Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          vU0rPxVEv03kRFWE+rHvywgYtizk7eTGi0GEslIMCfg=
Subject key identifier:   96:C1:31:C9:13:22:59:AA:FE:15:24:77:88:CD:92:6E:61:B8:05:B0
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       2D3A09F6B923AAC3D988B77E148F495EC34D0D0C
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 05 Jun 2026 01:06:27 +0000
ROA not before:           Fri 05 Jun 2026 01:01:27 +0000
ROA not after:            Fri 04 Jun 2027 01:06:27 +0000
asID:                     16909
IP address blocks:        2a0f:6287:f7af::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3a:09:f6:b9:23:aa:c3:d9:88:b7:7e:14:8f:49:5e:c3:4d:0d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:27 2026 GMT
            Not After : Jun  4 01:06:27 2027 GMT
        Subject: CN=96C131C9132259AAFE15247788CD926E61B805B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:61:38:f0:a2:d4:8e:77:23:c5:1c:a1:44:
                    3b:37:8a:f8:f1:64:e3:cb:e6:a0:ad:04:23:e7:8d:
                    69:e3:bd:cd:c6:4b:77:07:aa:66:8a:6a:e0:0f:50:
                    36:91:8a:56:ae:14:dd:8c:6b:b1:94:1f:43:d5:9f:
                    61:19:43:1b:67:17:16:d4:7f:0a:ce:d0:86:e6:8b:
                    15:07:cb:ec:02:0c:2d:be:ac:66:31:43:f7:59:df:
                    2d:01:e7:c5:2f:95:47:1d:ea:dd:e5:7b:80:86:72:
                    02:4a:1e:1f:76:38:75:4b:74:a3:31:b6:aa:6c:59:
                    09:1d:8b:11:e7:88:15:a3:78:49:f7:68:02:db:77:
                    95:32:9a:a4:85:da:46:d1:7c:42:07:cd:3a:c9:e2:
                    53:78:fd:25:5c:32:1b:b6:f1:1d:11:00:7a:b7:25:
                    d6:7e:70:a7:15:5e:28:27:b2:f4:4f:f5:cf:ad:92:
                    27:d6:b8:e8:9e:7a:bc:14:71:9e:9b:22:f2:9d:d3:
                    30:e0:86:60:30:65:8d:2e:a9:69:3b:54:7a:cc:2f:
                    4a:3b:d0:ed:5f:46:eb:97:12:42:8b:24:5a:5e:19:
                    84:ea:9f:b9:4f:02:b4:51:82:c5:4d:bf:43:44:9f:
                    f1:a0:68:86:0c:10:71:a6:2e:31:0a:4c:43:ec:23:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C1:31:C9:13:22:59:AA:FE:15:24:77:88:CD:92:6E:61:B8:05:B0
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663761663a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f7af::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:aa:ea:cf:c7:29:5c:7b:2b:09:7c:80:29:22:d6:ad:12:7e:
         bd:ed:6f:03:60:14:23:d2:0b:07:57:c4:68:17:9e:9a:2b:d4:
         73:6e:44:cd:55:ea:99:25:d1:15:21:12:1b:7e:ae:5a:f6:85:
         4b:8a:4f:c1:d7:0b:c0:0a:c4:f8:68:0e:be:72:f8:d6:8a:ba:
         42:fb:1b:f3:ab:5a:9e:7c:92:da:a5:01:22:dd:a5:eb:b8:e8:
         10:a6:19:60:28:c8:d6:73:e9:30:2c:1a:3b:b2:72:a9:52:fe:
         8a:b9:f7:ee:45:ee:77:30:75:48:20:40:5e:37:3b:d8:45:90:
         d3:3f:3f:1c:be:78:9e:0f:ec:7f:63:18:97:22:7b:dd:47:dd:
         19:19:78:01:1f:66:cf:99:75:84:28:98:3e:7b:1d:68:a8:fe:
         18:1b:72:c0:bc:9e:7b:ce:3f:56:86:70:da:f2:52:3f:ee:e7:
         45:59:8a:87:dd:52:6a:9e:e7:63:da:ec:57:39:9a:75:8e:d3:
         43:30:0c:4c:1a:f6:6d:1e:68:fd:e0:b4:12:10:de:3b:9a:be:
         65:32:18:bb:99:22:aa:16:b2:46:1f:b4:f3:3e:14:ce:f5:28:
         3a:8a:0a:b3:cd:e2:a2:39:7a:1b:74:d3:13:28:a2:43:34:d1:
         42:9b:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:47 2026 by rpki-client