Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          hapqHMy9vBBpnaG/nChnMRxTbmlLLKcWAZ9Q4D3MGw0=
Subject key identifier:   12:70:31:E4:6F:1D:13:B4:CA:F6:D5:40:DD:32:A4:1C:0F:6E:F0:EE
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       2D1DED20854D1FEBF77BF9593ACDB7E4FB803427
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:24 +0000
ROA not before:           Fri 05 Jun 2026 01:01:24 +0000
ROA not after:            Fri 04 Jun 2027 01:06:24 +0000
asID:                     396968
IP address blocks:        2a0f:6287:feff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1d:ed:20:85:4d:1f:eb:f7:7b:f9:59:3a:cd:b7:e4:fb:80:34:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:24 2026 GMT
            Not After : Jun  4 01:06:24 2027 GMT
        Subject: CN=127031E46F1D13B4CAF6D540DD32A41C0F6EF0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:69:31:65:6e:8b:e1:0a:fc:0c:e6:8b:f4:
                    9a:53:77:6a:be:76:2e:00:49:5b:1f:e7:ad:45:74:
                    8e:fe:81:b5:ce:9e:3c:31:e6:c9:d9:b1:c8:67:50:
                    34:f5:9f:76:52:f9:85:c5:e3:16:8f:5d:ee:8e:3f:
                    6b:fb:c3:1d:c3:c0:80:ea:a0:be:01:01:c0:1c:20:
                    66:bc:88:84:e1:08:92:0f:9b:e7:91:44:d5:40:69:
                    af:7d:90:27:4a:4e:e7:d6:f9:41:df:5c:0c:a7:7e:
                    f7:99:cc:86:58:ea:a6:25:f5:f8:fb:b8:d4:68:cb:
                    64:db:8b:df:c8:80:0d:05:ab:1f:38:82:0f:18:eb:
                    fc:f4:3a:3a:18:c1:68:af:4d:d5:4f:fe:db:32:e4:
                    8a:06:e8:2a:65:39:ca:dc:55:f4:8c:ea:b7:06:b0:
                    0c:35:3e:ce:5e:9b:9a:6a:fc:48:14:7e:6f:d8:93:
                    30:46:bb:a8:22:7a:bc:b2:b3:dd:3b:02:35:43:c2:
                    af:e6:07:7b:3d:f3:a2:a7:d1:d5:61:f6:ad:8f:aa:
                    e4:9f:cd:32:ef:51:50:47:22:37:ed:00:76:db:a3:
                    a3:c1:77:d0:d2:35:69:9b:5f:ff:bf:af:af:40:84:
                    c7:12:1e:51:84:b7:6b:16:8d:18:da:01:a2:d1:77:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:70:31:E4:6F:1D:13:B4:CA:F6:D5:40:DD:32:A4:1C:0F:6E:F0:EE
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666566663a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:feff::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:45:32:76:9b:d1:4b:47:b8:19:b0:36:b9:cf:03:cf:69:
         51:b4:15:4d:58:79:9f:22:17:28:c6:ed:ab:59:cb:92:92:9d:
         84:5d:cb:ed:95:6e:09:99:39:9d:4a:ef:a8:be:37:bc:33:9a:
         63:6e:b5:94:6a:52:74:4b:30:33:7f:34:70:6e:1a:5c:20:0f:
         6d:20:43:1b:43:35:b4:e2:19:6e:b0:03:30:e1:33:75:f3:72:
         9c:4e:97:e4:4b:7c:b4:13:84:71:55:cd:80:48:ef:61:2d:ec:
         87:01:b5:55:33:da:cc:96:a7:d9:95:c7:2f:f9:85:91:e3:28:
         da:20:60:1b:2c:57:fa:f3:55:69:93:60:27:29:dc:bf:8a:8c:
         55:f7:b8:66:f5:83:a4:00:06:73:aa:29:03:0c:15:f4:fe:9b:
         ef:c4:01:1e:61:1e:e6:ef:fb:17:f8:2b:71:c7:2b:0b:30:71:
         c5:83:22:09:02:53:cc:28:24:1c:79:f6:ef:3d:bf:55:61:4b:
         12:d2:8e:ca:68:4e:e6:65:73:d8:db:00:b6:3a:55:91:cb:c9:
         40:48:2e:08:14:2f:a9:79:47:db:28:d9:39:9c:86:98:1e:42:
         ca:ee:97:ff:c1:ab:64:82:ce:ef:7c:70:b2:d1:e0:35:13:6d:
         9b:2d:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:37 2026 by rpki-client