Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/4/3139322e36372e33352e302f32342d3234203d3e203437323732.roa
File:                     3139322e36372e33352e302f32342d3234203d3e203437323732.roa (raw, json)
Hash identifier:          8XRHcgTZsbdT9oO/n+m9LFsKUJJMC33r3IfjStq41ZY=
Subject key identifier:   F5:00:ED:77:3E:CD:F5:B3:2E:47:DC:5F:97:2A:D8:7E:11:DE:31:DE
Certificate issuer:       /CN=6A085FFB2907E47D476E04DACC9BB9C537740CA5
Certificate serial:       3A8FAE7B735BF9B9037A0E5971A7BDDEC7E35041
Authority key identifier: 6A:08:5F:FB:29:07:E4:7D:47:6E:04:DA:CC:9B:B9:C5:37:74:0C:A5
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/6A085FFB2907E47D476E04DACC9BB9C537740CA5.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/4/3139322e36372e33352e302f32342d3234203d3e203437323732.roa
Signing time:             Fri 04 Sep 2026 18:20:08 +0000
ROA not before:           Fri 04 Sep 2026 18:15:08 +0000
ROA not after:            Fri 03 Sep 2027 18:20:08 +0000
asID:                     47272
IP address blocks:        192.67.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.crl
                          rsync://krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/6A085FFB2907E47D476E04DACC9BB9C537740CA5.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 23:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8f:ae:7b:73:5b:f9:b9:03:7a:0e:59:71:a7:bd:de:c7:e3:50:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A085FFB2907E47D476E04DACC9BB9C537740CA5
        Validity
            Not Before: Sep  4 18:15:08 2026 GMT
            Not After : Sep  3 18:20:08 2027 GMT
        Subject: CN=F500ED773ECDF5B32E47DC5F972AD87E11DE31DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:2e:be:80:15:1d:56:94:ae:77:1a:18:f7:
                    21:89:00:77:c7:cd:14:84:87:f0:26:28:fb:b4:b5:
                    fe:43:a9:66:6f:0b:6b:a5:97:41:a6:3c:08:c6:60:
                    b1:89:53:5f:f6:2b:64:89:d2:94:24:e8:36:59:ae:
                    b9:55:74:c3:a7:c7:60:16:34:ca:91:a6:d1:8c:82:
                    4e:d1:be:e3:5d:91:5c:9c:35:00:62:32:1f:95:29:
                    6b:83:9b:7c:69:16:8d:c0:42:77:9d:c7:10:b7:56:
                    86:d5:32:b8:c4:ae:1d:0d:96:5b:87:35:52:82:d7:
                    41:aa:ed:1c:70:dc:cd:36:ab:73:c4:5b:1d:82:b2:
                    12:8e:b3:bf:b2:97:16:8f:01:f2:9d:5a:d3:f5:8e:
                    b3:f1:b3:96:4e:2a:db:03:c9:f6:e3:fb:f5:13:53:
                    a9:3e:9f:98:0f:ed:70:01:2a:eb:d3:cd:4a:8d:01:
                    f6:70:e5:63:a0:1f:30:3e:37:b0:43:1e:f9:7f:25:
                    17:5a:bf:25:ed:97:1e:42:3c:f3:82:3b:34:19:2d:
                    43:d0:63:d7:82:0f:aa:02:e0:5b:50:33:8e:89:13:
                    10:44:15:60:07:69:e5:ba:79:41:74:07:a6:5e:f4:
                    1d:6d:f4:38:18:5d:92:c0:48:cb:a2:b2:13:b3:2e:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:00:ED:77:3E:CD:F5:B3:2E:47:DC:5F:97:2A:D8:7E:11:DE:31:DE
            X509v3 Authority Key Identifier:
                keyid:6A:08:5F:FB:29:07:E4:7D:47:6E:04:DA:CC:9B:B9:C5:37:74:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/6A085FFB2907E47D476E04DACC9BB9C537740CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/4/3139322e36372e33352e302f32342d3234203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d6:e0:fc:b3:8b:ab:b8:a2:80:0c:e1:c6:52:15:57:98:51:
         75:78:82:71:81:e1:ed:d3:8c:7e:ab:e7:7d:db:44:83:26:05:
         65:28:94:80:97:60:66:5a:ff:b6:bb:98:ba:1b:d9:69:ff:fe:
         c4:75:24:5b:b5:8e:6b:9e:75:ab:0a:7c:ef:af:f2:d3:dc:eb:
         58:87:55:9a:65:d8:4a:b8:85:87:09:8a:aa:46:99:07:54:56:
         b4:80:b4:07:b6:ca:54:4c:74:dc:d3:53:44:25:03:94:a7:63:
         b1:0f:98:28:af:01:73:59:90:c3:f1:8d:f3:d1:1d:b3:aa:ac:
         de:3e:4f:ae:dd:57:48:28:f6:5a:17:be:38:8f:98:6e:a7:61:
         51:0a:ba:b6:e7:ec:06:15:d3:b8:cc:6e:63:38:1a:a9:b1:c0:
         ed:83:ef:2c:a6:b7:08:6c:ef:4e:0c:92:7c:1e:44:35:e9:71:
         d9:ab:48:d6:b9:a8:bf:49:7a:5f:9f:d7:b5:1d:14:df:17:2e:
         ab:0c:e7:3a:80:f7:b5:30:a6:ca:c1:2a:bd:d4:6a:6a:6e:29:
         81:90:fc:5c:a5:a7:17:91:2b:0c:62:49:a9:05:84:c0:ea:41:
         0f:49:76:7a:25:42:20:27:ea:ea:7b:ed:c8:2e:a0:fe:01:d2:
         ec:6a:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:06 2026 by rpki-client