Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa
File:                     323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa (raw, json)
Hash identifier:          0tlj26s60PcPD1KkFybw3qzEZJUni0cfWvTxfHa3MyE=
Subject key identifier:   2D:02:17:C6:4D:06:A8:C1:CE:C0:E0:53:54:9B:00:EB:74:8E:C3:F2
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       4A5C23B4B3B7741C3471A70E4CF8DBCB74ADF248
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa
Signing time:             Thu 04 Jun 2026 15:51:43 +0000
ROA not before:           Thu 04 Jun 2026 15:46:43 +0000
ROA not after:            Thu 03 Jun 2027 15:51:43 +0000
asID:                     47272
IP address blocks:        2602:f96d:f00::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5c:23:b4:b3:b7:74:1c:34:71:a7:0e:4c:f8:db:cb:74:ad:f2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jun  4 15:46:43 2026 GMT
            Not After : Jun  3 15:51:43 2027 GMT
        Subject: CN=2D0217C64D06A8C1CEC0E053549B00EB748EC3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:4f:95:0e:3a:68:50:37:e2:d7:8b:69:21:
                    57:6a:94:2d:f4:ec:f9:2f:6a:87:c1:bd:6d:87:44:
                    4e:81:e5:15:f1:05:30:01:cb:8a:5c:6f:fa:5a:67:
                    fa:1c:a2:28:1f:65:49:3d:c5:e0:09:19:f9:10:22:
                    cc:c3:32:bf:18:40:79:37:aa:5d:d7:6c:cb:73:59:
                    89:26:6a:60:71:9e:d7:70:bd:ce:64:96:02:0b:1c:
                    1a:75:84:39:54:0c:4f:ee:e9:53:14:85:87:38:4e:
                    5b:bb:9f:fd:aa:71:08:a1:ee:36:ed:01:32:39:55:
                    d6:07:9b:08:1b:a3:c8:80:c2:2c:16:56:6b:76:8b:
                    45:d1:da:91:88:c8:d3:66:60:e8:5b:ac:73:05:b8:
                    c7:f3:57:49:9b:a3:5b:25:75:f5:ef:4a:83:b0:8d:
                    ac:4e:41:19:25:89:78:b0:b8:8a:42:55:19:a6:1b:
                    5b:b7:2d:fc:0f:d6:79:55:4f:b2:71:eb:c0:63:f1:
                    ef:65:99:ac:d9:7e:3b:9e:22:ea:1e:91:e5:34:25:
                    16:8c:ea:23:60:25:f2:e9:61:09:8e:aa:90:eb:35:
                    72:ab:bb:aa:70:12:4c:2f:c8:95:10:c0:ea:c9:d8:
                    b6:16:81:15:52:2f:e1:eb:53:9c:52:31:e9:0b:85:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:02:17:C6:4D:06:A8:C1:CE:C0:E0:53:54:9B:00:EB:74:8E:C3:F2
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f00::/44

    Signature Algorithm: sha256WithRSAEncryption
         be:2b:9c:99:74:0d:4e:ce:70:75:81:55:cd:49:e5:01:0d:22:
         25:0b:47:b9:35:ac:92:ff:2e:c8:33:2d:68:fd:e2:33:06:65:
         ba:ff:ce:bb:3d:e2:12:40:50:2c:0f:75:ee:a2:c1:76:93:85:
         c2:ab:50:79:82:ac:d4:ea:80:1a:12:53:92:ec:34:04:18:a0:
         46:02:45:e8:27:22:3e:da:89:0e:12:f1:e0:df:7d:41:32:56:
         40:45:8a:25:2f:71:43:d2:a1:f7:5d:63:d4:ca:0e:bd:0e:bf:
         74:fd:83:36:7f:93:a9:bc:58:6a:aa:57:62:72:a5:e2:af:45:
         51:09:8d:81:18:08:d9:3c:08:8e:17:d1:3d:41:59:cc:ac:d0:
         ef:db:b8:45:d3:52:8f:30:de:04:67:30:6b:34:80:aa:67:64:
         c4:3a:9d:33:b7:ae:13:1e:90:62:ec:9d:f3:54:ef:8d:74:6a:
         99:f0:ee:e0:8d:ac:68:22:62:0d:d0:6a:a6:e4:74:bc:96:bd:
         42:bc:71:55:3d:41:bd:1a:65:47:2d:16:0c:5c:31:ed:a1:40:
         66:10:3c:9d:c1:6c:ee:44:40:08:45:d6:6d:32:a9:4b:66:21:
         3f:2e:af:ee:cb:41:00:72:fa:8c:dd:7f:8c:00:29:76:eb:08:
         53:dc:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:28 2026 by rpki-client