Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa
File:                     323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa (raw, json)
Hash identifier:          7KEDdp4MVnFk2MNAdhLx7ee2v7Zd0d+A4Di7YQYIY9I=
Subject key identifier:   21:EC:11:0B:5F:C1:97:0E:47:F5:C0:FE:00:07:D6:E6:95:17:4B:C7
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       4C7561892816722B32168C420C47FD8D2CC47AE7
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa
Signing time:             Thu 04 Jun 2026 15:51:44 +0000
ROA not before:           Thu 04 Jun 2026 15:46:44 +0000
ROA not after:            Thu 03 Jun 2027 15:51:44 +0000
asID:                     51939
IP address blocks:        2602:f96d:f20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:75:61:89:28:16:72:2b:32:16:8c:42:0c:47:fd:8d:2c:c4:7a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jun  4 15:46:44 2026 GMT
            Not After : Jun  3 15:51:44 2027 GMT
        Subject: CN=21EC110B5FC1970E47F5C0FE0007D6E695174BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:94:39:ac:a6:f0:bf:ad:0d:7b:42:d1:72:b9:
                    b8:b2:80:da:ef:cd:33:c0:5b:9b:1f:63:42:40:d1:
                    2b:03:fc:43:81:aa:ec:fd:9b:99:70:7d:1e:1e:51:
                    a3:44:9d:7d:ed:8b:1d:07:fa:3a:77:73:28:91:80:
                    8d:d8:59:b1:d3:e7:dd:65:83:43:97:f5:82:73:ee:
                    4d:7c:0e:0a:fe:7d:9e:be:86:a0:0b:26:5b:b0:51:
                    ab:d2:b1:a3:10:01:d3:7e:48:c9:a4:5a:60:e4:fe:
                    7d:c7:95:f8:0f:70:3a:30:b8:59:9e:ff:63:05:37:
                    63:ce:46:87:15:9c:ea:48:81:b7:3a:a2:fa:dc:a2:
                    a9:24:05:2d:72:28:46:fb:09:c4:5a:0f:e6:ec:8e:
                    b7:c9:e2:8f:18:65:5d:0f:90:9f:dc:24:89:e0:02:
                    c9:66:fc:cd:e3:1f:61:4d:b0:a9:ec:16:61:63:78:
                    58:bf:5c:23:e7:e8:f7:05:89:f9:64:97:fb:6d:6b:
                    0c:b6:a5:34:65:39:95:a6:c8:a9:0f:9f:40:e4:6e:
                    ae:de:8b:83:21:c8:0a:07:47:b1:3b:ec:bd:e0:e4:
                    36:57:3b:72:93:ae:06:9c:7f:76:e1:c2:8d:ec:23:
                    96:1e:0a:e2:26:90:4c:fe:7d:3a:0a:8e:22:a8:ca:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EC:11:0B:5F:C1:97:0E:47:F5:C0:FE:00:07:D6:E6:95:17:4B:C7
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6632303a3a2f34342d3438203d3e203531393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f20::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:ca:0b:25:52:9d:be:05:ee:89:bc:c8:1f:a8:23:ef:f0:
         17:b4:77:b0:9c:fe:3a:99:e9:6a:07:c9:f7:a2:81:58:70:a8:
         56:ea:ee:08:2f:1b:88:7f:fd:76:bd:79:dc:b7:3c:d2:0a:1d:
         19:e7:81:b0:4c:5e:9d:ed:8d:4a:7c:12:5f:bc:29:1c:66:32:
