Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa
File:                     326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          edEBjK1eVBYut1wLUJlNP1+SYIJYb7YcaTxvPYdE9kg=
Subject key identifier:   BE:95:87:9D:A4:D9:13:A0:56:AF:0E:41:B1:B1:83:79:EF:CD:83:5E
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       0F8405CD127D9C566C63C5E33C8FB5B2B388C6A2
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:23 +0000
ROA not before:           Fri 05 Jun 2026 01:01:23 +0000
ROA not after:            Fri 04 Jun 2027 01:06:23 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:84:05:cd:12:7d:9c:56:6c:63:c5:e3:3c:8f:b5:b2:b3:88:c6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:23 2026 GMT
            Not After : Jun  4 01:06:23 2027 GMT
        Subject: CN=BE95879DA4D913A056AF0E41B1B18379EFCD835E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c7:cb:35:f1:e0:bf:e7:3f:dc:8d:df:18:b6:
                    f9:ef:70:c6:ba:04:d7:31:ba:01:80:23:ec:5f:e9:
                    33:4d:44:d4:03:b5:73:30:88:43:bc:da:fc:56:f1:
                    32:46:00:76:c4:d3:fa:97:d2:ad:42:d3:47:35:57:
                    8d:bd:e6:8c:08:05:58:4c:9d:64:d4:dd:88:c8:06:
                    a5:37:c8:d4:4d:27:86:df:02:76:85:bc:fb:95:2c:
                    10:78:74:69:ea:46:9a:6a:ad:f3:e1:8c:5f:dd:4b:
                    88:3c:f3:34:71:48:e7:dd:54:de:2f:b4:7d:c4:77:
                    0e:63:e1:e9:e4:a9:36:a1:04:55:87:3f:cc:a6:e7:
                    5b:8f:a9:49:37:3d:57:57:75:49:75:d2:6e:1b:1c:
                    0f:49:be:12:de:20:66:90:7f:00:86:2d:db:f5:60:
                    2d:b8:9f:49:eb:66:e2:40:26:f9:a7:9d:37:1c:ef:
                    38:1a:33:bb:4f:e3:39:80:43:dc:17:0c:88:a1:9d:
                    72:20:b2:14:5b:29:0b:bf:07:c0:6e:43:e4:96:bb:
                    1e:d2:34:ec:22:d2:c4:88:35:0e:34:c7:4e:16:fd:
                    6d:b8:7b:85:af:43:71:df:df:6e:50:ff:d4:8b:0e:
                    f5:6f:2f:aa:61:20:42:55:26:d1:70:87:2a:99:9f:
                    a5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:95:87:9D:A4:D9:13:A0:56:AF:0E:41:B1:B1:83:79:EF:CD:83:5E
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663030303a3a2f33362d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:f1:f3:76:e5:e8:bd:bb:85:db:b2:13:ff:e1:96:c8:ab:c8:
         06:e8:14:cc:b2:24:f3:31:39:e2:c1:a9:05:9b:7d:4a:aa:16:
         c5:f0:cd:42:20:7a:d7:8f:19:8b:c2:dd:57:a4:38:e4:d5:f2:
         4a:2d:12:3d:6c:08:e2:e0:6d:a6:48:c2:16:27:84:1f:c3:86:
         cd:1a:65:3c:d9:cb:81:ab:9c:4d:85:75:2b:e0:67:16:d4:09:
         9e:53:08:b4:df:49:e2:78:89:29:15:cf:c1:a3:c6:09:28:30:
         ec:cf:be:26:37:c9:09:f5:72:2e:b5:c1:cf:a0:6c:20:f4:1e:
         f4:8f:d8:63:ff:94:6a:d4:6f:6a:ae:fd:06:e6:39:71:63:24:
         75:49:85:2f:53:62:fa:1e:38:be:80:60:21:8d:a2:8e:69:b3:
         47:57:dd:e9:79:4c:23:0f:ac:d4:7f:7a:06:73:56:c2:7f:4c:
         63:87:10:92:2d:1d:87:5d:e4:17:2b:16:5e:b1:3b:4b:89:d6:
         37:68:17:02:4b:6a:75:29:3e:8a:84:b0:7d:6a:97:16:81:c4:
         20:98:47:29:90:3b:39:ee:20:94:7f:7e:dd:bd:9f:02:fa:13:
         18:54:d5:6c:aa:7c:d4:53:6f:13:41:5c:2d:d1:36:05:46:3d:
         19:ca:6f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:18 2026 by rpki-client