Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653662393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653662393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          orjuadk6c1loevDSCIusTSTh9d2HqffWv4pnaKmXhXw=
Subject key identifier:   BC:DE:83:41:BF:46:91:B8:07:C2:1A:9A:84:B4:74:6A:BE:CF:49:FF
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       2C70E555C445118BD8D23CF476117F06F07E8945
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653662393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:20 +0000
ROA not before:           Fri 05 Jun 2026 01:01:20 +0000
ROA not after:            Fri 04 Jun 2027 01:06:20 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e6b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:70:e5:55:c4:45:11:8b:d8:d2:3c:f4:76:11:7f:06:f0:7e:89:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:20 2026 GMT
            Not After : Jun  4 01:06:20 2027 GMT
        Subject: CN=BCDE8341BF4691B807C21A9A84B4746ABECF49FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:01:15:2c:16:51:20:36:f1:5a:f2:96:cf:
                    ba:f7:70:84:83:12:33:12:58:51:63:53:98:03:3a:
                    6d:20:f9:a9:6d:1d:8b:1d:5a:61:07:79:a2:40:f4:
                    3b:83:c1:6e:c5:28:e0:aa:17:39:c3:e0:06:69:27:
                    57:4f:8e:03:94:c5:0d:3a:1e:99:8c:b9:a3:26:80:
                    df:d9:c3:00:27:55:ab:67:47:f6:96:5a:71:b9:ad:
                    51:5e:32:b4:49:23:61:56:41:a1:d4:29:da:b3:bd:
                    35:b1:be:29:01:de:e4:36:ca:0e:ab:ee:2c:60:91:
                    5f:87:1d:76:a8:fb:7a:a8:20:12:f3:25:24:99:9f:
                    9a:6d:9d:77:c3:f8:71:12:07:aa:dc:de:c8:a3:e0:
                    f3:cc:a0:c3:fc:7d:7a:4c:8a:75:31:b1:d8:4a:e0:
                    c4:01:80:1b:83:45:6f:19:f8:fe:bd:c7:a2:f5:23:
                    2c:01:7f:50:86:9c:c0:cd:dd:c4:e6:24:b8:fb:a5:
                    c8:60:1e:cd:36:54:ed:12:0a:a1:3d:64:90:ad:46:
                    6c:e4:9b:f5:22:c5:ba:c2:c6:fd:57:af:a7:bf:89:
                    1e:42:11:3d:fa:aa:d3:17:c3:33:8a:db:3d:94:98:
                    74:e4:a2:f3:f1:37:79:d6:34:09:90:e1:4b:2f:7d:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DE:83:41:BF:46:91:B8:07:C2:1A:9A:84:B4:74:6A:BE:CF:49:FF
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653662393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e6b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:de:d5:44:68:8f:77:cd:db:ce:bc:f1:26:e6:40:13:25:2f:
         07:dd:f1:42:94:12:ca:5c:e7:74:c1:66:b5:a6:96:a7:12:3c:
         76:73:72:93:31:d6:4a:b3:73:76:6e:b2:42:88:70:34:f1:ae:
         53:e5:39:a9:56:75:14:15:0f:77:e3:25:d5:05:c7:75:0f:30:
         28:47:66:68:c5:50:4f:53:51:8f:2d:b4:be:e6:2a:99:11:83:
         ce:62:4c:39:61:89:cd:96:fe:27:f3:db:bc:79:5e:ab:30:01:
         5c:97:e6:9e:59:ad:6b:70:ca:64:fc:b3:db:41:bc:6b:cc:2d:
         9f:19:57:2b:29:d3:e7:3a:c1:e7:4e:67:32:c9:63:3a:78:3e:
         e2:7e:b4:fc:c8:25:24:f4:55:b7:c1:46:59:8a:cf:43:1b:9c:
         83:2f:d5:e8:29:0f:34:7a:3c:1f:37:4d:fa:f2:61:ed:f4:2a:
         ac:b9:c5:82:a8:28:40:64:6b:93:5c:b2:06:b9:4b:ca:16:ac:
         fe:9d:fe:86:bf:75:d5:e1:37:2d:0d:f8:91:d2:52:30:51:08:
         bf:56:02:95:67:d4:98:b4:26:fd:d3:64:ea:a1:e7:4c:43:87:
         cb:f7:cd:00:d8:96:dd:33:57:f0:5d:76:aa:a3:4e:dd:c2:4b:
         0b:db:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:05 2026 by rpki-client