Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          iKBvVJH/BmilJctHoRGTPxq4GCEfuLUti+LeGzHB21M=
Subject key identifier:   39:93:52:8E:DA:79:28:12:6E:C6:BB:51:22:76:88:A1:1B:0B:0E:85
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       2B0058D41D8FF95145623E2B0344ACFC799B97D7
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:21 +0000
ROA not before:           Fri 05 Jun 2026 01:01:21 +0000
ROA not after:            Fri 04 Jun 2027 01:06:21 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f696::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:00:58:d4:1d:8f:f9:51:45:62:3e:2b:03:44:ac:fc:79:9b:97:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:21 2026 GMT
            Not After : Jun  4 01:06:21 2027 GMT
        Subject: CN=3993528EDA7928126EC6BB51227688A11B0B0E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:16:b0:54:6e:ee:59:8d:8e:d1:8b:4b:0e:
                    77:c8:00:28:69:dc:7e:1b:24:0a:8e:6f:6a:c6:8c:
                    33:ea:63:3b:72:14:19:af:f0:08:9f:14:f9:fe:34:
                    65:3f:59:98:9f:eb:b2:b9:50:6d:a3:98:da:cb:dc:
                    c7:c0:38:14:97:e0:3a:d3:77:9c:9f:df:a4:77:fd:
                    7f:7e:39:a0:10:fa:24:92:aa:ee:e5:a3:cd:10:ad:
                    a0:f7:59:48:63:5a:7a:06:82:6c:51:35:f9:d4:70:
                    4c:14:54:46:bc:d4:48:c5:a2:e0:0a:cb:9c:8b:f6:
                    7c:ae:20:5c:99:cf:28:eb:7c:17:67:bd:3d:89:ce:
                    f9:aa:b0:b1:f5:ec:9a:c1:ea:5a:6a:22:a6:36:d5:
                    82:7c:55:e4:99:af:79:be:be:93:59:cf:e8:92:cc:
                    58:a6:ea:5f:7b:df:0d:4f:1c:11:61:d9:b0:d3:f3:
                    17:f2:ec:2f:b5:d2:5e:fc:11:25:2e:bc:58:d9:51:
                    bc:92:10:7c:ba:6c:9e:b6:73:c9:d7:c0:37:9b:24:
                    bc:42:24:ce:18:fc:4f:49:85:3d:48:33:a9:4c:b4:
                    bf:d2:0c:4c:e8:25:f9:bb:3f:13:bf:a0:56:8f:cf:
                    7f:f9:96:54:1b:61:33:82:14:d9:07:22:a3:2d:94:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:93:52:8E:DA:79:28:12:6E:C6:BB:51:22:76:88:A1:1B:0B:0E:85
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663639363a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f696::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:a4:28:90:7e:44:ca:07:af:be:f5:01:32:a7:90:fa:1a:6b:
         97:eb:99:6a:61:80:6b:e2:6d:68:70:21:45:e2:0d:55:ec:55:
         16:5b:8f:d7:31:3a:a7:50:f4:e9:de:af:83:e5:cf:00:0f:ac:
         79:0f:44:5c:f8:db:3b:6f:ec:13:39:27:ef:fd:02:07:b0:9e:
         f0:3d:bc:f5:67:2c:e2:af:dc:89:68:96:2e:3a:43:9e:03:c3:
         8a:b3:4f:7f:e1:91:e9:31:57:d9:62:58:d8:f4:cf:0e:66:9e:
         97:79:ca:f2:65:58:f0:cf:7d:5a:4f:16:40:6d:26:d5:d3:b0:
         cc:8e:19:18:2d:8d:76:f8:de:d5:bc:85:22:55:86:b5:2c:52:
         3f:31:23:90:c6:57:0f:3e:d7:64:1a:85:8a:e8:21:ea:f7:38:
         bf:23:0b:71:17:67:9a:96:61:90:27:ed:5b:d7:87:85:60:1e:
         43:c4:65:f0:40:e2:7a:f3:55:3a:c8:b0:4f:bc:06:7f:11:b4:
         bf:25:cf:ea:2c:e8:99:e8:4a:1e:05:77:24:a4:3d:13:6f:d6:
         c0:17:15:d6:4f:41:d6:88:a6:89:86:13:6b:15:cb:3b:1d:1c:
         bc:3f:7a:83:ba:f0:7f:1f:3f:b3:ac:db:fe:ed:0d:3f:e3:29:
         e0:fd:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:06 2026 by rpki-client