Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          U1PRKP0Jb3G05JHszARes8Iz0VopoU9PD208vtLcaAg=
Subject key identifier:   C1:CA:00:EC:D0:86:4B:00:96:1E:2C:CB:34:A6:1C:A6:24:D5:61:0D
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       29929340E4F0B0CA8D00360F87F438F31BFB0EE8
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f9d3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:92:93:40:e4:f0:b0:ca:8d:00:36:0f:87:f4:38:f3:1b:fb:0e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=C1CA00ECD0864B00961E2CCB34A61CA624D5610D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:57:43:fb:d1:7f:0c:0f:b4:42:b4:7d:5a:bf:
                    93:0b:9e:91:f3:6e:85:60:f8:85:7a:6c:90:7e:dd:
                    2f:8d:44:50:6d:9a:6b:f9:17:e6:bd:dd:0a:eb:cb:
                    41:63:e3:87:18:ef:a4:a0:d0:fc:9a:3d:9c:9b:d9:
                    f1:13:cc:2c:d5:5f:06:78:b1:2a:f8:ae:77:d1:dc:
                    40:9b:75:45:1d:ef:e6:f9:80:bb:9e:7b:77:3d:ef:
                    ec:c6:f2:15:7b:04:c4:85:29:c7:d5:03:a3:6a:e5:
                    5b:49:66:91:2b:35:57:8d:c2:f9:07:3f:c9:05:a4:
                    c4:4e:58:2c:51:b5:9f:33:51:e0:4a:dc:b7:11:e3:
                    4d:63:dd:dc:7f:cd:4f:33:74:f7:be:8a:61:7f:02:
                    f3:6e:cd:30:82:d0:a3:a8:88:43:fd:55:5b:22:75:
                    b6:f5:5a:89:8b:f1:a4:ff:51:98:c0:87:d1:5f:c4:
                    0d:b3:3c:21:d3:a5:58:f7:ec:a6:55:53:2c:cb:56:
                    86:35:01:c0:fc:cc:a9:bc:14:7a:f0:c5:ed:bd:07:
                    f5:04:a4:03:9f:40:d2:e6:01:1f:85:82:46:bc:bd:
                    bc:0e:15:85:d4:80:dd:9e:5e:fa:2b:35:91:40:e3:
                    c8:ad:80:5c:01:63:cf:43:65:7a:d9:5e:f2:eb:cf:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CA:00:EC:D0:86:4B:00:96:1E:2C:CB:34:A6:1C:A6:24:D5:61:0D
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663964333a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f9d3::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:68:e4:01:2c:aa:55:fb:ef:60:45:a2:4a:8b:a9:be:3e:dc:
         1b:5c:61:89:f5:8c:84:13:74:42:63:d6:a5:8b:57:8d:2f:7b:
         dc:21:1d:d9:9f:82:26:62:5d:36:79:8e:20:6b:94:fa:db:61:
         b8:ec:5e:5c:a2:09:9f:89:36:28:80:36:59:2e:5b:c2:d6:be:
         d6:2b:8d:5b:11:2f:bd:40:74:c5:3f:3a:35:4a:06:8f:68:b6:
         6e:e2:45:a7:e1:af:f7:97:c0:fe:48:a0:63:f3:b2:86:cb:7c:
         dc:c4:75:e9:d2:b6:e6:76:3b:2a:69:56:fd:45:b2:e2:e4:7e:
         d1:56:90:41:60:08:57:48:6b:7e:dd:7f:0c:83:8e:ad:07:10:
         94:46:05:eb:90:06:b1:7a:de:f7:3d:53:31:ef:9c:85:3c:91:
         70:6e:de:6a:d4:df:b2:6a:31:f5:9b:e3:4d:08:33:08:49:e1:
         b7:f7:30:8c:5a:a2:ae:76:a6:31:d8:96:bd:e3:7c:70:c5:fa:
         e7:1a:6e:0b:b9:6e:30:25:ef:ee:89:55:27:18:72:4a:24:b8:
         ce:0d:8e:20:94:85:82:98:39:7d:d6:d4:e5:6c:53:19:05:a0:
         cb:5d:d4:7d:d5:72:91:b2:27:04:1c:1d:85:04:97:83:0f:51:
         ad:e7:ee:5e
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUKZKTQOTwsMqNADYPh/Q48xv7DugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjJaFw0yNzA2MDQwMTA2MjJaMDMxMTAvBgNV
BAMTKEMxQ0EwMEVDRDA4NjRCMDA5NjFFMkNDQjM0QTYxQ0E2MjRENTYxMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGV0P70X8MD7RCtH1av5MLnpHz
boVg+IV6bJB+3S+NRFBtmmv5F+a93Qrry0Fj44cY76Sg0PyaPZyb2fETzCzVXwZ4
sSr4rnfR3ECbdUUd7+b5gLuee3c97+zG8hV7BMSFKcfVA6Nq5VtJZpErNVeNwvkH
P8kFpMROWCxRtZ8zUeBK3LcR401j3dx/zU8zdPe+imF/AvNuzTCC0KOoiEP9VVsi
dbb1WomL8aT/UZjAh9FfxA2zPCHTpVj37KZVUyzLVoY1AcD8zKm8FHrwxe29B/UE
pAOfQNLmAR+Fgka8vbwOFYXUgN2eXvorNZFA48itgFwBY89DZXrZXvLrz76DAgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUwcoA7NCGSwCWHizLNKYcpiTVYQ0wHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2Mzk2NDMzM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/nT
MA0GCSqGSIb3DQEBCwUAA4IBAQCxaOQBLKpV++9gRaJKi6m+PtwbXGGJ9YyEE3RC
Y9ali1eNL3vcIR3Zn4ImYl02eY4ga5T622G47F5cogmfiTYogDZZLlvC1r7WK41b
ES+9QHTFPzo1SgaPaLZu4kWn4a/3l8D+SKBj87KGy3zcxHXp0rbmdjsqaVb9RbLi
5H7RVpBBYAhXSGt+3X8Mg46tBxCURgXrkAaxet73PVMx75yFPJFwbt5q1N+yajH1
m+NNCDMISeG39zCMWqKudqYx2Ja943xwxfrnGm4LuW4wJe/uiVUnGHJKJLjODY4g
lIWCmDl91tTlbFMZBaDLXdR91XKRsicEHB2FBJeDD1Gt5+5e
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:59 2026 by rpki-client