:e8:d1:1d:f9:8d:bf:08:f1:47:22:e6:
                    8c:5c:1c:34:b5:6d:ae:67:77:50:0c:1f:48:75:3f:
                    a0:ea:50:e8:b3:b1:c6:87:d2:d1:12:d2:92:bb:eb:
                    15:73:14:8d:65:26:29:cb:12:76:a1:28:2c:c8:8f:
                    e0:90:b1:26:66:13:88:2e:af:4d:bc:af:aa:d4:98:
                    71:c3:aa:1d:3d:c4:b7:d5:e7:7a:04:e4:ed:0b:25:
                    8d:0e:80:41:5c:e0:76:ab:f5:c3:b1:66:87:7f:14:
                    dc:7e:98:9c:e0:45:a9:fb:32:e5:7f:9e:09:e1:ce:
                    78:b9:3c:db:06:04:1b:a2:b5:be:94:6d:e1:27:d2:
                    62:5e:c3:1c:6c:04:af:b7:51:ec:b4:a1:ef:ef:fd:
                    c0:aa:6e:4a:dd:41:be:67:22:a1:26:e7:dd:1c:ae:
                    48:ba:53:a5:ed:15:84:6a:f0:01:ac:8e:03:c9:95:
                    d7:3d:be:36:bf:d0:c9:73:0f:cc:5f:02:30:9d:a6:
                    62:ef:89:01:6b:27:c8:1c:eb:af:ea:3a:20:1b:9d:
                    ba:d0:ac:fd:2d:1e:5b:1a:c6:24:d4:32:4c:21:c3:
                    c1:4e:ad:b0:9a:0f:2d:52:14:91:ca:87:56:dc:1b:
                    fe:62:c9:67:0d:35:ac:e5:ae:31:e7:d8:e9:d6:38:
                    79:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EC:42:DC:46:A6:22:62:D9:05:B1:E4:F6:4F:53:F2:A2:F0:0F:5F
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653538343a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e584::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:a7:ba:b5:15:f5:79:e0:79:7b:82:56:8f:fd:a7:dc:69:74:
         a6:fb:0e:be:2a:42:42:ed:89:cf:69:21:e0:7c:7b:e2:67:0c:
         83:54:1e:57:5e:67:b1:53:d9:ef:af:f2:b4:d9:40:6a:f3:06:
         e1:55:78:27:84:86:30:7f:e9:71:a4:5f:0a:fe:01:0f:61:b4:
         72:a2:42:e6:f7:22:09:ef:59:16:3d:67:af:aa:26:3a:9d:8d:
         73:36:e0:4b:f0:37:53:29:e8:f7:1b:02:05:d1:11:c9:06:ce:
         00:11:42:0f:26:b6:7e:91:c8:13:04:70:b4:a2:2a:22:59:dd:
         e4:bf:4c:2c:f4:49:71:f7:5b:7a:64:99:65:59:ec:15:98:9c:
         b8:16:97:20:4e:57:3f:e0:db:e5:9d:50:e8:91:45:63:37:ce:
         cc:9b:77:ba:86:ae:2b:f9:9c:ba:7c:e8:62:d4:86:e4:ee:a7:
         16:b0:51:e1:e8:54:24:d9:b1:b5:d7:0d:e8:67:93:21:a8:b7:
         dd:97:c1:64:58:89:30:18:d3:26:03:00:91:d9:dd:35:7a:0f:
         9f:b6:ea:a3:b6:83:17:2e:56:29:93:8d:f6:f0:fe:ce:99:47:
         e0:26:76:00:c1:02:20:08:d7:5a:92:e2:10:7b:20:e7:be:00:
         ee:37:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:56 2026 by rpki-client