Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          qbksa/y1OyhIBY8Qo76BfRkypMSokcBh6b9o6eWeqX8=
Subject key identifier:   80:E3:E9:AD:6C:FB:EE:2A:FC:0D:D6:83:0E:85:3F:B9:5E:9C:F0:25
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       4E4CE5D2E06F26C711B301CD737B03BEC3C7D3F2
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:24 +0000
ROA not before:           Fri 05 Jun 2026 01:01:24 +0000
ROA not after:            Fri 04 Jun 2027 01:06:24 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f5f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4c:e5:d2:e0:6f:26:c7:11:b3:01:cd:73:7b:03:be:c3:c7:d3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:24 2026 GMT
            Not After : Jun  4 01:06:24 2027 GMT
        Subject: CN=80E3E9AD6CFBEE2AFC0DD6830E853FB95E9CF025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:4a:d5:b1:8e:da:8d:51:17:75:c6:f5:c2:
                    51:f9:20:69:6e:0b:e7:35:b0:bb:39:d3:c8:ca:98:
                    fc:53:8f:fd:d0:54:91:7f:20:87:22:7f:be:6b:66:
                    80:4e:b1:66:a5:9e:af:4f:f6:6c:b8:9d:60:80:a7:
                    cd:f1:02:54:c8:65:cc:d7:ab:37:7e:c9:c8:ff:5c:
                    e6:e2:30:4b:1c:71:c3:bf:8a:24:ea:45:cc:5f:e0:
                    bc:37:7d:4c:04:d9:ac:34:84:5e:15:40:4d:6e:e0:
                    a7:e9:f3:ed:71:55:5c:61:4c:fb:6c:be:61:57:da:
                    58:b8:11:25:f1:cb:78:f7:fc:45:82:47:5a:f6:f9:
                    da:76:be:5d:70:30:68:96:a2:01:31:88:51:eb:9c:
                    f5:41:bb:e6:df:2c:7c:db:d7:0d:7a:02:4f:aa:38:
                    86:8f:87:02:1d:ac:03:4b:47:6a:8d:0a:37:69:37:
                    52:61:5c:68:ea:f3:a0:cc:8a:15:1c:a5:36:3d:fd:
                    ee:30:2a:da:58:31:d9:27:07:58:63:97:b9:13:26:
                    ba:43:3e:f2:99:f2:9d:84:2f:11:14:3c:9f:9b:65:
                    42:73:78:92:9d:c7:24:98:4e:95:c9:ac:78:e4:1f:
                    a5:5f:52:88:df:78:3f:bc:06:de:11:9e:28:49:ea:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E3:E9:AD:6C:FB:EE:2A:FC:0D:D6:83:0E:85:3F:B9:5E:9C:F0:25
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f5f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:ed:98:fa:b1:54:1b:e3:08:c8:42:b6:fd:1b:fd:32:31:28:
         b4:98:34:fa:30:b4:ab:79:d2:69:43:26:1a:5d:bc:b5:ba:33:
         d4:53:61:82:ff:27:4f:ec:ad:b4:fa:b2:03:33:ef:1a:9c:f3:
         82:73:a1:a6:13:27:56:da:22:94:be:c9:dd:f6:b0:a8:74:d1:
         17:57:e6:b4:b4:5c:f2:1b:a7:63:82:bc:a5:dc:9a:58:4f:bc:
         10:e1:fd:b7:ef:e1:30:a3:ff:81:bc:2f:a8:93:bc:cd:0e:b2:
         81:d4:85:03:40:14:14:fa:6b:cc:ab:2b:58:26:d2:df:9b:16:
         7a:69:fe:f1:b8:e8:f1:5f:4d:64:38:35:05:c6:1a:95:99:8b:
         76:01:84:28:35:46:6d:0e:e1:17:34:91:c4:98:7e:95:83:eb:
         14:54:b2:ef:0e:3e:28:6b:68:2f:10:7e:2e:a8:c1:d8:a2:45:
         13:33:2c:f2:36:51:a4:b6:dc:d6:aa:39:8b:88:8a:21:d4:78:
         21:21:34:1c:fb:41:f8:99:bc:d5:bf:7c:42:be:96:6c:c1:87:
         7d:f1:73:f5:58:4e:01:83:03:ab:87:27:1b:44:ed:4b:ec:cb:
         64:d2:ae:f9:6d:dd:20:90:83:7c:e5:28:17:f5:9d:8d:5f:28:
         ce:fb:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:37 2026 by rpki-client