Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656136653a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656136653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          W1Ot5+xYazpQfYOp7xkbieGzrjaIKrtwkHlx+q8cae4=
Subject key identifier:   FE:A1:23:A5:0E:33:E5:C7:76:25:D7:20:B7:CE:79:66:B4:2D:71:B9
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       10B0C07B0BC982E04D457A988F3BD47A025C79E4
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656136653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ea6e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b0:c0:7b:0b:c9:82:e0:4d:45:7a:98:8f:3b:d4:7a:02:5c:79:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=FEA123A50E33E5C77625D720B7CE7966B42D71B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:da:49:f9:cc:3b:fe:51:0c:e8:6a:9a:39:bb:
                    08:aa:d5:39:2a:03:5c:58:d6:51:14:08:a3:a2:97:
                    6a:1b:52:1a:3e:bc:ae:5f:d0:77:ff:50:35:6a:99:
                    89:f3:ce:b4:a6:92:7d:6d:d7:74:d6:91:6a:dc:47:
                    4d:3c:28:77:71:c8:24:23:73:7c:3b:b9:2d:ea:1d:
                    b2:d7:23:0a:af:02:57:f2:15:32:12:2a:84:15:d8:
                    31:91:69:5b:c5:8e:a9:dd:18:ba:3a:5c:87:84:b0:
                    25:bd:ae:78:a5:15:41:c9:6f:c6:52:06:c0:a0:a1:
                    1a:be:59:12:a7:fd:5c:f2:7a:6b:0d:dc:50:c9:38:
                    dd:94:19:c7:87:f5:16:4a:d1:e5:79:56:65:ac:47:
                    4a:0c:5d:45:a6:2f:bc:ee:79:27:f2:85:aa:3d:b9:
                    50:e0:e7:80:ba:47:55:4b:27:b9:e6:c6:28:62:73:
                    95:83:ec:67:6e:2c:c7:e1:40:f6:63:72:39:40:94:
                    81:6c:83:11:2b:8e:1e:99:4d:78:88:66:51:92:77:
                    83:6d:30:a7:9e:77:56:b8:18:d8:9e:91:37:a5:c7:
                    db:43:ae:31:93:3d:ee:91:ea:74:68:65:62:79:30:
                    01:25:07:2b:9d:e0:54:5e:71:49:7d:33:d9:e8:dc:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A1:23:A5:0E:33:E5:C7:76:25:D7:20:B7:CE:79:66:B4:2D:71:B9
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656136653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ea6e::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:c0:a4:ca:19:d2:a4:2a:8c:0b:0c:01:4f:b0:fb:43:35:4f:
         3e:46:72:64:68:25:86:0c:b0:cc:66:b3:3b:87:68:6a:2c:0f:
         91:c4:bd:a5:d3:33:38:83:78:a7:eb:d9:03:71:5e:e4:de:4e:
         e5:53:8e:5b:f4:69:d9:a6:5b:20:1a:30:b7:f7:d6:d8:97:94:
         39:67:27:30:9d:0e:cc:79:38:9c:ee:95:56:2b:60:32:bf:50:
         ef:45:eb:e7:0e:fa:0a:13:04:ee:ad:38:b3:98:3e:91:f4:a6:
         f0:18:fe:73:48:83:15:10:eb:8e:28:0c:21:01:45:c7:10:3f:
         4c:46:65:85:4b:e9:ac:b4:7a:2f:2e:3b:12:9b:b1:a5:c5:43:
         13:3e:a2:c4:59:2c:7e:86:fe:d7:4f:21:a4:e2:57:eb:f9:bd:
         d6:1e:39:cf:4a:5b:c9:b3:05:51:7e:a6:6e:f6:47:50:7d:eb:
         02:d6:81:89:ef:7f:51:fa:7a:1c:15:dc:c1:c8:74:ed:45:13:
         fd:99:8c:6c:0f:50:a3:69:f9:1b:90:d8:56:ef:5e:85:4c:31:
         15:dd:6f:5b:a1:91:ba:49:ce:a2:46:ed:01:30:da:73:e7:6b:
         c2:60:21:c6:b7:cc:f2:07:26:b0:ae:10:52:4c:53:ba:03:31:
         01:a8:fc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:43 2026 by rpki-client