Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          esTjafdDAvPzi7WjxITLOaI8sQipY/yvGYe3vfiaxCI=
Subject key identifier:   5E:02:0B:EE:65:A9:A8:3E:1C:06:67:B8:EA:0B:22:BC:D9:DC:49:A8
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       1A11B2C467DE8B44AD8D35BCFE7E0D3F8A086FD9
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:25 +0000
ROA not before:           Fri 05 Jun 2026 01:01:25 +0000
ROA not after:            Fri 04 Jun 2027 01:06:25 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fca7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:11:b2:c4:67:de:8b:44:ad:8d:35:bc:fe:7e:0d:3f:8a:08:6f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:25 2026 GMT
            Not After : Jun  4 01:06:25 2027 GMT
        Subject: CN=5E020BEE65A9A83E1C0667B8EA0B22BCD9DC49A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:42:45:1b:1f:5b:4d:e1:af:db:ea:02:6b:
                    c4:dd:18:d1:74:cd:c5:15:aa:cd:f4:c2:d8:86:6a:
                    a7:6f:56:0c:af:4c:11:5a:78:a4:ee:6b:94:2b:84:
                    ba:24:b5:3d:e5:1e:18:b1:60:97:3c:48:73:ca:26:
                    41:dc:96:bc:f4:b8:60:68:36:21:f3:05:7a:64:ac:
                    9f:f5:dc:5a:fb:2e:dd:d3:15:14:70:6e:43:59:13:
                    4b:8e:9d:a4:0b:25:e5:1a:8c:07:26:a5:ed:5e:2f:
                    3e:e0:88:67:16:80:e7:63:9e:87:94:56:5b:92:0c:
                    13:71:f0:2b:1f:9d:84:0b:fc:0b:27:23:ea:5c:fe:
                    3c:24:1b:92:2c:ac:3b:7b:d4:6e:cd:c2:7b:b3:7d:
                    e0:ba:c3:5d:24:47:2d:30:e7:26:03:8c:13:f0:8b:
                    9a:28:38:6f:63:a1:31:5c:b1:d5:71:06:4b:f8:1d:
                    ad:e2:52:d9:67:4a:07:32:ac:ff:7e:75:ae:88:ea:
                    ed:18:a6:69:17:d7:52:bb:68:37:01:f8:98:0f:6d:
                    ad:60:71:22:3a:7f:c3:23:17:64:9d:59:e8:35:d3:
                    f0:c3:7f:9f:3f:ba:78:c3:ed:12:82:47:9c:f7:44:
                    8d:8f:64:77:43:62:63:5c:55:20:0b:fa:6b:fd:f9:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:0B:EE:65:A9:A8:3E:1C:06:67:B8:EA:0B:22:BC:D9:DC:49:A8
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fca7::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:18:3b:37:f2:de:74:a9:74:ae:f7:01:3c:2d:2d:17:08:03:
         7c:af:27:3f:82:13:2d:ba:ab:e4:36:a7:23:fb:29:53:d4:ff:
         1c:b4:a6:37:eb:65:39:21:f5:25:19:5f:d3:a5:a5:29:68:5f:
         e2:ba:aa:c3:94:13:6c:9c:0f:e8:e7:43:2b:ae:bb:75:8f:08:
         fb:fb:6e:42:0a:c6:68:a2:74:2f:98:84:8f:47:9d:71:68:bd:
         d4:95:b3:fb:e2:5e:74:64:26:d7:5e:92:aa:c1:9c:37:62:54:
         a4:8a:1e:1a:98:73:b4:ff:43:1c:ee:99:01:3d:54:d6:2a:5f:
         70:4a:5c:09:34:f9:9b:c3:59:99:23:ce:02:01:a7:ef:5c:c4:
         c2:a3:86:68:d2:d8:e7:a8:a1:37:3f:c7:78:2a:bc:b5:e1:71:
         c2:78:5a:a3:c1:6b:6a:96:10:27:7a:c2:61:81:c2:50:b3:7f:
         bf:d5:09:6c:99:78:4f:69:f8:ba:e1:ef:94:ce:80:c9:3a:73:
         30:cd:24:c9:5f:d8:b2:b8:6b:ef:b9:5a:6b:75:a0:fe:bf:b4:
         b9:01:ff:bd:4c:82:ee:6d:e5:03:0d:0c:47:36:d8:de:b8:1f:
         2f:5d:cd:8a:51:90:0b:b0:67:da:1d:da:a5:19:55:c7:c4:56:
         9f:eb:3b:79
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgIUGhGyxGfei0StjTW8/n4NP4oIb9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE1QzcwNkU0RDVDRDRCRDI1RkJCRThGODM5MEM4NEE3
Q0Y1N0QxNTAeFw0yNjA2MDUwMTAxMjVaFw0yNzA2MDQwMTA2MjVaMDMxMTAvBgNV
BAMTKDVFMDIwQkVFNjVBOUE4M0UxQzA2NjdCOEVBMEIyMkJDRDlEQzQ5QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVkJFGx9bTeGv2+oCa8TdGNF0
zcUVqs30wtiGaqdvVgyvTBFaeKTua5QrhLoktT3lHhixYJc8SHPKJkHclrz0uGBo
NiHzBXpkrJ/13Fr7Lt3TFRRwbkNZE0uOnaQLJeUajAcmpe1eLz7giGcWgOdjnoeU
VluSDBNx8CsfnYQL/AsnI+pc/jwkG5IsrDt71G7NwnuzfeC6w10kRy0w5yYDjBPw
i5ooOG9joTFcsdVxBkv4Ha3iUtlnSgcyrP9+da6I6u0YpmkX11K7aDcB+JgPba1g
cSI6f8MjF2SdWeg10/DDf58/unjD7RKCR5z3RI2PZHdDYmNcVSAL+mv9+eP5AgMB
AAGjggI6MIICNjAdBgNVHQ4EFgQUXgIL7mWpqD4cBme46gsivNncSagwHwYDVR0j
BBgwFoAUAVxwbk1c1L0l+76Pg5DISnz1fRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMy8wMTVDNzA2RTRE
NUNENEJEMjVGQkJFOEY4MzkwQzg0QTdDRjU3RDE1LmNybDBvBggrBgEFBQcBAQRj
MGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlF
SE9TVC81LzAxNUM3MDZFNEQ1Q0Q0QkQyNUZCQkU4RjgzOTBDODRBN0NGNTdEMTUu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMy8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjM2MTM3M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/yn
MA0GCSqGSIb3DQEBCwUAA4IBAQB8GDs38t50qXSu9wE8LS0XCAN8ryc/ghMtuqvk
Nqcj+ylT1P8ctKY362U5IfUlGV/TpaUpaF/iuqrDlBNsnA/o50Mrrrt1jwj7+25C
CsZoonQvmISPR51xaL3UlbP74l50ZCbXXpKqwZw3YlSkih4amHO0/0Mc7pkBPVTW
Kl9wSlwJNPmbw1mZI84CAafvXMTCo4Zo0tjnqKE3P8d4Kry14XHCeFqjwWtqlhAn
esJhgcJQs3+/1QlsmXhPafi64e+UzoDJOnMwzSTJX9iyuGvvuVprdaD+v7S5Af+9
TILubeUDDQxHNtjeuB8vXc2KUZALsGfaHdqlGVXHxFaf6zt5
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:12 2026 by rpki-client