Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          ndo8v4LEM8m1D6ryTPLPhykrowGw2Nho69p6o24uiTU=
Subject key identifier:   E3:A5:61:B1:F7:B9:15:B3:C0:80:56:72:E0:C9:F7:56:75:71:69:3A
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       3AF0E6ABA376C0EAA27DFDED29620A8D007D55B6
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:26 +0000
ROA not before:           Fri 05 Jun 2026 01:01:26 +0000
ROA not after:            Fri 04 Jun 2027 01:06:26 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fc5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f0:e6:ab:a3:76:c0:ea:a2:7d:fd:ed:29:62:0a:8d:00:7d:55:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:26 2026 GMT
            Not After : Jun  4 01:06:26 2027 GMT
        Subject: CN=E3A561B1F7B915B3C0805672E0C9F7567571693A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:95:4a:12:f3:62:8f:a0:83:50:37:97:2d:
                    0a:79:3c:25:59:33:e3:7b:92:2b:5f:1f:94:d3:ef:
                    f3:6f:0a:af:47:f1:7a:a6:21:58:76:42:ba:09:a2:
                    04:d2:e5:d5:c5:2a:93:38:26:af:f3:c9:d5:9f:35:
                    27:58:46:62:86:88:b7:6a:93:07:00:ad:51:b0:4b:
                    17:ef:a8:7a:cd:e0:6e:70:04:f0:b6:e7:0e:12:75:
                    98:31:76:1f:53:31:d0:dc:bc:97:a1:7b:aa:cc:cc:
                    71:57:62:9a:b3:9a:01:81:48:f1:ac:e2:92:68:86:
                    0d:f3:ba:9f:3b:ac:4a:f2:2c:f2:84:49:f6:46:bf:
                    9f:54:eb:e0:75:75:4c:ed:7f:7a:34:f6:ae:d4:f5:
                    5d:70:80:f9:f1:79:ea:e5:6c:28:06:d1:29:18:bd:
                    00:e7:46:c0:4c:ee:77:73:5d:af:b2:41:ac:de:6d:
                    27:53:cb:4f:7e:b9:f6:5a:0f:c0:8b:a1:82:ee:3b:
                    e8:76:2f:42:6d:1f:12:1c:61:2d:56:df:08:3b:70:
                    1b:b5:b9:01:6f:3f:ea:f7:34:66:93:c1:5b:e0:07:
                    62:af:19:dd:66:a1:9b:b3:43:6b:9a:dc:cc:1b:2b:
                    fc:5d:2f:5c:ea:de:a6:a0:3f:ae:5f:af:4d:f6:34:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A5:61:B1:F7:B9:15:B3:C0:80:56:72:E0:C9:F7:56:75:71:69:3A
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666335633a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fc5c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:db:f1:b5:1b:97:1a:bc:dc:2b:45:6c:b4:07:59:5a:2e:d1:
         76:ac:68:ed:5b:b0:9c:62:4e:48:3a:6e:c6:c0:e5:3e:2e:6b:
         bf:30:9f:2f:8b:3d:a1:5b:a3:e6:c1:31:e1:dc:37:a2:d5:6f:
         c7:8e:ce:e2:d7:24:09:92:c4:51:4f:30:f9:4c:92:9c:ed:4c:
         ce:00:50:cc:10:f2:6c:35:cb:77:d0:b2:ad:ee:6d:da:31:3b:
         18:0a:cf:20:fd:cf:b7:b5:fd:4b:44:59:16:d0:68:cb:70:57:
         f4:7f:dc:b8:dc:60:a4:a0:0d:1f:4b:49:fe:30:90:08:f9:44:
         a3:b5:8a:04:da:23:69:f5:41:f8:e8:0b:33:d2:5c:20:1b:c6:
         4a:a2:c8:5b:8a:63:74:86:28:85:2c:e7:0e:9e:a2:e7:67:25:
         8f:65:f8:c3:65:9f:bc:ec:99:6e:b1:a3:4a:00:0e:8c:10:10:
         c7:8f:74:80:3c:5d:74:77:52:f3:b4:8e:2b:6f:93:62:3a:5c:
         f7:26:d4:23:73:24:59:e4:e5:67:c9:c0:e2:15:fa:08:c4:0c:
         f4:ea:16:63:0c:97:4c:b0:54:a1:da:b5:3d:a0:6c:a9:61:ad:
         8d:15:9a:95:70:a2:7b:cb:fc:67:da:6a:e4:1a:dd:de:e1:95:
         ae:69:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:39 2026 by rpki-client