Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          uLPsX8dtXTrcSY2td/AbspBwsVjcEojPxyAycMXHezs=
Subject key identifier:   1C:02:B8:85:48:71:1E:DB:2A:39:BF:F2:3F:4C:5B:A5:BA:F9:E7:66
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       46B22A1C2F400ACC1BB56BEE6FEBCAB38269B0C4
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:27 +0000
ROA not before:           Fri 05 Jun 2026 01:01:27 +0000
ROA not after:            Fri 04 Jun 2027 01:06:27 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e6e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b2:2a:1c:2f:40:0a:cc:1b:b5:6b:ee:6f:eb:ca:b3:82:69:b0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:27 2026 GMT
            Not After : Jun  4 01:06:27 2027 GMT
        Subject: CN=1C02B88548711EDB2A39BFF23F4C5BA5BAF9E766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:c9:7e:ea:46:cc:d0:d0:5d:a4:66:a4:57:
                    33:fe:d4:84:de:33:af:90:bc:ca:92:82:10:d0:65:
                    ac:2b:0c:18:de:b2:fd:55:f6:09:7a:fe:ed:29:40:
                    5c:5e:27:7a:5d:56:32:e3:c1:c0:77:73:a1:a2:92:
                    19:d5:cd:d7:77:68:3b:d5:fe:a5:07:d7:95:af:ab:
                    8f:29:49:7f:1f:44:e9:72:dc:8e:58:70:53:9f:9f:
                    d5:7d:6b:a0:15:c6:ab:4e:58:19:21:fc:a4:7c:53:
                    8b:7d:78:85:3c:9e:02:a4:ab:e5:62:d1:95:f8:20:
                    18:23:76:41:47:43:c6:1c:6b:7d:bf:00:67:87:2c:
                    b6:2e:6f:cf:b9:86:20:b4:e0:a4:04:cf:2b:ed:a9:
                    95:70:de:7a:08:52:d3:3a:70:98:38:9c:61:97:f8:
                    a4:75:46:b8:c6:83:b4:9d:9b:8e:e8:45:c4:35:3c:
                    18:70:60:b6:40:65:fc:10:89:12:44:12:f4:66:1b:
                    f6:8f:1b:25:6b:3e:f5:69:85:88:41:ea:85:fe:16:
                    63:1f:79:58:a4:5d:04:ed:31:f7:22:e2:20:43:b3:
                    27:24:06:37:9f:13:c6:18:1b:df:60:8f:b9:11:09:
                    9b:5e:fa:00:1c:e5:e8:15:cd:e1:8b:fc:d1:56:ba:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:02:B8:85:48:71:1E:DB:2A:39:BF:F2:3F:4C:5B:A5:BA:F9:E7:66
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e6e9::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:5e:cd:71:fc:2c:64:db:bc:05:08:0a:f3:11:40:5d:6a:a9:
         94:40:2f:bc:69:c3:7d:9e:b1:4e:d1:cf:4d:c5:65:1a:8f:08:
         16:88:4d:58:11:09:f7:7f:2e:82:4f:07:01:33:c2:6b:33:74:
         20:28:c5:48:6b:f5:82:a4:ce:e7:13:fa:ea:d5:13:d3:4b:be:
         fd:c3:d1:e3:bd:f4:89:a3:fa:ee:05:dd:6b:54:d8:e2:3f:3d:
         12:07:aa:c6:2e:d8:67:0f:51:84:5f:9f:88:44:85:2e:03:fc:
         7d:12:35:ae:ba:35:d8:0a:f0:e5:84:0f:bc:42:63:59:23:ea:
         8d:d2:bf:43:0c:60:03:c4:c8:d2:10:21:e7:9b:59:fa:99:41:
         19:d6:e4:20:9d:d5:9c:31:7d:c3:40:3e:18:91:be:1c:45:dc:
         43:3d:84:f3:15:51:47:e7:48:db:96:74:d0:54:70:00:98:06:
         2e:4a:06:d2:94:fc:ba:a2:19:d8:2b:e5:79:1f:76:ce:e9:0f:
         08:b5:e5:9e:67:8f:31:f6:bf:45:c3:65:d7:3a:ba:a8:19:d6:
         89:ec:30:47:1f:ba:54:7f:fb:09:19:fa:d6:e7:03:0d:f2:43:
         a2:b4:0d:f0:4f:97:c4:23:b5:e0:28:d2:5b:79:f8:e0:74:1a:
         18:6b:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:46 2026 by rpki-client