Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653663323a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653663323a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          WNpHD9/WIGwUJLN0CcjCa7hThVG6ssUJztNU2PTmVYc=
Subject key identifier:   9A:36:87:F5:BF:BC:DF:FD:52:4F:A4:25:B0:F4:69:32:B9:EF:B7:7E
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       164591F5BF48EBE2336F1C64E5B3E4D2B3983BFE
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653663323a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:23 +0000
ROA not before:           Fri 05 Jun 2026 01:01:23 +0000
ROA not after:            Fri 04 Jun 2027 01:06:23 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e6c2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:45:91:f5:bf:48:eb:e2:33:6f:1c:64:e5:b3:e4:d2:b3:98:3b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:23 2026 GMT
            Not After : Jun  4 01:06:23 2027 GMT
        Subject: CN=9A3687F5BFBCDFFD524FA425B0F46932B9EFB77E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:27:39:4c:fc:9a:e0:11:b9:71:4f:2d:1e:
                    4e:a3:26:17:77:de:50:0a:16:55:42:7b:a1:de:8b:
                    e9:b5:f6:d6:55:e3:bb:7b:04:d8:95:5e:b8:e1:66:
                    80:25:83:65:08:e2:43:4b:ad:93:bf:8a:53:20:e1:
                    e8:88:a9:fd:dc:4b:a1:8f:46:c5:24:fa:08:a1:4a:
                    d6:3a:3e:2d:e5:17:46:57:10:66:27:ce:42:f7:92:
                    71:71:46:10:1e:f1:d3:88:5d:3e:3a:e2:f3:f9:15:
                    a2:1b:fa:5a:f8:81:cf:e2:42:54:2c:36:fe:ec:b8:
                    32:ad:c1:19:57:46:d1:bc:7d:5b:64:56:c7:83:6e:
                    d4:0c:ca:de:8c:23:63:69:09:80:2d:3a:7a:34:a3:
                    ca:74:d4:22:7b:bd:3d:a7:a8:87:b9:3b:d8:af:91:
                    96:1a:3d:60:0b:55:f3:35:62:fe:dd:cd:eb:02:a1:
                    c1:4a:18:50:e5:dd:9c:41:3d:0b:ed:d3:db:bf:d0:
                    d1:b4:5c:7f:3a:d7:e8:02:a9:cc:e0:26:9a:cd:42:
                    83:f8:0d:35:25:4b:b1:7c:0b:60:1f:0f:b0:b3:0c:
                    d6:02:9e:1a:6c:97:50:72:dc:aa:8b:be:a2:d1:7e:
                    c3:56:40:e8:2d:d3:fe:3b:8d:df:96:8c:65:da:8c:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:36:87:F5:BF:BC:DF:FD:52:4F:A4:25:B0:F4:69:32:B9:EF:B7:7E
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653663323a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e6c2::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:dd:d3:7b:b0:8b:f2:ef:e5:1b:2e:f9:3a:85:75:c4:45:51:
         85:b1:22:86:3c:31:a3:ef:30:b2:22:73:0e:17:a3:a4:72:5c:
         a5:b7:13:15:9f:c9:e1:20:54:ea:62:21:c3:cf:10:ee:f5:41:
         ba:d7:f9:e5:23:28:d6:6a:18:09:fb:73:58:30:78:62:c3:d6:
         36:cb:da:b4:cd:7c:e7:86:58:b6:6a:01:43:ee:a4:bc:a7:7b:
         64:7e:4e:e6:77:70:76:42:6f:a2:8f:91:04:4d:b9:65:e3:70:
         57:f5:4e:76:a6:b2:58:96:9f:9c:99:90:da:1c:5e:8f:be:97:
         c8:94:82:ff:3f:0a:e9:ed:2d:e8:32:b5:7d:db:2e:15:e5:b3:
         4f:5e:be:83:4f:2f:00:af:75:9a:ed:3f:4e:a2:4c:93:f4:75:
         c7:16:8c:b3:70:4e:fd:a5:23:45:de:2f:7b:cb:f8:47:ef:66:
         ab:b8:af:be:8b:ae:ef:1a:87:f6:dd:a8:37:cc:1f:b0:b6:52:
         dc:63:ba:8f:ea:e2:c0:5c:31:fe:4f:e4:1b:58:6e:2b:0a:6b:
         a3:5e:28:3d:82:f5:93:5b:da:93:c0:85:b9:77:75:63:0a:8c:
         f6:67:45:82:89:e5:80:ba:75:43:8a:27:02:88:30:b8:99:84:
         14:75:75:46
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUFkWR9b9I6+Izbxxk5bPk0rOYO/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjNaFw0yNzA2MDQwMTA2MjNaMDMxMTAvBgNV
BAMTKDlBMzY4N0Y1QkZCQ0RGRkQ1MjRGQTQyNUIwRjQ2OTMyQjlFRkI3N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxyc5TPya4BG5cU8tHk6jJhd3
3lAKFlVCe6Hei+m19tZV47t7BNiVXrjhZoAlg2UI4kNLrZO/ilMg4eiIqf3cS6GP
RsUk+gihStY6Pi3lF0ZXEGYnzkL3knFxRhAe8dOIXT464vP5FaIb+lr4gc/iQlQs
Nv7suDKtwRlXRtG8fVtkVseDbtQMyt6MI2NpCYAtOno0o8p01CJ7vT2nqIe5O9iv
kZYaPWALVfM1Yv7dzesCocFKGFDl3ZxBPQvt09u/0NG0XH861+gCqczgJprNQoP4
DTUlS7F8C2AfD7CzDNYCnhpsl1By3KqLvqLRfsNWQOgt0/47jd+WjGXajMAVAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUmjaH9b+83/1ST6QlsPRpMrnvt34wHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzY2MzMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+bC
MA0GCSqGSIb3DQEBCwUAA4IBAQBi3dN7sIvy7+UbLvk6hXXERVGFsSKGPDGj7zCy
InMOF6OkclyltxMVn8nhIFTqYiHDzxDu9UG61/nlIyjWahgJ+3NYMHhiw9Y2y9q0
zXznhli2agFD7qS8p3tkfk7md3B2Qm+ij5EETbll43BX9U52prJYlp+cmZDaHF6P
vpfIlIL/Pwrp7S3oMrV92y4V5bNPXr6DTy8Ar3Wa7T9OokyT9HXHFoyzcE79pSNF
3i97y/hH72aruK++i67vGof23ag3zB+wtlLcY7qP6uLAXDH+T+QbWG4rCmujXig9
gvWTW9qTwIW5d3VjCoz2Z0WCieWAunVDiicCiDC4mYQUdXVG
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:08 2026 by rpki-client