Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          ELw8/uMk9le8+iR5ngU3z64W6sbKZ9YqWpjqLsmSsOU=
Subject key identifier:   36:CB:B2:92:4C:7E:65:EF:CF:25:1F:0A:60:72:DD:22:A8:AD:83:F4
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       077018163363B7F723730857FF06DACB2AEAB8ED
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:23 +0000
ROA not before:           Fri 05 Jun 2026 01:01:23 +0000
ROA not after:            Fri 04 Jun 2027 01:06:23 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fb74::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:70:18:16:33:63:b7:f7:23:73:08:57:ff:06:da:cb:2a:ea:b8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:23 2026 GMT
            Not After : Jun  4 01:06:23 2027 GMT
        Subject: CN=36CBB2924C7E65EFCF251F0A6072DD22A8AD83F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:d4:c7:97:67:43:71:89:23:8e:2c:c8:2b:
                    4c:ae:31:3f:b9:23:68:01:92:17:bc:76:e8:63:72:
                    7f:0f:90:5c:de:0c:b0:ad:f2:41:f8:d8:1d:7f:d3:
                    1f:12:8e:6d:e6:f8:d5:4e:81:fb:46:8b:68:e5:6e:
                    90:ac:65:5a:d9:63:32:de:0a:8d:a7:00:c3:b5:8e:
                    ec:c1:5d:ee:7a:ba:bd:66:49:89:33:c1:1b:be:4c:
                    81:ed:5f:b2:b6:57:27:7e:b2:72:37:97:1d:85:3a:
                    cc:7f:fd:79:ea:93:cd:c7:39:d2:a5:2f:bf:94:1f:
                    e8:6f:8c:dd:a8:53:93:8d:4b:e5:a8:ad:5a:98:40:
                    7a:05:ae:31:4d:3c:53:a3:79:b2:db:44:51:06:30:
                    6d:e1:e6:fe:78:30:d0:4b:fc:00:e6:a8:67:10:e1:
                    2b:6d:84:1f:c2:5f:ab:5b:0d:ca:5b:58:37:8d:82:
                    32:cd:f9:fb:08:60:87:00:6c:58:9f:e2:9a:9f:f1:
                    5c:78:e8:d7:c4:d6:04:11:c7:dc:ed:18:fd:73:64:
                    3f:96:bc:9e:17:85:23:ff:28:04:6a:32:17:34:3f:
                    24:22:32:24:73:b3:f7:b7:a4:05:4a:6d:a5:ec:2d:
                    b2:c9:05:2f:a1:74:62:22:5c:10:77:fe:db:b3:7f:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CB:B2:92:4C:7E:65:EF:CF:25:1F:0A:60:72:DD:22:A8:AD:83:F4
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fb74::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:29:d0:77:da:0c:76:f2:a0:d7:ad:4c:86:cb:6f:33:e9:ea:
         e0:d5:b1:9a:39:39:d9:e6:5a:e3:e9:39:25:28:df:af:b8:97:
         91:0c:75:60:2c:82:ab:24:44:16:92:6c:ad:68:fb:9d:e8:70:
         4f:01:cb:91:1b:36:43:bb:5b:7d:54:d5:87:61:31:da:48:3b:
         95:1d:c4:2b:a3:10:fb:4a:18:69:d2:a7:06:c9:8e:ee:66:87:
         54:d6:38:21:e6:c6:a3:27:f9:bd:27:54:a9:f5:05:3e:47:e1:
         ab:6a:11:61:66:2f:56:29:09:9e:45:e3:e3:a0:e6:2e:cc:9d:
         67:ad:26:7c:af:33:7b:05:a2:2c:42:5c:03:16:e4:e2:c5:6c:
         14:83:ae:98:03:0d:24:a2:ce:4c:e6:28:6d:19:2a:d2:19:77:
         35:5d:c1:29:e6:d0:60:95:0b:c0:e6:fc:82:d7:73:a8:c5:e3:
         ef:29:bf:79:c8:22:fa:d3:97:86:5f:a8:f1:33:ab:92:b2:f8:
         84:1a:69:d5:70:f5:ad:7d:5e:68:8f:59:8a:a0:f8:bb:88:5f:
         e6:c0:3b:da:0c:1e:bd:63:f5:97:35:65:6b:0a:6d:32:7d:61:
         e9:cd:7e:76:c9:66:01:e2:e1:43:bf:25:01:3f:a7:bc:d2:75:
         4c:0c:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:25 2026 by rpki-client