Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Z6MR2I2EzUQnYhLZTkrNbKkT1NnyrCoxeyxP7vFxf8Y=
Subject key identifier:   BE:59:E1:65:D2:8E:81:0D:22:6C:A2:4A:7D:00:AC:1B:89:FD:C4:39
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       6A2B8E99FF4E63BB12C7C000B2F2A7A8F318DDCE
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 05 Jun 2026 01:06:23 +0000
ROA not before:           Fri 05 Jun 2026 01:01:23 +0000
ROA not after:            Fri 04 Jun 2027 01:06:23 +0000
asID:                     16909
IP address blocks:        2a0f:6287:f7f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2b:8e:99:ff:4e:63:bb:12:c7:c0:00:b2:f2:a7:a8:f3:18:dd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:23 2026 GMT
            Not After : Jun  4 01:06:23 2027 GMT
        Subject: CN=BE59E165D28E810D226CA24A7D00AC1B89FDC439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:e7:e4:ee:90:a5:d4:63:d7:f9:73:1d:c2:
                    c6:fd:9e:9d:f1:b5:cb:31:b6:d6:78:42:de:f0:9d:
                    71:df:63:ac:26:36:c4:fa:8a:0b:19:27:05:7b:28:
                    88:79:69:1e:be:8c:be:2d:da:ac:9d:93:fb:66:9a:
                    86:40:4e:17:d5:5f:ae:b4:7f:7d:f1:8f:be:44:7c:
                    8d:26:b2:c0:6b:c8:67:5b:c4:14:62:fa:3f:c7:c4:
                    69:88:52:0b:52:b1:db:4a:ee:b1:7b:d5:ba:26:8b:
                    29:b9:6b:01:a2:d8:a0:da:04:fa:80:7f:11:d9:0c:
                    34:4f:59:f3:9f:7e:95:45:e4:11:32:c2:ed:be:f7:
                    dc:01:f6:9e:4e:c2:55:36:83:73:1f:da:f3:aa:15:
                    22:67:89:2d:b9:4e:b8:58:9c:b0:62:c6:4e:ad:18:
                    e1:79:99:0a:ad:83:8b:52:5b:ad:0a:f9:c3:aa:50:
                    2c:c1:1f:ac:5f:c2:39:ce:32:b2:9d:ea:91:ac:90:
                    6b:db:35:30:ca:0d:0e:33:98:12:71:25:2c:09:d8:
                    e8:60:da:ec:de:7e:19:0c:a8:98:40:04:c4:73:27:
                    66:14:b7:2b:96:26:05:e1:6f:31:34:f4:86:d1:21:
                    fb:92:31:74:4a:1b:2d:35:54:eb:c9:ff:79:41:89:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:59:E1:65:D2:8E:81:0D:22:6C:A2:4A:7D:00:AC:1B:89:FD:C4:39
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663766303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f7f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:dc:e1:25:5b:2a:71:d1:f7:77:2f:23:1c:92:c9:1f:14:66:
         75:db:b0:6b:15:ef:eb:26:76:01:c3:d2:79:6e:a1:89:fb:2f:
         9a:67:86:f5:f0:f1:39:8a:69:8d:b3:68:60:d8:ab:0c:9b:67:
         60:da:fc:91:85:37:88:06:7b:c6:57:58:9b:73:49:3d:ef:46:
         40:81:2e:a6:9f:f6:63:ae:a4:b6:8d:ff:3b:00:f0:76:61:1c:
         ff:47:9f:8e:0d:2f:93:6c:bd:15:51:0e:62:6b:a9:6d:44:e5:
         cc:05:5f:c6:86:c7:18:74:75:85:c9:6b:cf:44:82:9d:85:36:
         c7:c3:86:9a:ad:e6:99:5b:e5:57:30:64:cc:07:bc:4b:b2:b7:
         9b:bb:ae:bc:07:5a:2b:b7:9a:75:1e:c3:69:1e:9f:0f:ef:2b:
         d8:2d:b3:a4:f7:26:87:c2:f4:9d:60:5b:17:71:24:1c:9e:9c:
         52:1e:f6:b7:02:26:b9:a8:c8:3f:8e:1d:10:f2:ee:8d:eb:d8:
         a4:02:a1:60:89:1a:8d:5a:94:10:20:0e:14:4d:67:34:24:22:
         d8:d9:a5:e7:7b:e1:0d:6b:c2:b8:5e:da:89:21:8c:b5:65:c9:
         21:3e:8f:af:20:a3:40:c4:e5:f1:29:04:9e:bf:05:6c:1b:d0:
         f9:4a:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:51 2026 by rpki-client