Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          gHMrWQaRuPZaE41cdh1ryauA3bLzWEPJcMt2qo0PKws=
Subject key identifier:   1D:FC:54:B2:1C:2F:A3:FC:2B:9C:FC:A7:E0:0E:44:59:40:67:8E:AD
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       06F3F421AD74018B40DFCCBE2FED07EB5BCCA721
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:21 +0000
ROA not before:           Fri 05 Jun 2026 01:01:21 +0000
ROA not after:            Fri 04 Jun 2027 01:06:21 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f1b9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f3:f4:21:ad:74:01:8b:40:df:cc:be:2f:ed:07:eb:5b:cc:a7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:21 2026 GMT
            Not After : Jun  4 01:06:21 2027 GMT
        Subject: CN=1DFC54B21C2FA3FC2B9CFCA7E00E445940678EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:a0:75:5b:01:d2:33:19:f9:f0:88:9a:84:
                    cd:a6:5b:84:b9:50:c3:28:5e:51:7a:e0:3b:17:2c:
                    1f:a9:c1:1e:14:ca:dc:51:27:60:c2:40:5f:36:a1:
                    60:6a:ad:9f:1f:62:bf:99:35:8a:45:71:c1:39:f9:
                    46:19:41:42:f4:fd:84:e5:cb:5d:e0:a3:36:e2:44:
                    d5:17:eb:49:6e:35:c2:87:e9:7a:f5:f3:03:ca:0a:
                    8a:66:86:bd:87:9f:7f:94:4b:ae:9e:93:b7:5f:00:
                    3d:dc:a7:8f:59:15:5d:c2:e4:c2:f1:8e:12:0a:5a:
                    21:a4:e4:cb:f1:d0:1b:73:c1:9f:15:87:1e:52:1d:
                    25:6c:a7:b2:34:b8:6d:ab:c0:a1:05:44:00:cc:21:
                    4d:8b:3b:fa:01:14:2b:46:ee:1d:77:24:fe:44:11:
                    59:a2:1e:03:ef:3b:c8:33:40:af:32:41:14:27:1b:
                    e0:a5:63:ef:87:1a:0b:6c:5f:70:c1:d7:ae:eb:8c:
                    aa:5f:80:92:d2:6c:ce:f7:af:0d:d1:15:00:4d:5e:
                    78:dc:c5:a5:a5:98:27:fb:f5:a5:80:e7:ee:03:57:
                    86:5f:21:41:e1:77:8b:56:37:5a:cf:49:1b:73:6b:
                    31:33:cc:9c:b0:1e:b7:59:5a:4a:00:28:94:de:a2:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FC:54:B2:1C:2F:A3:FC:2B:9C:FC:A7:E0:0E:44:59:40:67:8E:AD
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f1b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:0e:f5:a8:f4:30:3b:be:37:64:a9:96:a9:57:6b:60:bf:92:
         ff:86:35:e1:21:51:53:db:67:1f:de:a7:1b:12:b8:bf:c7:ca:
         f1:82:38:39:f9:79:96:0d:93:ec:62:73:47:aa:5a:69:64:a8:
         2c:a7:d0:1b:92:24:d6:21:8a:59:98:5e:fb:53:db:66:8b:f9:
         32:c4:b8:f7:ab:2e:ea:4a:0a:2d:1d:6f:91:62:ca:5e:f6:5c:
         e1:9b:b4:e7:fc:a2:4b:43:cd:f2:66:24:50:36:61:1a:f0:ae:
         28:89:fe:60:3d:03:0f:3c:fe:5e:bd:9f:a0:37:91:80:bd:76:
         e2:4b:9a:86:1a:34:61:b7:65:bc:e4:4d:35:f3:95:2e:7d:05:
         39:d2:82:f7:39:ec:3c:9e:0a:1f:ee:58:18:cd:40:ff:d1:38:
         cf:a0:20:f1:3b:eb:9a:4d:bc:33:60:62:6d:d5:94:8a:69:f1:
         6f:2c:86:bd:fd:dd:8e:33:8f:38:8b:d7:8f:19:42:89:95:52:
         f6:65:8b:40:f1:00:31:dc:bb:03:ad:7e:15:af:84:e6:f9:ec:
         19:3b:10:07:4b:c4:83:c0:92:4e:9e:c8:cc:57:e9:99:1e:6e:
         09:d3:8c:3e:68:a4:c4:fc:ae:4d:6f:45:86:d4:f9:15:a0:0e:
         bd:de:24:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:58 2026 by rpki-client