Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          e+3+Vt3vIE6zSqwOXotzEUA+6Cl0o4eT+PaGCIhDI9o=
Subject key identifier:   77:11:8B:DD:A7:CA:C1:A7:23:95:C1:1E:3D:94:66:61:44:ED:64:9A
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       0E1888505FC8656E82A961397420DE4E7484A5AB
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f278::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:18:88:50:5f:c8:65:6e:82:a9:61:39:74:20:de:4e:74:84:a5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=77118BDDA7CAC1A72395C11E3D94666144ED649A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:08:a9:a3:2b:25:18:ea:29:82:0d:bd:90:
                    08:8f:0f:57:b7:c4:e2:26:d3:4f:4c:b6:69:79:aa:
                    6f:3c:bb:ad:27:d9:49:02:c7:4d:a4:5c:43:32:91:
                    d5:63:ca:91:d0:5b:38:cd:30:d8:76:fe:90:ea:e3:
                    61:bd:03:04:e8:e8:1e:87:ee:e7:d8:3a:9a:20:42:
                    41:b7:9e:63:70:00:fb:8c:36:d8:c8:d1:cb:4d:bb:
                    26:2b:91:ef:fc:47:37:10:49:b6:82:07:a1:a5:73:
                    be:92:b7:c0:76:74:5d:33:bb:ac:02:4c:fa:fb:cb:
                    c1:b4:bf:62:c9:be:09:3a:ab:a4:74:7e:29:c6:50:
                    8e:d5:aa:3d:cc:d8:47:c0:1b:f9:7e:05:75:11:9f:
                    a9:2e:1f:7c:86:fb:dd:34:0c:a5:65:e0:ce:88:b5:
                    33:94:2d:21:67:12:f8:4a:75:31:78:be:30:dd:29:
                    ef:3b:72:07:4d:b5:b7:c9:dd:cd:45:bf:c6:d4:8a:
                    67:2f:53:9f:86:7e:7b:62:d3:63:9d:2c:42:1a:33:
                    21:7d:25:d7:a9:eb:35:38:42:19:ef:53:c8:bd:16:
                    1d:40:25:48:dd:9c:7c:c4:4c:bd:2d:2a:28:91:34:
                    96:46:2f:27:e3:c2:85:a5:84:2f:b5:9d:18:54:46:
                    a3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:11:8B:DD:A7:CA:C1:A7:23:95:C1:1E:3D:94:66:61:44:ED:64:9A
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f278::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:cf:fd:24:ca:2d:eb:c0:f7:fd:36:83:ec:16:59:7d:7c:ed:
         fe:00:ad:69:f9:85:43:ec:25:5a:28:59:db:35:d1:fd:18:79:
         f0:5f:26:49:a2:00:2d:c2:ef:62:8d:ae:e3:95:b4:47:43:da:
         f5:5f:60:15:a3:aa:8f:1d:1e:91:1d:12:52:d1:8b:f8:6a:39:
         d9:b4:8e:71:92:2f:b2:c4:ae:dc:c2:6c:01:c4:8c:b0:b8:35:
         1f:91:e9:db:cb:d5:8c:37:6f:8c:01:f7:5b:4b:1d:0d:1c:6c:
         a4:23:c7:38:72:0a:e3:60:9c:14:9b:1f:aa:01:e3:6b:2c:de:
         f8:bc:79:8a:79:cd:85:87:39:d3:55:d1:12:a7:ac:a0:2b:ee:
         93:1d:6d:5c:f5:49:70:ed:14:fe:6f:71:6f:d5:1a:43:50:83:
         56:90:68:3b:6e:f7:54:05:9c:36:12:ad:b9:e5:d3:e2:21:e4:
         71:0a:1b:dc:1c:25:2c:d4:3f:fa:55:c6:ec:01:ab:a8:18:d1:
         8a:0a:de:3f:76:da:1c:66:cb:28:97:d3:fc:7d:98:73:c0:58:
         66:e8:bb:8b:36:d2:3a:c7:12:85:0c:5f:ef:81:c1:e9:a4:aa:
         f5:49:77:86:31:d2:54:78:61:e5:e9:d6:07:5c:5a:35:c5:7d:
         bf:43:6a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:46 2026 by rpki-client