Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663536663a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663536663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          ZdJocui8f5mHzRuHdLz5sNSdKX1Y1M9d4BczKYAMdBs=
Subject key identifier:   3A:26:89:11:0B:5C:66:EA:8D:82:56:F8:F3:05:5C:FB:04:2B:D9:AF
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       1452EAD516EBCA594F1DD2B6E3DC7D2CF2A1484D
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663536663a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f56f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:52:ea:d5:16:eb:ca:59:4f:1d:d2:b6:e3:dc:7d:2c:f2:a1:48:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=3A2689110B5C66EA8D8256F8F3055CFB042BD9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a7:8a:de:01:58:f9:af:c1:90:e7:60:74:f0:
                    cd:1f:b5:4a:03:03:d7:ca:a9:43:3e:c4:90:40:0c:
                    4d:bb:b7:80:69:ea:ad:c5:e1:e9:46:92:d6:7d:25:
                    49:fd:1d:f9:10:86:37:c1:f7:60:0c:e1:83:3c:d9:
                    2c:0a:51:27:ff:78:5a:7f:8c:0a:88:78:80:53:db:
                    f0:df:1a:95:fb:44:7b:0f:87:b7:fe:08:2c:5a:cb:
                    8a:fa:78:98:10:3a:c1:6e:78:00:a6:32:29:39:46:
                    88:73:c8:76:bd:92:f3:7f:6c:0f:7f:99:6f:2a:6b:
                    90:82:06:af:40:d6:17:05:6e:25:e5:ca:77:1e:7c:
                    bf:f2:d8:ed:54:07:cb:86:17:f0:d6:ea:e1:0a:92:
                    dc:de:b4:25:f2:80:7b:78:e2:72:f1:ee:2f:6a:62:
                    4e:cb:f1:cf:68:0a:e6:6a:29:8c:4f:b5:39:72:6d:
                    92:b4:37:e9:88:a4:77:83:3a:23:95:c9:e8:a6:11:
                    8c:b0:bf:61:e5:00:a7:18:6e:72:ec:c6:4f:04:00:
                    27:a7:ed:cb:a5:ce:6f:a7:2e:a0:b6:d9:20:9a:3e:
                    f7:c0:6e:9c:c8:24:56:ff:37:c9:84:c7:4c:c7:44:
                    76:6b:cb:1f:dd:5d:86:07:20:02:c7:63:57:2f:0b:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:89:11:0B:5C:66:EA:8D:82:56:F8:F3:05:5C:FB:04:2B:D9:AF
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663536663a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f56f::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:c3:1e:b5:5f:b2:cc:5c:d5:1e:8b:ed:7c:5e:0f:35:ea:e9:
         fa:d7:c8:a7:9a:29:24:05:5e:b3:eb:fe:53:50:25:fe:c8:b7:
         a8:15:8d:cb:96:5b:72:90:c1:a2:52:f2:02:07:81:60:74:e6:
         b5:f5:0d:e6:66:b6:ff:6b:98:4c:21:82:17:00:0a:89:c4:f2:
         9f:67:46:73:93:1d:69:5e:7f:94:10:54:d0:74:65:fa:85:f2:
         bc:dd:c3:c7:b7:18:0e:e9:a0:ac:53:08:63:c4:56:d9:45:1f:
         15:e7:90:1d:53:d2:4f:6a:9b:1a:47:b0:4e:13:33:1c:5e:cb:
         f8:d5:29:2e:1e:53:4a:1d:bf:7c:63:4b:b6:5f:6d:f2:4f:07:
         5c:10:8b:86:be:39:1e:c9:88:2c:db:8f:bb:63:5f:64:bc:d0:
         dc:94:03:0d:4d:3e:70:41:9b:04:07:28:39:27:fb:b6:7c:cc:
         f5:24:38:b1:34:27:90:89:eb:02:05:5b:77:d9:84:aa:43:d2:
         2a:09:7b:da:8d:6f:dd:aa:51:ea:ba:64:4e:91:71:93:8d:ae:
         f8:b3:f9:e3:6a:ff:65:d7:bc:a3:f3:8c:6c:99:94:2e:ac:4c:
         56:e6:47:d2:9f:17:2e:88:48:2d:bf:27:2e:e4:8a:9a:24:6b:
         de:07:75:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:44 2026 by rpki-client