Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          F7Mq41lWHOQ4eVksAkKjRUo3X+Flb8RjK8TKiMmxZMY=
Subject key identifier:   0A:D4:90:58:9A:0C:1D:CA:54:62:81:7D:AE:ED:C2:68:96:E1:C6:FE
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       2E9358AD899AE8A414584E2F082D4CC12D9BD2C5
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:20 +0000
ROA not before:           Fri 05 Jun 2026 01:01:20 +0000
ROA not after:            Fri 04 Jun 2027 01:06:20 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fe80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:93:58:ad:89:9a:e8:a4:14:58:4e:2f:08:2d:4c:c1:2d:9b:d2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:20 2026 GMT
            Not After : Jun  4 01:06:20 2027 GMT
        Subject: CN=0AD490589A0C1DCA5462817DAEEDC26896E1C6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:4d:26:d5:df:c1:96:8c:23:4e:73:5d:87:
                    5e:11:10:a9:b2:1d:ff:bc:2e:0d:f5:ed:ba:68:c5:
                    aa:be:bd:01:35:1d:77:a9:80:0c:7d:c3:d2:53:1c:
                    9f:a4:7e:84:12:e3:93:cb:79:e2:97:ba:96:f2:2b:
                    4f:bd:d5:de:1b:c5:10:5a:cf:f2:81:b4:dc:8b:7c:
                    a8:3d:36:a1:2a:71:c6:60:ee:27:01:54:a9:e7:82:
                    20:ba:4c:e0:a9:28:ad:ec:d4:ab:0a:d4:16:9b:c4:
                    e4:09:37:f0:99:b8:f1:b1:11:aa:60:40:75:c0:04:
                    51:1d:4e:8d:e1:a2:f7:75:80:3a:31:00:62:d9:2e:
                    e1:a7:c1:a4:cb:62:51:8c:b5:66:4f:55:78:54:fc:
                    69:a2:aa:17:17:a1:a7:23:7e:b2:59:02:04:ac:5e:
                    30:75:ff:b2:ff:cd:c4:05:af:2a:1c:47:62:46:87:
                    0f:38:9d:60:6f:6a:d0:4a:33:b5:89:66:e0:cb:71:
                    31:96:9f:d7:90:c7:2b:a0:f0:73:1e:13:5e:40:c8:
                    62:77:f3:92:5c:c9:d8:c9:07:e4:12:92:1a:b5:fa:
                    0f:7d:6a:b4:6a:99:20:11:35:23:55:ed:68:85:5a:
                    f3:0e:87:f7:48:99:c8:d0:c7:a1:d0:ad:f8:17:c1:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D4:90:58:9A:0C:1D:CA:54:62:81:7D:AE:ED:C2:68:96:E1:C6:FE
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fe80::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:31:42:46:2c:46:1f:a2:56:62:6f:92:9f:aa:e3:99:a0:
         9a:b4:db:43:07:1c:ac:e7:4f:68:67:f8:9e:6e:c1:1c:26:cc:
         85:30:a5:f2:64:7e:ff:73:36:7a:9a:64:e8:6d:82:d5:79:9c:
         63:02:d8:24:5c:74:08:8e:a9:f5:74:11:0d:4a:6e:ef:8e:ed:
         85:f8:80:c8:ab:65:28:ba:4b:8a:5b:8e:c4:8d:16:51:db:5d:
         6f:86:5d:d6:f5:64:92:05:11:9b:a3:c0:7f:50:73:31:3c:ac:
         81:78:b6:fd:e1:40:55:a4:74:cd:b7:0c:13:52:c9:c1:ca:ca:
         62:19:ad:9c:64:13:f9:67:a3:d0:36:35:f0:43:a2:61:f8:cd:
         11:8a:8b:59:08:95:50:19:99:f3:f2:8a:1e:70:d4:1f:02:1a:
         db:63:59:08:e9:21:67:a2:7a:50:d3:a5:62:0b:fd:dd:7e:b0:
         22:d9:10:2e:a4:99:8f:c0:07:9d:c2:39:b0:57:b0:e5:27:9d:
         ab:e5:6e:23:6e:ba:7c:b8:38:65:b4:0f:42:52:4c:b4:27:72:
         f9:45:ff:c6:9d:58:92:ac:7c:86:dc:df:07:f1:be:1d:26:30:
         9b:34:0a:fb:03:ea:12:72:13:c6:f8:6f:ad:ad:30:40:7e:00:
         fc:ba:f1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:42 2026 by rpki-client