Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          sRcX+0UynnAHQKCTV0fU+Sw49LN3RWxHNxTUtgFmOU8=
Subject key identifier:   3F:A9:85:60:33:DF:F0:01:66:FE:24:04:E9:58:26:13:45:12:A1:66
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       5D3EA7EA0D8EA94B844F2DC592C0AA80F90BD246
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Fri 05 Jun 2026 01:06:26 +0000
ROA not before:           Fri 05 Jun 2026 01:01:26 +0000
ROA not after:            Fri 04 Jun 2027 01:06:26 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ff43::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 20:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3e:a7:ea:0d:8e:a9:4b:84:4f:2d:c5:92:c0:aa:80:f9:0b:d2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:26 2026 GMT
            Not After : Jun  4 01:06:26 2027 GMT
        Subject: CN=3FA9856033DFF00166FE2404E95826134512A166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:5c:01:b7:ab:88:25:b1:be:28:4a:c1:8b:
                    43:92:3e:9c:dd:57:2b:fc:bb:e0:24:97:d7:e1:29:
                    99:d2:63:44:e6:08:4d:6c:31:47:e5:7b:7a:8b:13:
                    b4:74:72:4f:52:8d:b1:c8:01:d9:21:2d:a2:a6:da:
                    c3:6c:86:ce:f1:f0:ed:b7:0a:54:45:76:04:c2:36:
                    1f:a0:8b:6a:ae:3d:c8:02:57:5b:9d:a3:7b:ad:62:
                    92:4c:53:c9:d4:f6:12:32:33:6f:24:4e:7a:f6:f1:
                    1d:62:46:33:57:f2:92:b9:ad:d7:21:6b:bb:40:e1:
                    c9:00:b6:a4:ef:28:92:20:6f:17:81:c9:5a:4b:e4:
                    46:6e:89:c6:42:bf:ae:6b:45:0e:4a:c8:af:ed:a4:
                    cd:ff:72:74:1a:01:4e:12:4a:1f:28:6f:b3:3c:7c:
                    66:eb:9a:5d:a0:6e:22:f0:51:b7:bc:76:ec:af:06:
                    40:ee:f2:87:cb:6f:31:6f:7b:7d:5b:03:9a:c9:69:
                    f0:35:df:e0:bc:2a:94:02:f4:20:89:8c:4b:ac:20:
                    b4:c6:56:81:cf:aa:c7:b3:7e:78:87:89:84:c3:ee:
                    8b:34:86:08:45:1a:f4:70:4f:1f:12:3c:ba:3e:58:
                    de:44:82:19:41:10:2b:e9:f4:7b:8a:b7:7e:ca:63:
                    9c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A9:85:60:33:DF:F0:01:66:FE:24:04:E9:58:26:13:45:12:A1:66
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a666634333a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ff43::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:c5:4e:74:5e:c2:f0:b0:20:92:c3:c0:b4:fd:fd:46:9c:
         e5:36:78:1b:fd:2c:a6:83:36:95:1b:82:2f:fa:c4:32:d2:04:
         00:e9:b8:ed:f3:0a:c4:cb:67:34:8b:9d:cf:14:3f:03:fe:e2:
         72:e9:ed:4b:62:d4:e3:79:de:5e:1e:a4:ec:8c:e0:59:d4:49:
         ad:db:48:67:98:fa:48:ae:99:b8:22:42:3b:69:9a:39:02:d0:
         9c:94:48:ab:b1:76:bd:88:9a:61:fb:c8:7f:28:9f:88:f0:77:
         73:2a:d9:f3:c8:11:91:77:aa:a1:5c:f1:e4:a7:84:10:30:03:
         be:31:f4:02:9c:84:06:db:89:9f:64:0d:12:fa:fc:5c:f8:dd:
         c9:29:d8:1e:96:83:26:07:94:38:35:ca:d0:a1:7a:f8:01:e5:
         a5:50:b2:25:6e:78:10:ff:85:7a:08:3b:5e:05:6a:41:0d:dc:
         63:8d:49:db:8e:c6:1d:79:70:99:0e:4a:52:90:51:d5:d3:ec:
         80:eb:cf:d0:7a:6a:26:b6:f0:51:d9:24:ce:9f:38:a6:bc:c0:
         57:37:82:25:1f:d1:92:0e:c8:e1:5a:04:b7:42:32:c0:dd:c7:
         1f:45:71:4e:7f:23:cc:7d:90:63:d7:c4:c3:7f:a3:18:46:1f:
         78:e5:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:59 2026 by rpki-client