Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656430653a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656430653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          atKxKiS4nHWxGY9L2kZnlc0ZWbS7XPR6uZj+dUuZgy8=
Subject key identifier:   80:31:B8:6E:38:AA:3C:7E:7D:5A:72:CC:4F:D4:FA:85:14:BD:AC:E7
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       383DF1095FDFFC3BF188A4B5144A3D41D77523E4
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656430653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:26 +0000
ROA not before:           Fri 05 Jun 2026 01:01:26 +0000
ROA not after:            Fri 04 Jun 2027 01:06:26 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ed0e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3d:f1:09:5f:df:fc:3b:f1:88:a4:b5:14:4a:3d:41:d7:75:23:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:26 2026 GMT
            Not After : Jun  4 01:06:26 2027 GMT
        Subject: CN=8031B86E38AA3C7E7D5A72CC4FD4FA8514BDACE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:2b:11:94:06:1a:7a:d4:d6:8c:74:a3:10:
                    9b:a2:b7:ef:29:f1:64:13:65:16:d3:34:ac:65:70:
                    97:68:3e:90:58:0f:29:e2:d1:d5:75:40:72:9f:a0:
                    8f:c6:f0:22:85:a1:6f:cd:69:ba:57:92:bd:08:3d:
                    4d:f9:69:d3:c0:da:19:05:56:d9:dc:da:17:f1:ad:
                    21:66:9b:23:9f:f6:2e:21:13:19:09:bf:5a:38:cd:
                    bb:f3:69:8e:2e:55:c1:f4:ec:69:b5:cb:2c:ab:79:
                    c2:5e:ab:07:01:62:34:49:3a:29:15:0c:1c:76:c6:
                    09:fd:13:5c:19:05:e5:b9:63:db:c2:27:7f:07:58:
                    ba:02:54:45:c3:9f:a3:f8:32:c3:93:5a:66:96:a7:
                    2e:5e:9b:f5:56:3c:50:16:30:a6:03:3b:aa:76:21:
                    23:5d:12:59:7f:7e:d5:7c:4b:14:a1:80:27:21:3f:
                    2d:7f:85:15:f8:cc:4b:0d:8d:99:2a:b6:e1:c4:59:
                    44:7b:65:18:5c:5c:96:29:c0:e0:6d:ef:d4:cd:77:
                    e2:c2:04:5f:8b:39:17:7e:cf:99:5b:df:22:fc:32:
                    3c:22:6c:fd:69:a4:86:2d:21:60:96:c7:58:23:de:
                    d1:e9:06:81:0f:b7:b5:2d:76:8b:87:60:37:37:9b:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:31:B8:6E:38:AA:3C:7E:7D:5A:72:CC:4F:D4:FA:85:14:BD:AC:E7
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656430653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ed0e::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:0e:86:68:57:7a:22:82:b7:11:73:15:ea:fa:27:ba:ec:
         5f:ac:f1:3e:44:a4:2f:2b:33:99:3a:30:2f:aa:6e:88:e3:93:
         7d:eb:66:2b:03:3c:6f:ac:75:b2:b7:ac:2b:e2:38:69:e4:34:
         2a:3d:0d:4a:a6:81:2b:9e:d1:55:8c:e7:68:1e:cc:b0:dd:0f:
         b8:54:8c:d1:f0:fa:42:fe:68:7a:a7:4f:4c:37:d7:2b:f0:63:
         04:99:52:39:d8:c8:b3:d4:04:a3:74:9a:08:e4:17:62:ee:17:
         e0:5f:06:ff:f2:25:f2:7b:ea:a2:fa:bd:d5:d8:a8:a6:30:f3:
         8b:87:27:bd:cc:e0:1f:22:e2:10:78:46:76:00:28:3c:df:f1:
         45:bd:72:e2:1e:bd:a1:c2:2b:b3:d6:1a:ee:e9:ce:39:74:84:
         d3:99:65:1e:54:02:e1:6d:20:72:d0:83:d2:ea:1c:bc:40:26:
         8f:18:13:d5:6e:28:72:15:2a:65:b5:b9:d5:99:3f:20:59:d1:
         79:0d:2b:f1:92:46:7b:50:69:64:a4:6d:80:73:d8:8b:68:7a:
         3b:c5:12:36:b6:78:32:56:b8:c3:3e:52:31:e8:d6:6d:43:c2:
         31:b1:76:3d:14:43:89:cc:46:27:47:e6:e7:5b:2c:07:65:2b:
         d8:f3:c8:63
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUOD3xCV/f/DvxiKS1FEo9Qdd1I+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjZaFw0yNzA2MDQwMTA2MjZaMDMxMTAvBgNV
BAMTKDgwMzFCODZFMzhBQTNDN0U3RDVBNzJDQzRGRDRGQTg1MTRCREFDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQCsRlAYaetTWjHSjEJuit+8p
8WQTZRbTNKxlcJdoPpBYDyni0dV1QHKfoI/G8CKFoW/NabpXkr0IPU35adPA2hkF
Vtnc2hfxrSFmmyOf9i4hExkJv1o4zbvzaY4uVcH07Gm1yyyrecJeqwcBYjRJOikV
DBx2xgn9E1wZBeW5Y9vCJ38HWLoCVEXDn6P4MsOTWmaWpy5em/VWPFAWMKYDO6p2
ISNdEll/ftV8SxShgCchPy1/hRX4zEsNjZkqtuHEWUR7ZRhcXJYpwOBt79TNd+LC
BF+LORd+z5lb3yL8MjwibP1ppIYtIWCWx1gj3tHpBoEPt7UtdouHYDc3mynBAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUgDG4bjiqPH59WnLMT9T6hRS9rOcwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjQzMDY1M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+0O
MA0GCSqGSIb3DQEBCwUAA4IBAQCh2A6GaFd6IoK3EXMV6vonuuxfrPE+RKQvKzOZ
OjAvqm6I45N962YrAzxvrHWyt6wr4jhp5DQqPQ1KpoErntFVjOdoHsyw3Q+4VIzR
8PpC/mh6p09MN9cr8GMEmVI52Miz1ASjdJoI5Bdi7hfgXwb/8iXye+qi+r3V2Kim
MPOLhye9zOAfIuIQeEZ2ACg83/FFvXLiHr2hwiuz1hru6c45dITTmWUeVALhbSBy
0IPS6hy8QCaPGBPVbihyFSpltbnVmT8gWdF5DSvxkkZ7UGlkpG2Ac9iLaHo7xRI2
tngyVrjDPlIx6NZtQ8IxsXY9FEOJzEYnR+bnWywHZSvY88hj
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:08 2026 by rpki-client