Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663933643a3a2f34382d3438203d3e203136393039.roa
File:                     326130663a363238373a663933643a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Et1EP4hAWkBabcN65VJu+h7mtGg2RN5e7wpH+fooJnY=
Subject key identifier:   CA:09:21:0F:A6:6B:D6:A1:89:67:A0:9B:4A:5E:03:FE:BE:6D:62:B3
Certificate issuer:       /CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
Certificate serial:       175577E58D9306E6E346F12401964A6E23AFBC32
Authority key identifier: 01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663933643a3a2f34382d3438203d3e203136393039.roa
Signing time:             Fri 05 Jun 2026 01:06:24 +0000
ROA not before:           Fri 05 Jun 2026 01:01:24 +0000
ROA not after:            Fri 04 Jun 2027 01:06:24 +0000
asID:                     16909
IP address blocks:        2a0f:6287:f93d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:55:77:e5:8d:93:06:e6:e3:46:f1:24:01:96:4a:6e:23:af:bc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15
        Validity
            Not Before: Jun  5 01:01:24 2026 GMT
            Not After : Jun  4 01:06:24 2027 GMT
        Subject: CN=CA09210FA66BD6A18967A09B4A5E03FEBE6D62B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:1b:68:4b:d0:c2:9a:f5:20:25:85:26:ab:
                    66:75:cb:9d:58:4e:df:34:5c:2f:57:4e:a1:2c:67:
                    53:d4:0d:4e:fc:51:06:38:79:57:33:68:98:d9:a7:
                    4f:f4:03:b1:ed:3b:c9:9f:b4:51:33:e5:18:6f:34:
                    01:e8:d8:83:46:8d:91:40:b9:6c:ec:7b:3e:41:c8:
                    9d:2c:85:fb:e5:21:f5:3e:4e:d7:52:92:5a:57:da:
                    cb:1a:32:70:8a:f4:e2:65:fa:da:a2:54:4d:13:c4:
                    55:f4:4e:22:8a:32:8b:e0:09:dc:a8:5d:20:1b:b5:
                    9f:43:9c:e6:22:4c:1d:a9:76:ae:90:43:23:34:a0:
                    7a:6e:2d:20:88:68:8d:29:de:62:19:55:ba:31:3a:
                    e7:61:e9:04:13:ea:79:58:b6:47:5c:77:a7:99:fe:
                    9a:7e:47:bd:80:cb:5c:9c:d3:4c:5f:ce:99:68:b5:
                    7b:4a:a4:92:7e:ee:e5:13:79:d7:e8:d9:e4:4c:09:
                    9f:71:07:c3:54:88:14:04:9a:1a:86:ba:5d:2e:41:
                    e0:ab:0a:4b:22:81:4f:31:1a:ed:ff:70:01:76:83:
                    9d:2f:55:c3:ce:6a:17:0e:d9:a8:81:d3:40:a5:8c:
                    37:5f:58:da:01:11:82:b4:b7:b4:65:81:5c:59:4b:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:09:21:0F:A6:6B:D6:A1:89:67:A0:9B:4A:5E:03:FE:BE:6D:62:B3
            X509v3 Authority Key Identifier:
                keyid:01:5C:70:6E:4D:5C:D4:BD:25:FB:BE:8F:83:90:C8:4A:7C:F5:7D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/015C706E4D5CD4BD25FBBE8F8390C84A7CF57D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/3/326130663a363238373a663933643a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f93d::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:0d:0c:c7:0b:1a:a4:e7:91:b6:44:44:ca:6e:12:fb:f5:0f:
         d0:a0:ab:8e:54:9b:7e:72:d4:35:4d:64:f5:00:b7:61:e5:77:
         40:ca:d4:3a:f4:98:bb:e3:38:8f:e9:65:06:1e:e8:8f:95:30:
         2c:b4:f1:7c:d7:31:c3:0f:f0:07:72:48:4f:dc:f4:0c:c9:e2:
         fc:2b:51:12:3c:a6:c9:38:22:c0:05:6b:ef:0b:a0:52:e7:78:
         1e:6f:69:e9:e8:79:19:85:38:ca:33:de:4d:c8:48:bd:d0:f1:
         aa:bd:aa:6a:5c:74:be:9a:b1:28:e7:d5:29:6d:20:fc:a0:a4:
         eb:dc:eb:69:23:5e:94:e6:55:59:c0:4b:a2:f3:3b:4f:d3:40:
         f2:f2:a8:f3:3d:1f:6f:30:70:24:75:ff:05:02:ed:a1:dc:09:
         05:ed:45:b7:db:f0:19:11:69:3d:a1:76:21:30:d0:2b:eb:88:
         e5:b5:98:66:a1:6f:2e:ef:1c:a1:dc:b7:57:f5:17:f7:4d:96:
         4f:b0:8f:44:39:8a:f2:cb:8e:42:36:3c:c2:f1:38:03:22:a9:
         10:3b:7f:72:04:04:e6:f0:c4:07:f8:a0:08:c7:31:8d:20:41:
         a0:13:b9:dc:f9:bd:d1:ac:e2:16:6b:62:9f:d7:21:a4:b1:b8:
         40:de:1f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:03 2026 by rpki-client