Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656364313a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656364313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          bzbCpbwO0FAGua7EN/K+MPZGOJurY+vY7JYarkJZkA0=
Subject key identifier:   C1:14:63:2A:43:10:36:24:21:A9:FC:22:84:24:5E:A8:04:90:D4:68
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       0F52BBFBCC765CF3C473E7C760616ABFF2DA3F8C
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656364313a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ecd1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:52:bb:fb:cc:76:5c:f3:c4:73:e7:c7:60:61:6a:bf:f2:da:3f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=C114632A4310362421A9FC2284245EA80490D468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:f1:61:a5:20:7e:9f:24:05:9e:56:87:21:
                    52:5e:b9:24:11:e3:35:38:37:69:c9:6d:06:1d:f7:
                    b5:18:82:1a:d8:33:33:b8:c3:b6:d5:54:84:f3:9a:
                    42:89:7b:b7:3b:a9:e9:2b:e4:74:4c:10:f2:04:96:
                    c6:fa:65:58:cb:e4:d5:42:cc:3f:00:30:b0:9b:e6:
                    93:29:96:97:cb:2f:f8:10:f2:c4:10:78:59:3d:7e:
                    7c:7e:e1:7d:b9:86:2c:9b:aa:0e:a7:be:ff:7e:ff:
                    e0:d5:47:f6:84:59:c6:3e:13:b6:a8:aa:23:51:0e:
                    bc:e9:c2:cd:4b:b4:2a:1f:56:12:b7:c6:6f:df:15:
                    b4:2d:7d:d0:44:4a:3d:5e:a4:d8:ab:56:1d:3b:c0:
                    c1:a9:df:ae:77:04:1e:26:93:d0:e2:74:bc:66:60:
                    53:aa:9e:7a:f6:05:d0:30:91:60:60:06:e4:bb:0b:
                    c9:be:a7:1b:3b:7e:25:a2:13:4c:1e:a1:83:7c:fc:
                    90:6e:fe:4e:84:f5:cb:55:d0:2d:92:42:f2:e1:03:
                    09:17:5c:73:07:c5:f1:f6:1b:de:3b:df:d4:ac:80:
                    8b:c9:74:df:fe:e5:3c:8a:e1:1e:f8:b9:60:08:46:
                    b1:42:ad:7e:f6:56:c8:38:e9:d0:08:db:57:0f:26:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:14:63:2A:43:10:36:24:21:A9:FC:22:84:24:5E:A8:04:90:D4:68
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656364313a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ecd1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:69:a9:3f:6d:94:ae:7c:a4:e1:3c:e5:af:52:23:ad:2e:e2:
         83:19:90:1e:c3:8e:df:09:3d:6b:4d:b9:dd:40:af:5e:ef:1d:
         84:71:30:1e:f2:25:19:f5:9b:1a:19:bf:e2:8f:43:ac:e9:ab:
         56:de:06:0d:c4:d7:d5:08:dd:9a:10:2c:45:5b:38:c9:fc:f9:
         c5:59:6d:54:dd:04:b0:c9:ea:88:6e:c7:0b:06:10:10:8d:d3:
         93:dc:c5:bc:7f:09:87:a9:b1:ce:06:13:cb:a4:d7:4d:0b:1e:
         ba:3e:9f:0d:df:d9:9b:e3:c9:96:ef:96:51:7d:3b:64:d7:67:
         f3:54:b4:4d:1f:b1:ae:44:55:16:f5:05:15:13:8b:32:64:3f:
         f7:57:06:12:9f:0b:32:d6:b4:6c:cb:1f:e8:10:76:e2:63:6f:
         e1:dc:9a:d9:ea:81:2b:e3:62:eb:ff:02:a3:46:57:0d:f8:98:
         ec:11:4a:de:6f:78:8c:98:47:96:e7:14:d1:d0:d2:f9:c4:f5:
         36:36:fa:00:9a:89:39:5d:82:b9:05:eb:23:1a:cf:80:2c:3b:
         42:9f:5e:bf:ad:04:27:07:00:1f:2c:63:37:bb:74:5e:4a:72:
         e4:4a:a8:01:db:99:80:6b:79:71:6c:c1:9f:25:c6:52:42:30:
         3a:e1:f9:50
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUD1K7+8x2XPPEc+fHYGFqv/LaP4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjJaFw0yNzA2MDQwMTA2MjJaMDMxMTAvBgNV
BAMTKEMxMTQ2MzJBNDMxMDM2MjQyMUE5RkMyMjg0MjQ1RUE4MDQ5MEQ0NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MfFhpSB+nyQFnlaHIVJeuSQR
4zU4N2nJbQYd97UYghrYMzO4w7bVVITzmkKJe7c7qekr5HRMEPIElsb6ZVjL5NVC
zD8AMLCb5pMplpfLL/gQ8sQQeFk9fnx+4X25hiybqg6nvv9+/+DVR/aEWcY+E7ao
qiNRDrzpws1LtCofVhK3xm/fFbQtfdBESj1epNirVh07wMGp3653BB4mk9DidLxm
YFOqnnr2BdAwkWBgBuS7C8m+pxs7fiWiE0weoYN8/JBu/k6E9ctV0C2SQvLhAwkX
XHMHxfH2G94739SsgIvJdN/+5TyK4R74uWAIRrFCrX72Vsg46dAI21cPJlORAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUwRRjKkMQNiQhqfwihCReqASQ1GgwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjM2NDMxM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+zR
MA0GCSqGSIb3DQEBCwUAA4IBAQB+aak/bZSufKThPOWvUiOtLuKDGZAew47fCT1r
TbndQK9e7x2EcTAe8iUZ9ZsaGb/ij0Os6atW3gYNxNfVCN2aECxFWzjJ/PnFWW1U
3QSwyeqIbscLBhAQjdOT3MW8fwmHqbHOBhPLpNdNCx66Pp8N39mb48mW75ZRfTtk
12fzVLRNH7GuRFUW9QUVE4syZD/3VwYSnwsy1rRsyx/oEHbiY2/h3JrZ6oEr42Lr
/wKjRlcN+JjsEUreb3iMmEeW5xTR0NL5xPU2NvoAmok5XYK5BesjGs+ALDtCn16/
rQQnBwAfLGM3u3ReSnLkSqgB25mAa3lxbMGfJcZSQjA64flQ
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:47 2026 by rpki-client