Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a3230303a3a2f34302d3430203d3e203437323732.roa
File:                     323630323a663936643a3230303a3a2f34302d3430203d3e203437323732.roa (raw, json)
Hash identifier:          GQEneImvhh7+t0LY5tXgsLEI6gP3jLGdkApn8aZHUdE=
Subject key identifier:   79:4D:56:8A:33:76:51:5A:2B:F6:B4:1B:39:1D:FC:5E:8C:D5:95:A0
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       6B853DE2441F05BBFC30A16F09FCCE9BB016697F
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3230303a3a2f34302d3430203d3e203437323732.roa
Signing time:             Wed 07 Oct 2026 13:46:23 +0000
ROA not before:           Wed 07 Oct 2026 13:41:23 +0000
ROA not after:            Wed 06 Oct 2027 13:46:23 +0000
asID:                     47272
IP address blocks:        2602:f96d:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:85:3d:e2:44:1f:05:bb:fc:30:a1:6f:09:fc:ce:9b:b0:16:69:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Oct  7 13:41:23 2026 GMT
            Not After : Oct  6 13:46:23 2027 GMT
        Subject: CN=794D568A3376515A2BF6B41B391DFC5E8CD595A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:ee:e1:6c:01:03:33:ad:32:96:10:74:e5:
                    cb:f7:b4:e3:34:7e:0a:61:e3:7f:4d:66:24:42:f0:
                    ce:4a:91:14:86:9a:6b:da:41:13:2f:04:6c:53:c8:
                    77:12:1d:f1:8b:50:e5:2b:e1:bc:87:f0:70:03:90:
                    24:6b:a1:d4:73:99:15:10:58:f7:63:c2:4a:ee:68:
                    40:1f:f2:2a:eb:50:88:ff:a0:83:5c:ee:5d:39:9c:
                    c6:f2:7c:b6:a6:80:2a:31:ac:9c:87:f6:04:05:fc:
                    82:9f:e0:3a:0f:c7:da:35:6a:bd:a3:4b:d2:8d:42:
                    7c:a6:85:12:80:52:4b:3a:9b:d4:15:df:df:19:1f:
                    ab:95:48:20:b4:e2:6e:08:ce:9a:47:59:e4:ca:da:
                    e0:d2:5e:af:e8:f0:81:15:70:0a:79:c9:07:21:81:
                    f8:86:ca:9b:93:d7:7b:7b:4c:af:cf:65:5e:b5:5a:
                    3f:e3:ba:8c:5d:a8:c5:fd:ab:c2:ab:f6:14:09:fb:
                    75:82:cc:42:7e:78:ba:ed:c7:5d:68:aa:70:93:e5:
                    f9:69:ce:c8:1b:f8:e3:3c:f3:71:82:32:6a:8a:b2:
                    d2:64:99:41:ac:52:3f:1b:f3:e3:06:6c:f9:2b:45:
                    90:80:74:2f:1e:bf:f5:bb:2f:9f:61:0b:e6:e9:e8:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4D:56:8A:33:76:51:5A:2B:F6:B4:1B:39:1D:FC:5E:8C:D5:95:A0
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3230303a3a2f34302d3430203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:7e:4e:af:d5:4a:40:e3:ab:f2:4e:f5:28:af:f4:36:37:
         ca:4f:29:b4:7a:3d:76:53:3d:30:83:34:6c:c7:30:03:16:17:
         88:ff:aa:7c:96:ab:38:a5:63:25:ad:94:18:ae:64:dc:a9:d2:
         38:f2:45:e4:8f:66:e8:6f:e3:e4:3a:85:f5:ab:a4:e1:22:e9:
         63:e2:ae:60:02:c8:2a:69:1b:75:ec:99:df:60:cf:10:6d:54:
         f6:dd:c5:90:6f:28:d3:74:66:cb:e8:2d:2a:5c:6c:e2:c7:18:
         d7:6f:b5:d9:30:35:c1:01:11:0b:88:85:68:9c:3e:81:9c:ed:
         a6:77:0f:a2:6c:c3:2c:c4:ea:23:63:87:81:7e:3a:54:36:a3:
         56:2b:b8:e2:47:14:4a:5c:6b:38:9e:af:48:3e:82:18:60:16:
         f5:5f:af:9b:ab:41:68:48:9b:11:2a:8b:77:14:fd:1d:a3:ff:
         4e:4e:be:65:c6:b7:50:40:02:df:29:09:7c:4f:77:de:e7:c2:
         8a:21:ab:07:9e:14:29:f5:84:ec:96:0f:3b:cc:b7:59:3e:96:
         4c:3e:04:b4:42:e8:18:eb:04:77:d6:60:4b:aa:36:f5:4f:6d:
         9e:ab:00:91:f6:4c:44:8c:9a:78:c0:23:8a:1d:35:79:7a:3b:
         0c:04:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:15:16 2026 by rpki-client