Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS393577.roa
File:                     AS393577.roa (raw, json)
Hash identifier:          37dHiIS5ch/F169SjqvJZBRpuScXqKizoI2b2G4tRQI=
Subject key identifier:   74:53:24:26:9C:EE:EC:8B:82:E1:5A:87:38:E7:72:2D:18:02:1E:BC
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       733842B15F89B2A6E719B631A6ACDFA5F8E698C9
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS393577.roa
Signing time:             Thu 04 Jun 2026 15:58:47 +0000
ROA not before:           Thu 04 Jun 2026 15:53:47 +0000
ROA not after:            Thu 03 Jun 2027 15:58:47 +0000
asID:                     393577
IP address blocks:        2a06:a005:15d8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:38:42:b1:5f:89:b2:a6:e7:19:b6:31:a6:ac:df:a5:f8:e6:98:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jun  4 15:53:47 2026 GMT
            Not After : Jun  3 15:58:47 2027 GMT
        Subject: CN=745324269CEEEC8B82E15A8738E7722D18021EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:dd:7f:2e:b2:5b:d3:13:26:ba:2f:a7:ed:
                    c8:81:66:bb:35:c7:41:0f:fb:ce:41:84:e0:d6:52:
                    08:ae:90:f6:21:b8:ca:53:be:6a:97:4c:31:e6:27:
                    5c:28:e6:ec:58:28:c5:fa:6c:85:07:b0:d0:4f:a4:
                    4e:01:36:9b:65:9a:3a:e9:6f:25:2e:39:f1:55:84:
                    a9:b4:b6:04:2d:1f:12:06:10:55:89:84:7b:10:fc:
                    a8:b2:e3:a7:19:30:87:2d:de:b7:f4:30:7a:c0:31:
                    94:95:4a:b8:d9:c8:a1:68:12:d2:9f:f0:6d:ed:8e:
                    ad:69:53:75:25:49:2c:32:78:ab:20:0e:64:ea:b9:
                    47:33:fb:79:6d:69:a1:37:b3:1c:e6:ff:a3:56:e4:
                    36:c4:6e:b9:8e:1f:29:33:28:89:48:41:84:e0:b2:
                    f8:1c:f0:98:2f:c5:cf:cd:8f:34:54:37:26:cd:14:
                    62:60:c3:fa:29:1d:9c:f4:0f:12:90:52:1a:a9:3c:
                    88:3f:1c:90:dc:9e:40:1d:53:8d:d8:41:82:57:2b:
                    ab:2a:f8:9f:d8:a8:df:fc:3c:59:e4:39:c7:a3:42:
                    29:92:f3:82:b3:e7:03:aa:36:f6:49:e9:b6:d0:08:
                    f8:28:fe:5b:d4:27:5c:ed:1c:49:47:1a:5b:7b:10:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:53:24:26:9C:EE:EC:8B:82:E1:5A:87:38:E7:72:2D:18:02:1E:BC
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS393577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:15d8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:5f:8f:c4:73:b7:2f:f9:1d:96:15:e6:1c:48:f0:ad:89:cf:
         64:bd:eb:46:46:a1:45:f8:c9:fe:ab:bb:f3:52:7c:c5:f4:85:
         68:af:64:b1:6e:a2:25:3b:40:41:44:91:86:f7:0a:e5:37:20:
         58:cf:b7:6d:1f:e8:26:30:0f:0c:21:09:6e:1b:1d:11:0b:df:
         05:5c:6e:69:81:32:56:81:7a:02:70:68:a7:f9:23:7a:42:52:
         30:c9:24:bf:d1:17:a6:b5:75:86:0c:48:c5:02:45:bc:ea:36:
         79:43:a6:8d:fc:7e:8b:45:d7:ad:8f:36:06:8e:85:d4:9b:ed:
         50:eb:1e:32:1f:08:20:b2:33:82:fc:d1:33:e9:96:80:21:0f:
         61:29:09:55:52:93:78:e3:0a:89:00:55:1a:c2:32:ae:2b:1f:
         23:42:26:a3:33:5b:09:4e:9f:d0:af:2d:76:a0:c5:84:6d:bb:
         0e:be:b2:21:3b:6f:2d:46:ca:e0:54:4a:cc:25:d4:63:9a:78:
         6c:58:0a:9d:90:60:ea:30:5e:e4:16:67:00:db:5d:1f:73:fc:
         55:4d:f9:8a:6f:c2:6c:4c:84:67:63:57:fd:62:42:1d:7d:96:
         da:19:8f:69:cb:92:b7:fe:4e:bf:c7:d7:d4:e3:fd:cf:60:0e:
         76:26:13:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:02 2026 by rpki-client