Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653561643a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653561643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          HGFZDo48IgIY8ryeeLeibrAUB63bBlKtVrV/KSOec3g=
Subject key identifier:   97:1D:20:B2:7B:58:9B:98:D1:7D:62:89:28:EA:0A:43:49:84:14:5F
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       08499DC7E0D23A1EEFB0581DED369BE34956DCD3
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653561643a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:24 +0000
ROA not before:           Fri 05 Jun 2026 01:01:24 +0000
ROA not after:            Fri 04 Jun 2027 01:06:24 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e5ad::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:49:9d:c7:e0:d2:3a:1e:ef:b0:58:1d:ed:36:9b:e3:49:56:dc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:24 2026 GMT
            Not After : Jun  4 01:06:24 2027 GMT
        Subject: CN=971D20B27B589B98D17D628928EA0A434984145F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:10:ad:93:8b:20:99:c4:45:8e:2e:c4:4d:d4:
                    60:a4:4e:d7:2a:51:9b:4c:48:a8:56:3c:e9:28:76:
                    bc:78:5f:ca:36:07:e7:5e:b9:99:d6:d1:93:03:e2:
                    65:12:63:6b:08:c3:e3:57:38:fe:d4:10:16:e7:b2:
                    8b:f5:17:d4:0d:39:21:55:32:73:b5:16:91:c0:52:
                    4c:79:81:7e:5a:94:71:9e:b6:55:0f:97:90:c9:a0:
                    14:5c:7c:4a:76:97:ab:de:52:4a:7e:29:fe:db:65:
                    49:fe:ea:d6:e0:22:89:82:eb:e8:89:3c:38:8d:84:
                    ac:75:46:e3:0d:a7:b1:59:6e:ae:b5:bf:be:82:f9:
                    3f:72:58:1b:b3:a6:50:6d:84:1b:97:ca:b8:0c:f7:
                    c5:74:27:f6:08:00:d4:3e:9b:92:c8:0e:b6:5f:98:
                    be:a4:29:5d:c7:d0:16:62:0a:fb:81:56:42:c1:c2:
                    88:d4:72:4c:20:e0:c5:00:45:57:ea:f4:0d:e1:01:
                    21:65:82:2e:84:b5:3e:d8:c2:dc:5b:03:2d:74:17:
                    ae:54:ff:30:ce:c1:6d:7a:43:94:a1:2c:5d:4c:20:
                    f3:8c:70:e3:3c:e1:17:fd:06:a3:8d:bf:68:04:2c:
                    c0:ec:2e:ec:be:4b:4b:4e:11:e0:06:bd:a3:ae:7d:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1D:20:B2:7B:58:9B:98:D1:7D:62:89:28:EA:0A:43:49:84:14:5F
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653561643a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e5ad::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:bc:93:79:b3:89:f6:6a:30:43:82:70:04:54:ea:7b:c2:72:
         2a:40:a6:f1:66:fb:f1:ad:a8:09:e0:55:37:89:a7:ae:ec:75:
         8d:e0:cf:20:40:dd:b7:4e:f8:e8:c8:d7:c9:88:41:4e:64:b7:
         17:b2:e6:a3:54:b4:b0:b1:52:29:d8:b6:1a:96:02:91:b2:1c:
         2c:31:d7:0a:21:03:c8:a0:db:77:07:ae:fa:0f:b4:88:2b:fc:
         cc:74:61:f0:16:96:d0:07:0f:93:b1:be:85:61:0e:2e:b0:3a:
         59:6f:d3:cc:89:5a:18:12:89:b1:e5:33:10:e8:ea:85:7a:a0:
         58:d2:cb:7a:ef:7d:13:2a:7d:f7:a2:9e:43:6d:d3:7f:41:f5:
         cb:dc:31:dd:99:51:6d:c7:88:9d:b6:81:d0:40:6c:89:c3:55:
         04:27:f3:fa:6e:8c:69:cb:02:7d:82:76:e0:a3:43:85:42:db:
         1c:57:97:c7:a5:d5:65:8b:4d:d1:e0:1e:da:69:33:7b:e6:9c:
         16:4a:c3:5e:84:9d:4f:2e:61:87:f7:23:e4:e3:ee:8b:7c:80:
         94:e6:51:9a:32:8c:ae:a2:04:43:c9:b5:1b:6b:12:e0:88:70:
         36:9c:b0:61:13:31:5b:62:00:04:a1:6e:84:51:bb:dc:b3:0a:
         19:b7:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:12 2026 by rpki-client