Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653762393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653762393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          hHrfNQZW144lZu5hVRA73IobPycMClYN2duXkANqLFc=
Subject key identifier:   14:B4:4F:E2:93:53:28:DD:43:14:3C:6B:3D:14:3E:2B:25:49:3A:09
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       3CA5A5CBAD6009359543FF8C143A062ADDA6595B
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653762393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e7b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a5:a5:cb:ad:60:09:35:95:43:ff:8c:14:3a:06:2a:dd:a6:59:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=14B44FE2935328DD43143C6B3D143E2B25493A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1c:0e:dd:29:fa:7a:a1:12:af:c6:3a:84:4a:
                    7d:86:95:6f:df:35:d6:28:16:d5:ea:fb:c6:42:4f:
                    fe:08:85:f4:7e:92:58:4d:ec:c2:af:92:cf:32:05:
                    ac:29:36:ae:74:f3:c5:c4:05:44:02:b3:6c:5a:8a:
                    2d:0a:45:72:98:8e:e8:f9:af:06:f7:80:e1:4f:42:
                    10:ba:f8:e0:9a:28:e6:d3:e2:d1:05:be:97:c9:3a:
                    49:65:4b:3c:1b:99:e5:85:06:dd:31:d2:a8:5c:17:
                    51:87:aa:87:6a:f7:f2:3f:6c:71:47:2d:47:e4:c2:
                    36:52:79:34:9e:c7:12:03:8e:52:f7:d5:2e:80:96:
                    f5:bd:ff:e4:0d:6e:fe:89:99:0c:91:04:92:1b:2c:
                    8d:99:8f:05:c7:bb:68:62:3a:85:a8:9d:d9:93:b6:
                    ef:53:40:b1:b0:1e:63:cf:7d:76:f5:ac:1a:28:f2:
                    86:9b:8a:5c:68:e0:a2:10:91:dd:7e:a5:86:65:fa:
                    50:00:31:a2:2c:86:38:4a:11:41:bc:a2:7e:56:33:
                    83:18:2b:30:71:11:59:81:3d:5b:25:ba:b9:7f:05:
                    c2:07:f0:a5:cd:66:df:5a:65:b2:d4:fc:2b:68:fe:
                    69:dc:b2:40:a0:ff:54:75:5a:62:eb:d5:55:36:24:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B4:4F:E2:93:53:28:DD:43:14:3C:6B:3D:14:3E:2B:25:49:3A:09
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653762393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e7b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:47:18:46:1b:72:a0:8f:84:56:88:e7:af:00:29:aa:52:
         41:77:3a:4c:f2:82:5c:b2:4a:7b:e2:f8:b2:e0:79:58:b5:99:
         c2:1b:87:13:70:60:ec:25:46:0c:3d:de:94:bc:8b:e9:66:c0:
         08:27:b2:35:c1:03:dd:7b:25:6c:63:56:6d:ad:7a:7e:ca:b6:
         76:2a:a3:14:01:7d:3e:3d:f9:fd:f5:00:a4:4e:97:c4:0a:16:
         c6:3c:90:3f:8d:d1:32:9e:c6:bf:7e:4b:ab:3a:b6:63:43:50:
         f8:c2:a5:4d:a7:6a:b0:bb:5e:b0:28:25:77:a3:b7:7d:e3:9d:
         3a:de:96:5e:82:53:4b:96:c0:eb:38:a3:5d:70:63:be:35:cf:
         5e:4e:06:ca:5d:ab:fe:89:36:09:dd:64:6f:d0:be:67:03:d3:
         2e:37:f0:b7:44:96:d7:03:ac:10:01:11:c3:c3:a6:cf:25:50:
         30:86:be:9d:80:08:af:64:a8:3e:8d:dc:2e:4d:97:0c:ba:9a:
         b3:16:69:de:f4:f4:4a:5b:f2:87:94:73:95:ca:5a:ec:9f:cb:
         97:38:0d:67:b0:63:5e:09:2d:70:0e:a2:40:7e:64:22:d9:6c:
         c5:d8:7d:10:2c:1b:99:a1:a5:5a:71:05:f7:54:2e:2f:4c:7d:
         06:99:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:41 2026 by rpki-client