Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          lKdSk/j2tj/66LyL5/m9rRBPxQj8FX50bDRRoumnkBw=
Subject key identifier:   07:A3:9F:46:95:FF:FD:01:0D:42:F8:A9:70:CC:B5:01:C6:DE:69:9A
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       729F47DBCFA5EB45AF76CE86A08228D9F5AA7C21
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 05 Jun 2026 01:06:28 +0000
ROA not before:           Fri 05 Jun 2026 01:01:28 +0000
ROA not after:            Fri 04 Jun 2027 01:06:28 +0000
asID:                     16909
IP address blocks:        2a0f:6287:f3a1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9f:47:db:cf:a5:eb:45:af:76:ce:86:a0:82:28:d9:f5:aa:7c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:28 2026 GMT
            Not After : Jun  4 01:06:28 2027 GMT
        Subject: CN=07A39F4695FFFD010D42F8A970CCB501C6DE699A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:07:89:fd:81:33:06:0b:92:4d:a0:cf:43:
                    1e:55:03:b3:e6:83:b5:0e:7a:d4:96:7d:ad:60:28:
                    4a:d6:a8:6a:4b:bb:4e:97:08:a4:d4:5b:e1:e6:98:
                    82:5e:8c:c2:e1:06:d2:cf:84:40:bb:f9:a2:99:75:
                    f8:fc:2a:f7:17:67:8b:35:8d:2f:91:5e:34:22:eb:
                    66:b3:85:20:7d:58:c3:7b:7f:5b:b7:82:10:00:fb:
                    61:34:9e:47:f2:2c:4a:66:e6:8d:a4:1c:83:ac:50:
                    1f:93:bf:22:b0:16:6c:df:3d:0d:3e:bd:ba:06:e1:
                    d7:3b:ee:91:9f:79:5d:22:66:d8:8a:af:22:7a:30:
                    f7:31:75:cf:56:d9:3f:2d:4e:26:6f:bf:b6:f9:a7:
                    ae:cc:2b:da:a5:8b:58:f9:2e:70:1f:74:45:7c:58:
                    dc:c0:b4:b1:58:52:bd:f7:b9:7b:03:d1:83:1c:7b:
                    c1:ca:44:ba:00:32:ff:e2:a7:3e:18:4b:fe:c3:40:
                    2a:a7:78:43:53:b2:b3:7c:48:bb:c8:41:6b:c2:12:
                    bb:8c:7e:71:43:50:a5:6d:88:9d:b6:41:81:bf:52:
                    30:8b:c9:f4:1c:c2:52:c7:d3:7d:08:70:8c:54:d5:
                    d4:5a:97:73:fd:0c:de:e6:40:49:19:9a:64:02:3c:
                    be:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A3:9F:46:95:FF:FD:01:0D:42:F8:A9:70:CC:B5:01:C6:DE:69:9A
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663361313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f3a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:56:97:87:cb:9b:55:99:71:d3:e7:50:36:90:10:1d:20:
         da:dd:6e:92:c0:3f:65:d2:f4:92:ef:8e:3e:02:ab:00:cb:3d:
         84:04:b6:be:40:8d:4c:69:d2:f4:82:1f:ae:44:8b:60:84:17:
         7d:e2:ac:49:ac:40:8a:75:cb:af:03:94:e2:59:df:53:91:4c:
         4b:80:26:86:5c:33:00:da:be:a4:ac:b9:81:79:ca:38:91:63:
         90:e3:6c:cd:1a:40:1c:2e:13:ee:1b:49:5e:af:c7:cf:ee:9a:
         39:7b:a0:b1:07:9e:62:46:8b:b4:f2:67:25:d6:5e:ab:e0:f1:
         80:0f:3d:2a:9c:bd:25:5d:db:55:b2:ba:d6:f2:20:a3:d3:f6:
         8b:5a:64:d6:85:30:01:de:a3:aa:ac:1e:cc:5a:3d:72:f3:0c:
         ef:3b:c2:8a:31:d2:3e:0b:fc:ae:9b:b8:e7:58:f1:b4:10:97:
         d1:fa:f8:9e:74:fc:7c:06:b1:e1:65:67:24:d7:ef:0b:d9:68:
         a2:98:fe:cb:66:ce:bf:31:55:a9:75:da:82:e7:63:81:33:e5:
         b6:87:df:b6:c6:d4:4f:61:d2:62:03:8d:c2:10:4d:de:2b:96:
         23:d1:a4:e3:00:49:58:c1:a9:f8:29:02:6e:c9:de:ad:b3:6f:
         67:9f:70:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:53 2026 by rpki-client