Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          /1j5FDV8ZaoolWOq0YMSTPzx8N2aLh4RktG5DtHz9EQ=
Subject key identifier:   7E:3C:C2:91:37:C4:AA:5B:43:0B:3A:04:41:B6:97:00:3D:0F:49:70
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       69A380E6B8B0E405D4E2D9DC992F48B26AEA97CE
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:27 +0000
ROA not before:           Fri 05 Jun 2026 01:01:27 +0000
ROA not after:            Fri 04 Jun 2027 01:06:27 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f43c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a3:80:e6:b8:b0:e4:05:d4:e2:d9:dc:99:2f:48:b2:6a:ea:97:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:27 2026 GMT
            Not After : Jun  4 01:06:27 2027 GMT
        Subject: CN=7E3CC29137C4AA5B430B3A0441B697003D0F4970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:80:a8:de:1e:3b:1a:0e:86:75:ec:70:eb:
                    fb:45:7f:b0:0e:2f:f6:13:c2:e5:70:e7:2b:18:bc:
                    9e:61:d4:7a:cf:c3:a2:be:45:de:12:8d:18:8c:bb:
                    e0:d7:80:b1:9b:ef:ab:72:7e:91:a5:55:69:cb:52:
                    79:cb:ae:f8:19:95:fc:a9:6b:15:f8:38:1d:31:34:
                    c1:fe:37:63:00:ff:4b:25:a0:aa:bb:91:34:99:3e:
                    18:ff:fa:33:d5:31:17:cf:af:89:34:c0:fd:22:39:
                    87:7f:a1:2e:86:a4:d5:f1:d9:7a:e8:f0:a9:e5:dd:
                    55:4a:61:17:a6:90:8a:0f:b0:18:1f:ee:6f:e9:73:
                    d5:c7:87:82:94:29:77:21:9c:63:a2:bf:77:ca:a1:
                    41:8f:eb:23:c6:e7:da:d1:a2:03:db:42:51:ec:e3:
                    2a:f8:7c:16:6d:e7:df:d1:8d:c8:8a:94:98:80:10:
                    05:bd:e1:c2:6f:da:01:48:26:70:fd:6a:14:33:a8:
                    46:1e:b8:0e:66:23:17:89:50:35:c5:38:ed:a5:6d:
                    c6:0d:d9:93:09:4a:69:09:15:fc:87:93:8a:0d:90:
                    e7:4e:73:5a:f1:61:ab:da:d7:30:b2:d0:2a:07:2c:
                    3c:bd:bc:18:88:3d:f3:a5:bc:af:ad:d8:cf:50:22:
                    16:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3C:C2:91:37:C4:AA:5B:43:0B:3A:04:41:B6:97:00:3D:0F:49:70
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f43c::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:fb:a5:48:da:1c:23:a3:e2:52:3f:9c:94:d8:71:d3:33:7b:
         a8:96:84:85:c9:4b:cf:76:71:7e:00:c3:87:fd:35:13:5c:40:
         f1:97:c4:f2:1e:d2:ca:38:28:72:b2:c3:5c:7d:a0:ed:46:5a:
         68:a5:17:b0:ae:9c:ff:76:f3:d3:ac:19:1d:d6:6d:6e:cf:cd:
         c7:ef:39:37:3d:68:fc:41:bb:2e:59:53:ba:ca:ed:68:5f:49:
         88:f0:2b:f8:3d:13:58:0f:05:05:7e:dc:e9:57:9f:83:17:02:
         90:32:c8:f7:3e:05:16:b2:ba:57:58:59:79:f0:95:06:b9:c2:
         18:03:53:7f:9c:3d:6a:23:12:18:b5:0a:63:c9:96:fe:bf:93:
         17:04:ab:d7:25:53:9d:13:d7:c9:08:dc:a4:e2:e1:c0:97:f2:
         3d:ef:d8:83:b8:2c:fd:2d:2a:bb:51:30:6c:c5:06:df:de:d0:
         a2:7a:04:ef:c7:7f:24:13:6b:69:6f:58:a9:f0:c4:8b:a2:8e:
         f7:a5:0a:9f:bf:8f:6a:39:28:f8:9a:9d:28:e7:68:3d:80:82:
         5a:fc:5f:b1:dc:dc:0f:f3:99:ff:67:94:c5:41:29:75:82:b4:
         81:79:95:02:37:5e:f5:63:49:40:0d:75:ae:98:11:1d:7a:ba:
         62:e1:05:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:26:53 2026 by rpki-client