Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656363383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656363383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          L6lZ5uHWHTrl0J0vMDhlsDkWekkxTtZGLdC2Urht34M=
Subject key identifier:   36:48:51:03:17:76:82:71:11:C5:40:15:B2:75:E2:EC:1C:B0:FB:8D
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       5A2AAA8BE9BDC59810A574DDD28D065407DC56C5
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656363383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:21 +0000
ROA not before:           Fri 05 Jun 2026 01:01:21 +0000
ROA not after:            Fri 04 Jun 2027 01:06:21 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ecc8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2a:aa:8b:e9:bd:c5:98:10:a5:74:dd:d2:8d:06:54:07:dc:56:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:21 2026 GMT
            Not After : Jun  4 01:06:21 2027 GMT
        Subject: CN=364851031776827111C54015B275E2EC1CB0FB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:4a:95:a3:ce:69:35:25:30:93:65:38:1b:
                    57:d5:d5:2f:0d:73:fc:c7:b6:5e:c3:58:57:c1:d6:
                    1e:11:db:e6:89:37:fa:1b:87:b9:71:99:87:e2:a1:
                    d1:62:ba:a8:a5:dd:92:e3:02:db:85:01:14:85:fb:
                    1b:d4:8c:4c:b0:a4:21:eb:8f:ba:e8:68:de:45:b6:
                    ca:08:c3:93:f1:b4:5b:8f:ba:5e:5c:b6:76:1d:29:
                    61:3b:7d:78:fd:06:03:db:26:a8:d7:cb:71:46:b7:
                    6f:70:e4:c7:40:ad:a3:fa:20:32:98:6b:84:65:e1:
                    a3:63:1b:2c:f6:2d:9f:d1:e4:9e:97:d6:92:f2:a1:
                    59:f6:6d:fc:66:b2:db:ee:1c:ff:12:09:22:c5:b2:
                    07:27:72:f0:7b:15:ac:40:d9:39:1b:c8:50:4a:59:
                    bb:a5:97:9e:71:bd:95:09:06:be:43:40:00:45:61:
                    13:7b:08:c2:94:23:78:05:02:3b:58:ec:90:62:ee:
                    5b:91:65:7d:92:25:c4:2b:46:e8:7e:1f:e8:33:3c:
                    05:64:de:a3:da:22:ba:79:c7:b4:d2:e6:01:a4:31:
                    90:6f:19:ea:ee:b5:2b:f1:9c:b4:d9:20:40:9d:05:
                    4f:f4:b4:8d:3a:ef:53:60:f8:7e:d6:26:eb:d7:59:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:48:51:03:17:76:82:71:11:C5:40:15:B2:75:E2:EC:1C:B0:FB:8D
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656363383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ecc8::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:af:e9:61:06:8f:5d:8c:4f:0f:39:80:45:4a:1d:8d:bf:
         c0:c1:fa:f0:b3:48:c7:cd:e5:b7:ff:b9:42:54:fc:36:9c:ef:
         63:6f:5e:de:db:bc:90:41:fd:e5:2a:6b:b0:84:ff:13:e5:3e:
         88:83:bd:0c:76:f4:88:b4:81:d9:6f:83:da:c0:61:bc:77:da:
         3b:b9:6f:9c:af:03:23:50:67:22:75:dc:b5:43:e2:3c:a4:7e:
         83:33:83:b7:2b:20:6f:2f:cc:64:68:0a:5a:53:41:19:c0:3e:
         a4:3c:67:39:38:53:6f:50:87:aa:f6:02:78:5a:d8:5c:9f:24:
         4a:90:12:da:f9:47:9f:e7:4e:a1:9c:c9:f1:38:a7:6a:d8:0d:
         2a:d3:e7:15:09:09:9f:46:93:3a:33:dc:62:75:e3:50:40:18:
         d0:22:e2:15:29:a1:c5:b7:3d:4f:6b:0c:4a:fd:2c:fc:d4:e5:
         86:63:31:32:a0:43:4b:71:a8:5a:f5:2d:8b:c7:52:2e:8b:d9:
         56:5f:b5:8a:e4:cf:75:ad:06:59:7c:96:7f:e9:d0:95:e6:9f:
         21:97:3f:7a:30:1d:e4:0e:c2:3b:ad:8f:92:ca:29:f2:f1:1f:
         0a:e0:6b:14:d5:de:c0:48:18:3b:25:1d:d5:f2:42:d4:8b:1b:
         f0:d8:5b:ef
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUWiqqi+m9xZgQpXTd0o0GVAfcVsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjFaFw0yNzA2MDQwMTA2MjFaMDMxMTAvBgNV
BAMTKDM2NDg1MTAzMTc3NjgyNzExMUM1NDAxNUIyNzVFMkVDMUNCMEZCOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQUqVo85pNSUwk2U4G1fV1S8N
c/zHtl7DWFfB1h4R2+aJN/obh7lxmYfiodFiuqil3ZLjAtuFARSF+xvUjEywpCHr
j7roaN5FtsoIw5PxtFuPul5ctnYdKWE7fXj9BgPbJqjXy3FGt29w5MdAraP6IDKY
a4Rl4aNjGyz2LZ/R5J6X1pLyoVn2bfxmstvuHP8SCSLFsgcncvB7FaxA2TkbyFBK
Wbull55xvZUJBr5DQABFYRN7CMKUI3gFAjtY7JBi7luRZX2SJcQrRuh+H+gzPAVk
3qPaIrp5x7TS5gGkMZBvGerutSvxnLTZIECdBU/0tI0671Ng+H7WJuvXWRgnAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUNkhRAxd2gnERxUAVsnXi7Byw+40wHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjM2MzM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+zI
MA0GCSqGSIb3DQEBCwUAA4IBAQCuzq/pYQaPXYxPDzmARUodjb/Awfrws0jHzeW3
/7lCVPw2nO9jb17e27yQQf3lKmuwhP8T5T6Ig70MdvSItIHZb4PawGG8d9o7uW+c
rwMjUGciddy1Q+I8pH6DM4O3KyBvL8xkaApaU0EZwD6kPGc5OFNvUIeq9gJ4Wthc
nyRKkBLa+Uef506hnMnxOKdq2A0q0+cVCQmfRpM6M9xideNQQBjQIuIVKaHFtz1P
awxK/Sz81OWGYzEyoENLcaha9S2Lx1Iui9lWX7WK5M91rQZZfJZ/6dCV5p8hlz96
MB3kDsI7rY+Syiny8R8K4GsU1d7ASBg7JR3V8kLUixvw2Fvv
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:07 2026 by rpki-client