Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666462353a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666462353a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          rDIPjuHlRbyStwHkypli94OvjaudQ/HIJj30bXKsfHY=
Subject key identifier:   BC:E1:03:A9:EA:BD:63:D1:76:F9:AF:92:EC:57:8D:61:FA:B1:48:A9
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       7DBCDF53DFA13983C32D6203FF24FB3A22EF9EE0
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666462353a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:22 +0000
ROA not before:           Fri 05 Jun 2026 01:01:22 +0000
ROA not after:            Fri 04 Jun 2027 01:06:22 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fdb5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bc:df:53:df:a1:39:83:c3:2d:62:03:ff:24:fb:3a:22:ef:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:22 2026 GMT
            Not After : Jun  4 01:06:22 2027 GMT
        Subject: CN=BCE103A9EABD63D176F9AF92EC578D61FAB148A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:76:db:cc:b5:36:9f:a8:a5:1d:62:c4:25:64:
                    d7:71:3b:86:7e:cf:6f:65:04:cb:90:c1:4b:78:e8:
                    c9:e2:66:09:10:ae:e3:ae:7c:fa:e7:4d:1f:8e:fb:
                    3b:53:fa:d5:53:cc:98:15:66:b5:93:a8:96:ce:63:
                    55:a8:2c:31:a3:9c:3e:9a:6b:bd:6e:4d:c5:d7:68:
                    9c:23:ff:8b:08:61:5f:4a:f1:7e:07:fd:6d:e5:4a:
                    4b:c8:a1:db:4d:e3:e8:1d:c8:ee:3e:24:d3:48:f6:
                    d0:33:c6:2f:e6:ae:72:66:5c:05:33:32:54:c6:c8:
                    48:58:5f:81:fd:0a:07:12:ba:d7:af:00:86:85:ac:
                    e1:42:c4:b5:4c:da:c6:97:8c:5f:ea:6b:89:fd:8a:
                    52:62:88:ca:fc:ee:d7:47:b0:f6:2c:9d:a9:cf:4b:
                    75:0d:34:8a:57:2a:93:8a:9c:06:5e:6c:70:4d:15:
                    dc:15:cf:b6:a1:1d:12:dc:18:9f:3b:d7:5c:94:b0:
                    f3:85:2d:95:e5:6b:5d:6d:49:ea:e8:0c:37:cb:f5:
                    fb:f1:28:3f:c4:f9:b3:e7:26:2b:79:1e:50:d8:4a:
                    c0:4e:a4:82:a7:c6:19:90:19:0b:77:a3:46:7f:fc:
                    62:b4:1c:68:a0:66:21:86:52:6b:ca:ee:61:32:3b:
                    bc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E1:03:A9:EA:BD:63:D1:76:F9:AF:92:EC:57:8D:61:FA:B1:48:A9
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666462353a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fdb5::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:d8:0d:fd:51:ba:7f:9c:d3:53:53:59:00:00:5e:1f:32:
         1a:8e:47:e7:6d:8f:93:a4:fc:ec:cd:f5:9b:5d:f9:56:60:58:
         09:ba:5a:ce:42:5c:66:a8:9a:59:18:f8:69:f6:fc:fd:07:80:
         27:57:11:d4:38:d0:59:16:8c:09:94:99:91:ba:a1:cb:8e:81:
         2e:b4:ab:02:3e:ad:91:53:59:bc:8c:88:24:7f:66:76:db:bd:
         66:3a:50:6d:41:d2:a1:6d:b1:4d:34:23:8c:15:53:16:42:c3:
         1d:5a:03:90:e4:92:0f:8a:84:57:b2:b7:b8:2b:ed:8a:98:19:
         6d:37:be:37:cf:9d:a9:c5:90:34:9b:27:21:0a:33:9d:78:c2:
         a8:63:d4:87:d2:7b:0f:22:a4:da:6e:74:be:b6:c4:12:02:b2:
         6e:c4:c7:68:b6:c6:87:04:db:cd:2f:cc:07:a5:05:15:a3:59:
         44:31:dc:41:35:0b:0b:58:9f:06:03:55:61:fe:a1:9e:3c:81:
         89:b2:06:28:e5:c8:b7:6c:54:5a:2e:f8:be:2b:df:85:f7:cb:
         a8:99:a2:98:95:4e:ba:14:48:e8:93:ab:d9:7c:a1:4a:2a:f2:
         b2:55:ee:24:a3:02:ae:a2:e5:eb:e3:0a:97:a0:98:bf:54:a3:
         05:68:71:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:13 2026 by rpki-client