         a8:29:69:da:6d:37:a2:13:d7:89:11:92:c1:d5:07:bc:41:da:
         23:17:54:07:8a:01:63:ef:ad:6f:bc:15:59:57:88:76:49:87:
         61:4d:2d:4c:93:5b:c3:69:1d:46:4a:71:76:57:86:d6:e5:c2:
         82:66:41:ee:ad:7c:94:1d:43:01:c7:d2:da:66:ab:b4:5c:f4:
         31:8d:b6:af:ee:23:b6:a0:61:e1:3b:b5:3d:ad:24:5a:af:98:
         f0:f8:af:56:88:2f:b3:2a:78:f9:77:f6:4c:06:b1:ee:8f:33:
         a6:0f:12:08:cd:c3:fd:9e:e8:d8:f3:67:b1:ba:e5:d0:c3:5f:
         36:3c:de:7e:45:ed:a5:0f:5b:a8:23:46:9d:c7:44:77:24:be:
         b8:db:6c:f1:95:df:ee:7f:db:37:71:64:3e:ac:37:a1:9d:9f:
         c7:d2:76:c1:1e:1e:f7:15:8f:b0:e1:41:c3:a7:41:1b:a3:0b:
         67:7d:4e:f3
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIUTHVhiSgWcisyFoxCDEf9jSzEeucwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYWQzMTkyODNmYjI0MjJiNGQwMGMwODQ5
YjlhODNjOTY0NGY4ODhjYmIwHhcNMjYwNjA0MTU0NjQ0WhcNMjcwNjAzMTU1MTQ0
WjAzMTEwLwYDVQQDEygyMUVDMTEwQjVGQzE5NzBFNDdGNUMwRkUwMDA3RDZFNjk1
MTc0QkM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZQ5rKbwv60N
e0LRcrm4soDa780zwFubH2NCQNErA/xDgars/ZuZcH0eHlGjRJ197YsdB/o6d3Mo
kYCN2Fmx0+fdZYNDl/WCc+5NfA4K/n2evoagCyZbsFGr0rGjEAHTfkjJpFpg5P59
x5X4D3A6MLhZnv9jBTdjzkaHFZzqSIG3OqL63KKpJAUtcihG+wnEWg/m7I63yeKP
GGVdD5Cf3CSJ4ALJZvzN4x9hTbCp7BZhY3hYv1wj5+j3BYn5ZJf7bWsMtqU0ZTmV
psipD59A5G6u3ouDIcgKB0exO+y94OQ2Vztyk64GnH924cKN7COWHgriJpBM/n06
Co4iqMpRcwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFCHsEQtfwZcOR/XA/gAH1uaV
F0vHMB8GA1UdIwQYMBaAFID1Ai1qifTqV6sPYTHTNmGqwwvpMA4GA1UdDwEB/wQE
AwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzovL2tyaWxsLjQ3MjcyLm5ldC9y
ZXBvL0hZRUhPU1QvMS84MEY1MDIyRDZBODlGNEVBNTdBQjBGNjEzMUQzMzY2MUFB
QzMwQkU5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5
bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEy
M2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QvMDJjNzcwNmItM2JhZi00MmNiLWJkZjctNzgy
YjAzNjI1MmIzL2Y0NGM4MmRhYmFkMzE5MjgzZmIyNDIyYjRkMDBjMDg0OWI5YTgz
Yzk2NDRmODg4Y2JiLmNlcjCBgwYIKwYBBQUHAQsEdzB1MHMGCCsGAQUFBzALhmdy
c3luYzovL2tyaWxsLjQ3MjcyLm5ldC9yZXBvL0hZRUhPU1QvMS8zMjM2MzAzMjNh
NjYzOTM2NjQzYTY2MzIzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDM1MzEzOTMz
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQmAvltDyAwDQYJKoZIhvcNAQELBQADggEBACTvygslUp2+
Be6JvMgfqCPv8Be0d7Cc/jqZ6WoHyfeigVhwqFbq7ggvG4h//Xa9edy3PNIKHRnn
gbBMXp3tjUp8El+8KRxmMqgpadptN6IT14kRksHVB7xB2iMXVAeKAWPvrW+8FVlX
iHZJh2FNLUyTW8NpHUZKcXZXhtblwoJmQe6tfJQdQwHH0tpmq7Rc9DGNtq/uI7ag
YeE7tT2tJFqvmPD4r1aIL7MqePl39kwGse6PM6YPEgjNw/2e6NjzZ7G65dDDXzY8
3n5F7aUPW6gjRp3HRHckvrjbbPGV3+5/2zdxZD6sN6Gdn8fSdsEeHvcVj7DhQcOn
QRujC2d9TvM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:20 2026 by rpki-client