Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa
File:                     323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa (raw, json)
Hash identifier:          ua2QcMmu14FmdE53mD1r6eGxuGSQh0VLvlPimxCDT5Q=
Subject key identifier:   26:D0:1D:7D:6E:40:86:DE:A8:00:EF:37:78:7C:B1:F9:E6:C1:07:3C
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       3167CE3DFB50C68A9203627DEB7612C6195DCFDC
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa
Signing time:             Thu 04 Jun 2026 15:51:43 +0000
ROA not before:           Thu 04 Jun 2026 15:46:43 +0000
ROA not after:            Thu 03 Jun 2027 15:51:43 +0000
asID:                     51939
IP address blocks:        2602:f96d:f23::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:67:ce:3d:fb:50:c6:8a:92:03:62:7d:eb:76:12:c6:19:5d:cf:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jun  4 15:46:43 2026 GMT
            Not After : Jun  3 15:51:43 2027 GMT
        Subject: CN=26D01D7D6E4086DEA800EF37787CB1F9E6C1073C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:7b:d8:1d:21:9a:60:5e:16:d2:7a:6b:80:
                    fd:42:db:96:de:96:8f:71:7a:99:95:3b:8e:4c:0e:
                    b4:4a:19:3b:9b:a7:e7:8e:52:07:ed:58:10:74:df:
                    bc:ef:1f:5f:b9:8b:3c:dc:2c:c5:ad:78:45:d4:eb:
                    2d:ba:da:8d:b1:10:c3:a7:34:e9:31:fd:1d:8a:b4:
                    18:8b:5b:0b:2a:2d:73:53:82:f4:12:9d:5a:6b:d1:
                    0d:c2:0d:70:6f:18:f6:4f:35:f0:b3:10:a2:09:94:
                    56:dc:8d:60:8b:fe:ff:44:30:b9:46:cb:77:12:2c:
                    69:4a:d6:ee:dc:bb:d0:55:0e:45:82:e2:dc:6c:a0:
                    8a:dc:5a:fa:8b:b4:1b:d5:1e:b7:3d:18:db:0d:ef:
                    4a:1e:32:d9:90:d9:13:06:7f:a0:1c:af:cf:69:09:
                    2a:b7:83:3a:55:c4:73:d8:38:f8:e5:4f:7a:78:76:
                    39:45:35:32:64:45:c8:d3:b1:e3:7e:f8:d1:2c:3a:
                    ac:20:5a:25:fb:8a:98:6b:af:6e:4c:a5:6e:ad:42:
                    ca:ca:46:01:9e:f1:93:7c:58:15:e1:67:15:e0:b7:
                    ab:d9:80:4f:d8:a0:84:5c:c4:b5:58:49:40:e3:b3:
                    97:a5:f3:f6:5d:8c:ba:98:62:ee:12:a0:db:e3:cf:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D0:1D:7D:6E:40:86:DE:A8:00:EF:37:78:7C:B1:F9:E6:C1:07:3C
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6632333a3a2f34382d3438203d3e203531393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f23::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:f7:84:cb:86:7d:cb:8a:09:e1:20:9e:01:35:d5:5e:0b:02:
         c4:64:8e:c3:b7:35:0d:c3:5a:de:92:4c:96:03:89:e0:b9:1c:
         0e:dc:a1:3d:a4:03:c8:c2:2d:d3:62:54:96:d9:99:db:75:6b:
         30:b1:e9:5d:09:37:98:1e:5a:5c:43:2f:cf:43:c0:c0:30:eb:
         08:41:e7:ac:37:d1:6d:49:da:7b:8c:c1:8c:9f:18:c1:94:69:
         9e:eb:b3:01:21:6d:8d:12:eb:11:3a:3f:66:72:ed:38:42:62:
         53:75:e7:40:de:c3:4c:65:5f:f9:79:0b:1d:ad:ff:2b:11:36:
         35:d2:fc:73:6d:4f:2a:a9:dd:24:07:30:32:57:19:c8:80:c3:
         d8:f6:f6:7a:66:5f:ce:a1:fc:24:ea:1e:cf:01:1b:02:e2:91:
         6a:7f:14:ca:ee:04:ed:b4:74:b8:4b:e8:ee:8f:e8:9f:36:46:
         a6:9b:d9:ef:57:b9:4a:f2:df:85:d0:da:0e:f9:69:a1:c4:79:
         5b:76:44:af:ab:e2:77:d3:90:57:7d:64:b7:d0:5e:bd:a9:38:
         3e:17:1b:3f:39:f5:5f:28:9b:ba:d2:4f:59:d4:9a:17:3c:0a:
         86:dc:c2:8d:25:8a:b7:5a:b3:c0:0f:40:3d:9b:86:8e:2c:49:
         8d:58:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:05 2026 by rpki-client