Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          ZXy9qSYdwDBi/7MboGpRehB8rLWeOEjWJgHOTWovAHA=
Subject key identifier:   6A:E8:23:A4:BA:4E:19:30:DA:EA:10:91:9E:5E:D8:3D:FC:C5:25:00
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       024137D13A28DF26D5ABF9FBACF5E47B56D4987C
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:21 +0000
ROA not before:           Fri 05 Jun 2026 01:01:21 +0000
ROA not after:            Fri 04 Jun 2027 01:06:21 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fe1b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:41:37:d1:3a:28:df:26:d5:ab:f9:fb:ac:f5:e4:7b:56:d4:98:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:21 2026 GMT
            Not After : Jun  4 01:06:21 2027 GMT
        Subject: CN=6AE823A4BA4E1930DAEA10919E5ED83DFCC52500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:3f:0a:fb:4f:bd:37:86:9b:0d:e1:c6:5a:
                    c3:c7:fa:3e:1b:3f:d5:74:2b:34:65:56:58:b2:0c:
                    44:98:55:8d:e8:8e:7c:a5:0c:fb:9c:ed:20:e6:d4:
                    59:be:c2:49:bd:e8:2c:bd:8a:10:46:fb:6b:08:78:
                    c4:d3:3e:0c:de:f3:38:b2:33:40:fb:52:65:18:6f:
                    3a:36:ed:35:21:d9:60:cf:cf:ed:91:34:e2:b5:a4:
                    d8:14:17:e5:ce:4c:7b:c7:72:c8:fb:33:00:bf:bd:
                    47:8e:a3:f5:9c:3e:93:7d:4c:58:54:0e:84:46:8e:
                    b1:1d:7c:a0:d4:dc:e6:9e:8f:9d:a2:ca:27:5e:c7:
                    f0:80:24:7e:8b:7d:47:41:b1:c8:3c:2b:f7:38:7b:
                    d4:11:6d:a0:f6:79:e6:7d:2f:2d:c3:29:0e:4a:91:
                    5a:98:4c:7c:3a:8d:cb:9f:0a:46:ba:52:1d:ad:29:
                    ab:31:ab:f7:f5:3a:1e:01:f6:c6:d2:66:1c:b7:1f:
                    65:8b:c7:27:47:72:aa:f1:66:be:0e:91:be:78:eb:
                    73:16:9b:d8:10:cf:07:9a:72:29:12:60:76:10:d3:
                    e2:76:fd:02:78:4c:6c:91:8c:11:92:3d:fc:16:04:
                    ec:31:68:e2:73:cf:d1:4d:bc:d0:34:b6:24:dc:91:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E8:23:A4:BA:4E:19:30:DA:EA:10:91:9E:5E:D8:3D:FC:C5:25:00
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fe1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:4f:5d:ea:b7:cc:05:90:82:dc:4a:7c:eb:ab:68:43:84:d6:
         e2:e0:ea:1b:c5:7a:48:01:12:34:80:e4:0c:61:d4:43:5f:d4:
         a9:18:ef:43:cb:79:f3:51:24:85:82:ec:a1:52:f5:e8:26:18:
         34:24:45:ac:20:b7:3f:c2:8c:17:e1:ee:fa:bf:65:09:45:43:
         ef:49:d2:6b:13:69:b1:cb:bb:2a:12:4b:5a:8b:0a:37:d8:9e:
         b4:c7:b4:08:68:a4:16:91:26:3e:f4:02:5b:4e:c2:0a:ef:72:
         d2:08:8c:a5:7a:b7:76:62:7d:d1:e9:dd:be:ed:a9:34:54:37:
         3a:06:74:fe:7b:f0:8a:67:9b:72:c9:fc:cc:93:ea:a4:ad:da:
         3f:13:24:94:5a:0b:f6:6e:15:28:32:a4:18:54:3e:4c:b2:b0:
         4a:27:55:73:da:01:c1:26:ac:5c:32:bb:9b:6c:73:89:fd:83:
         52:1e:62:9c:4a:7a:bb:ba:3a:e6:be:09:ec:bf:e2:33:ca:36:
         f4:a8:f5:84:db:11:aa:4e:97:59:04:e9:4d:91:8c:cb:de:1b:
         ca:ea:0b:90:06:8a:62:80:50:c3:f5:05:98:65:d9:f3:05:1c:
         67:45:e5:26:4f:d3:b5:dc:d0:87:08:38:28:53:22:14:28:c5:
         2b:6a:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:07 2026 by rpki-client