Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666462363a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666462363a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          KXRsU2eTNqVRaY7LSS5FanfYi8DgoQyL2Wl4od+z41M=
Subject key identifier:   9E:C5:81:E4:3C:F8:18:11:56:87:79:1D:DB:07:FA:62:03:56:2F:3D
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       5EFE3C302919DDCFB3E9CA46E789993BD86FA90C
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666462363a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:25 +0000
ROA not before:           Fri 05 Jun 2026 01:01:25 +0000
ROA not after:            Fri 04 Jun 2027 01:06:25 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fdb6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fe:3c:30:29:19:dd:cf:b3:e9:ca:46:e7:89:99:3b:d8:6f:a9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:25 2026 GMT
            Not After : Jun  4 01:06:25 2027 GMT
        Subject: CN=9EC581E43CF818115687791DDB07FA6203562F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:97:b4:e8:1f:bd:da:3d:a6:c7:00:06:b6:
                    9a:b9:44:e5:0b:de:0a:9e:88:11:94:4c:64:31:9b:
                    61:64:50:2e:9e:ce:32:df:7e:c8:3a:a3:8e:98:39:
                    3a:54:cf:a7:cb:5c:7d:21:36:8e:d0:a2:4e:fc:4e:
                    89:90:04:bb:38:61:39:f1:4d:00:04:24:44:c1:57:
                    9b:1a:32:d6:0c:12:bf:71:98:64:90:92:2d:20:b3:
                    9a:9e:53:bf:da:ce:82:ff:07:da:ef:6f:c6:6a:84:
                    34:65:ad:53:cb:39:06:85:84:24:2c:bb:59:de:aa:
                    1a:ee:f0:f2:50:4d:cb:55:4e:93:2c:10:22:1b:2f:
                    d7:fd:32:ec:54:ad:bd:ca:e4:08:ae:61:10:de:b3:
                    66:3b:4f:55:4b:91:34:02:fc:a8:06:43:01:35:a4:
                    9c:4b:a2:b3:60:b5:00:10:27:0b:33:ae:e0:a7:39:
                    53:60:52:b0:1d:c8:7e:3f:74:f9:d6:9a:5c:ee:f9:
                    01:08:8e:ae:a8:94:f1:4f:fb:15:74:1b:2f:db:2c:
                    56:60:52:ba:68:91:ba:56:69:28:44:e0:53:58:2f:
                    bc:a8:73:b9:f7:90:fa:07:9e:d8:c6:ed:77:18:60:
                    42:f8:40:cb:b2:0d:8e:d9:9f:79:81:96:74:57:34:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:81:E4:3C:F8:18:11:56:87:79:1D:DB:07:FA:62:03:56:2F:3D
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666462363a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fdb6::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:c0:2e:56:15:ab:4f:66:4f:45:d5:5c:5e:71:fd:f1:ee:c3:
         07:2b:23:0e:f3:7f:c2:48:b4:00:14:ed:ea:9f:8f:46:e1:a7:
         20:7a:f5:0c:90:cc:d4:72:74:94:b1:44:08:32:fa:d6:8e:23:
         50:82:77:fe:d6:93:78:c9:d3:bf:05:f3:9a:50:2b:4b:f2:4f:
         d1:6a:c3:62:7c:0b:d4:9f:72:d9:88:f3:70:41:4d:84:df:ce:
         49:1b:3e:72:54:94:57:70:65:91:8e:fd:41:87:c0:b9:a0:e2:
         e8:e3:43:92:e5:9e:58:ad:ba:f6:5a:4d:f8:69:a9:92:64:2f:
         cc:0f:2b:68:13:4f:9b:ac:e6:72:4c:42:99:61:65:d4:2b:c3:
         6e:e8:2b:07:a6:65:a9:48:b9:70:06:73:84:8e:bd:4e:17:f8:
         3c:14:60:06:4f:4b:02:37:0d:99:19:4d:42:00:0b:d3:6c:7b:
         c8:3f:e6:44:d0:37:21:03:cb:bc:54:1a:53:dd:0a:1e:f2:31:
         84:5d:39:9e:ca:6f:35:fc:76:ea:b3:6e:0e:c9:d2:83:4d:ba:
         e2:8e:41:58:5d:98:e1:1f:c5:b8:fa:79:0f:e8:6c:a6:f4:62:
         45:9f:87:61:79:2f:67:fa:60:f2:33:a4:e0:41:a4:86:9d:64:
         c5:c0:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:18 2026 by rpki-client