Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          u6AIQwNn/QAQrUdEDIcMsE/zkXwgQXvyS14tahhKcNk=
Subject key identifier:   0E:63:6F:96:4E:C8:45:D8:2B:A2:99:7A:D4:F0:94:C9:41:18:BA:21
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       7B4B69CFC29693983B7AFCEAD913B78FB32E7D93
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:24 +0000
ROA not before:           Fri 05 Jun 2026 01:01:24 +0000
ROA not after:            Fri 04 Jun 2027 01:06:24 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ed2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4b:69:cf:c2:96:93:98:3b:7a:fc:ea:d9:13:b7:8f:b3:2e:7d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:24 2026 GMT
            Not After : Jun  4 01:06:24 2027 GMT
        Subject: CN=0E636F964EC845D82BA2997AD4F094C94118BA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:58:69:38:9f:4c:09:7b:80:66:29:15:b8:
                    ce:ed:46:30:ff:53:2a:b0:5a:95:06:ba:d1:0c:30:
                    87:fe:8d:a9:48:00:15:74:e2:c7:7b:5b:e8:4e:a5:
                    a8:67:73:51:ef:4e:8a:2a:01:93:54:eb:1b:7c:85:
                    4d:bb:1a:0e:75:0f:36:7f:3e:51:69:a3:af:a9:90:
                    54:75:ce:5f:7f:e6:2c:ae:09:da:78:51:47:a0:35:
                    e6:1e:a8:95:f5:aa:4c:e3:71:8a:ae:0b:f6:8b:46:
                    c8:97:bb:7c:ee:19:dd:d1:6b:ba:8c:92:56:f0:16:
                    d2:52:ba:7c:3d:75:37:ea:f5:38:0f:11:12:ce:01:
                    5c:2d:81:43:08:88:64:29:4d:41:94:50:6c:7b:52:
                    2b:76:09:80:70:2b:43:75:32:ff:83:72:c8:52:70:
                    fd:ca:a6:f6:1b:e8:5d:5a:08:e5:69:1d:87:a6:2c:
                    96:ee:6b:58:a1:4e:0e:07:b4:07:ef:ce:59:89:a3:
                    a9:a5:1e:d8:73:c7:9a:c5:84:fa:ef:ac:8e:3c:78:
                    2e:a7:d3:d1:a3:f8:80:8a:2b:ff:54:a7:93:b8:a1:
                    d9:d7:22:51:ee:de:d4:c7:dc:23:d6:60:9b:0c:f6:
                    1a:15:a8:99:19:89:6d:a4:38:a9:12:6e:9c:63:5f:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:63:6F:96:4E:C8:45:D8:2B:A2:99:7A:D4:F0:94:C9:41:18:BA:21
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ed2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:ab:e6:aa:00:13:ec:53:25:e7:55:81:5e:76:18:5f:62:3e:
         b8:6d:91:19:e1:14:d4:fd:8f:33:32:68:59:f4:6e:33:d3:b0:
         53:c0:6f:53:08:47:63:e4:c3:0f:1c:9e:89:e2:7d:ce:9f:01:
         0d:4a:3a:33:00:b7:04:82:17:04:43:8e:c8:a9:c9:ee:86:a5:
         ad:0f:cf:7a:ee:8a:5d:5c:9c:e5:26:d6:aa:67:37:67:3b:8b:
         20:cc:4f:c5:86:41:25:57:66:b4:9e:88:e6:c0:ec:8a:65:e6:
         e7:10:8c:b8:77:03:18:21:55:6e:d6:63:e3:18:89:df:81:d3:
         7a:c3:c8:ea:bb:9b:45:9d:03:c6:33:69:30:fc:9a:73:33:36:
         b1:48:37:0c:a5:e7:64:9c:05:9c:39:0e:c0:cf:52:62:d1:4c:
         94:9a:ce:98:ff:f4:10:33:9d:90:b7:c7:52:3d:4d:9a:ad:91:
         36:8f:0c:76:64:a0:a8:9a:b1:a6:07:2d:de:57:01:cc:5b:f8:
         51:72:61:9f:93:7e:66:07:f2:a8:51:52:9c:34:29:bf:d3:72:
         2d:d9:0b:25:3a:ec:e4:fc:3f:8a:b5:f7:5a:f9:e1:5b:5d:a3:
         b5:5a:a5:ed:42:ce:be:a1:30:86:ca:bc:00:94:38:32:65:9b:
         2e:50:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:14 2026 by rpki-client