Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa
File:                     323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          QzCmM6qpY6FLlJQ2xm0Djf+wDm5AcrS9qTJDV9Z7PWA=
Subject key identifier:   E3:50:40:C7:A6:90:8B:90:25:AC:9A:4F:BD:1E:DB:0C:46:F7:22:61
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       4F2D88B865B7CEB786FB7597123D280F3A78EA69
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa
Signing time:             Thu 04 Jun 2026 15:51:44 +0000
ROA not before:           Thu 04 Jun 2026 15:46:44 +0000
ROA not after:            Thu 03 Jun 2027 15:51:44 +0000
asID:                     47272
IP address blocks:        2602:f96d:f72::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:2d:88:b8:65:b7:ce:b7:86:fb:75:97:12:3d:28:0f:3a:78:ea:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jun  4 15:46:44 2026 GMT
            Not After : Jun  3 15:51:44 2027 GMT
        Subject: CN=E35040C7A6908B9025AC9A4FBD1EDB0C46F72261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f5:a8:b1:bf:c5:77:c4:c0:d1:5c:72:57:9b:
                    96:54:05:87:8b:e6:ab:6a:8a:5b:1a:00:cf:9f:76:
                    57:df:d0:f2:c6:bd:00:ef:d3:f6:e9:d6:27:5b:e3:
                    c3:54:bc:5c:e8:34:3b:3f:ac:e9:d0:3a:93:8b:df:
                    da:d5:a1:c1:02:92:0f:5b:8f:eb:6e:e4:26:11:3e:
                    c0:77:a5:78:d9:07:8d:01:1c:63:e7:c7:2d:d3:a7:
                    4b:b5:f5:96:ba:87:19:15:d4:02:02:ef:33:43:80:
                    22:8b:af:d7:b7:f5:6b:16:fb:52:a8:a8:e7:23:88:
                    27:a9:9c:bf:ba:f2:19:31:df:21:e1:b3:68:ab:1b:
                    72:2a:a3:22:29:ff:4f:10:5e:83:c4:cc:b1:eb:74:
                    50:df:62:b6:8b:f2:0b:5f:fd:23:ca:32:ac:e3:0e:
                    ef:61:f6:6b:9b:00:2b:69:bb:31:ab:46:e0:96:b9:
                    33:1e:2c:57:0e:6f:e5:08:9f:40:dc:b4:65:53:cd:
                    14:db:f1:44:3f:d5:2f:66:2f:22:8b:8f:0d:35:a0:
                    d0:bb:44:61:08:87:9a:6c:9f:53:cb:be:59:50:f8:
                    69:bc:27:a8:bf:d1:34:bf:be:e3:c9:df:4f:e4:7f:
                    7b:3b:b5:5d:07:07:a0:f5:c9:7c:74:3e:c0:9d:a4:
                    36:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:50:40:C7:A6:90:8B:90:25:AC:9A:4F:BD:1E:DB:0C:46:F7:22:61
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f72::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:7a:50:ab:27:3b:64:27:1a:c2:43:66:f8:8c:e9:f5:d8:64:
         82:a0:93:2a:7f:ba:f6:03:65:95:77:2c:32:31:f6:31:fc:a6:
         cf:7b:a5:81:9c:7f:7f:ba:51:56:d1:64:b2:ad:7b:86:cd:d1:
         fb:10:0f:2c:c0:96:35:d3:9f:e8:9e:b6:39:58:a7:5b:55:a8:
         b5:33:2d:5e:2b:1e:25:e8:4c:48:86:bf:a5:66:a0:87:37:3e:
         e0:41:24:a7:c9:57:43:d1:ef:6c:90:5a:b8:3d:41:23:95:58:
         ba:ed:8e:93:4f:2a:f6:a8:d4:0d:4d:42:82:ae:b6:66:8c:0d:
         8c:50:67:2a:70:21:e5:a6:1a:93:a7:57:04:b8:eb:d0:3a:9c:
         d7:ff:4c:7e:df:62:3d:b1:e1:4e:f8:d3:c6:b9:67:20:d4:ae:
         85:3a:8d:d5:76:28:5f:8e:20:f9:d0:3a:80:f0:1e:5d:70:d1:
         01:55:9f:4a:10:6c:29:ed:94:2e:01:07:8c:78:45:fb:11:7d:
         d1:09:76:be:d6:95:a4:27:0a:c1:99:39:9a:46:d3:9b:a4:a9:
         98:b9:e9:e9:f8:43:12:9d:f5:ea:2f:45:ae:b4:5f:01:0f:30:
         67:29:75:25:bd:84:3d:a2:15:8e:d1:f3:a4:3a:44:98:fe:e2:
         7d:fa:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:11 2026 by rpki-client