Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          KzfuPFuybwZh3/8LUhtf378HdZd1c1jM4WlMcYSJj6g=
Subject key identifier:   5E:7E:60:64:E8:F6:3F:4B:2E:9F:60:06:1A:ED:AF:1E:6C:E6:5A:94
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       277FC50896A42DF78A090998A41875DB345DC66E
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:28 +0000
ROA not before:           Fri 05 Jun 2026 01:01:28 +0000
ROA not after:            Fri 04 Jun 2027 01:06:28 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e7e9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:7f:c5:08:96:a4:2d:f7:8a:09:09:98:a4:18:75:db:34:5d:c6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:28 2026 GMT
            Not After : Jun  4 01:06:28 2027 GMT
        Subject: CN=5E7E6064E8F63F4B2E9F60061AEDAF1E6CE65A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:37:0c:89:c3:f2:37:bd:af:a3:33:4a:7c:
                    97:34:85:7c:e7:d2:d2:f2:74:a6:54:f2:e3:fe:a1:
                    43:74:65:9f:4c:3b:00:29:20:71:de:a0:03:6f:19:
                    0c:78:8b:c4:5b:f0:95:5c:77:fe:24:a0:a3:1b:df:
                    74:a4:1c:55:86:76:de:d6:53:f5:28:fc:32:8a:ce:
                    96:1e:cd:8f:fb:df:36:93:3f:6c:92:0b:af:41:9d:
                    c7:63:e8:79:f1:bc:da:99:5a:ad:e4:96:f6:95:73:
                    87:c2:cf:7d:d2:81:d9:1d:7d:2c:00:5f:12:05:2d:
                    bd:37:54:9c:01:02:1b:ae:89:86:aa:d2:25:43:5e:
                    af:b3:90:dd:74:05:0c:b4:e3:ae:7c:e2:b1:ff:a8:
                    ca:e6:a2:04:56:99:6e:0f:a6:8e:ea:05:74:9d:4b:
                    75:a7:60:33:7d:d3:66:ec:e0:01:79:ef:5e:aa:1a:
                    28:aa:4f:c5:95:05:98:16:90:9d:e8:4b:b4:80:44:
                    c7:44:87:da:e0:a5:a3:0b:c4:cb:9d:72:b8:83:ce:
                    c2:51:9d:69:73:d8:5f:58:af:61:84:41:0e:9d:b5:
                    ef:4e:0f:4c:56:eb:5c:bd:ce:3d:a0:77:a0:05:e0:
                    e8:a1:c0:81:69:46:ad:cf:01:72:d6:c5:dd:3d:ad:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7E:60:64:E8:F6:3F:4B:2E:9F:60:06:1A:ED:AF:1E:6C:E6:5A:94
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a653765393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e7e9::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:80:9e:9f:1b:b8:ae:d2:2f:3e:71:2f:83:96:ea:63:d5:8b:
         a3:72:c1:99:31:32:c7:92:21:2f:d2:01:ea:f4:d9:de:cf:2d:
         c2:da:48:5d:47:eb:ae:3b:d7:d7:04:0c:3a:01:9a:04:16:d6:
         2d:3f:2a:a4:a9:7b:13:dd:35:88:21:6b:01:ee:1b:de:4c:2c:
         5e:65:ed:a7:8c:cf:a8:7d:bd:d1:d4:0a:9c:8d:8a:22:4b:83:
         df:7c:8e:69:6c:5a:0b:86:59:64:7e:3d:c0:c4:49:a0:db:c2:
         91:2c:76:7a:3f:52:37:85:d0:de:80:81:01:14:35:ad:67:7c:
         84:fb:46:87:60:b8:bd:23:5f:ce:fe:0b:f1:a3:36:2d:b7:15:
         ef:37:f4:b3:e5:f1:00:bf:42:56:0b:5f:53:e3:44:30:e0:84:
         04:3e:81:67:f7:53:f1:8e:16:aa:28:2a:f6:6e:f3:0e:ac:a3:
         3a:e4:b3:19:88:f3:cb:15:35:2d:09:2c:ef:b8:7d:1a:fe:c9:
         76:95:13:2a:3d:6f:b1:fa:ea:f3:0e:c1:78:44:6a:da:10:3f:
         90:76:eb:ce:47:9d:ae:85:7a:6e:51:50:ea:8c:33:08:46:c5:
         e7:24:93:0d:da:02:02:09:45:c2:fc:96:79:38:80:6f:56:72:
         75:74:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:43 2026 by rpki-client