Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/4/3139322e36372e33352e302f32342d3332203d3e20323034323038.roa
File:                     3139322e36372e33352e302f32342d3332203d3e20323034323038.roa (raw, json)
Hash identifier:          WRgaV1bdSfUtLVf9oeCiosIj75OrI2tGoeoqI4aGZ94=
Subject key identifier:   76:95:21:23:82:91:36:68:2F:BA:A5:66:46:D5:2B:23:D4:5F:1B:2E
Certificate issuer:       /CN=6A085FFB2907E47D476E04DACC9BB9C537740CA5
Certificate serial:       134CB76FA5711D145D7883E7D72150296F4B3F87
Authority key identifier: 6A:08:5F:FB:29:07:E4:7D:47:6E:04:DA:CC:9B:B9:C5:37:74:0C:A5
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/6A085FFB2907E47D476E04DACC9BB9C537740CA5.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/4/3139322e36372e33352e302f32342d3332203d3e20323034323038.roa
Signing time:             Sun 08 Feb 2026 14:14:19 +0000
ROA not before:           Sun 08 Feb 2026 14:09:19 +0000
ROA not after:            Sun 07 Feb 2027 14:14:19 +0000
asID:                     204208
IP address blocks:        192.67.35.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.crl
                          rsync://krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/6A085FFB2907E47D476E04DACC9BB9C537740CA5.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4c:b7:6f:a5:71:1d:14:5d:78:83:e7:d7:21:50:29:6f:4b:3f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A085FFB2907E47D476E04DACC9BB9C537740CA5
        Validity
            Not Before: Feb  8 14:09:19 2026 GMT
            Not After : Feb  7 14:14:19 2027 GMT
        Subject: CN=76952123829136682FBAA56646D52B23D45F1B2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:9a:cc:2c:85:9c:cb:08:29:70:ce:b6:20:
                    f1:f6:37:52:9d:14:50:af:76:e8:3f:c2:57:1b:6d:
                    71:65:bc:04:2a:6b:96:b9:8e:00:31:d1:fb:13:c5:
                    cb:ea:10:ee:39:77:3e:d8:c9:5a:a8:82:f1:11:48:
                    05:c1:de:ef:3e:c9:c9:29:ee:a6:10:f9:a2:b9:ec:
                    86:53:6f:cd:e8:e1:06:55:f7:94:9a:39:cc:1a:92:
                    c3:98:b7:cb:8a:65:f2:3b:2e:b6:10:2d:91:97:18:
                    2e:03:c1:00:ce:70:cd:24:4c:d3:20:64:51:d9:22:
                    f9:04:d4:19:c2:d7:27:3c:81:6f:e3:52:d4:96:07:
                    94:2c:ed:28:ea:57:6e:37:df:69:7c:68:93:cf:78:
                    6f:ce:6e:39:d9:08:42:85:89:b2:96:a4:c0:94:14:
                    f2:27:4d:75:8e:32:1c:3e:9c:b1:e5:54:cb:2d:28:
                    ea:cf:9c:8d:c9:1a:90:31:7b:61:4b:85:89:f8:a5:
                    e3:92:ad:66:15:12:dc:89:c8:7d:5e:d0:a7:0b:07:
                    f7:79:86:b6:e7:ce:36:4f:86:aa:12:b5:02:3f:25:
                    46:cd:e9:f2:ea:ce:0f:ee:0b:a2:7f:40:f6:92:46:
                    77:45:b0:18:21:a3:62:b0:5a:62:59:73:f9:18:71:
                    30:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:21:23:82:91:36:68:2F:BA:A5:66:46:D5:2B:23:D4:5F:1B:2E
            X509v3 Authority Key Identifier:
                keyid:6A:08:5F:FB:29:07:E4:7D:47:6E:04:DA:CC:9B:B9:C5:37:74:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/6A085FFB2907E47D476E04DACC9BB9C537740CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/4/3139322e36372e33352e302f32342d3332203d3e20323034323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:35:3d:6d:e5:fa:18:38:f5:c7:71:e5:34:8e:d0:f4:c9:
         36:1f:58:45:cb:66:52:5b:b5:7d:4a:08:ba:9b:f6:8e:ea:9a:
         42:6e:00:56:a4:c9:0f:d1:01:31:86:a6:c0:62:2e:c1:db:ad:
         b3:ce:00:e4:2c:ea:a3:8e:8d:2c:0e:b4:c0:55:cd:e1:05:ee:
         19:3f:b7:63:38:17:23:c0:11:ed:e6:23:21:35:06:e6:cd:4c:
         5f:06:1b:47:2b:13:04:21:62:cb:dd:04:89:fc:33:f8:c6:d6:
         c0:e8:3f:8c:2e:83:36:49:2a:ed:34:34:5b:8a:6f:0d:6b:59:
         3b:a9:e5:98:2f:67:fa:98:ff:3a:a9:ce:ac:5e:c8:79:51:d9:
         27:15:ed:51:78:0a:22:be:96:59:1c:04:0d:fd:bb:be:2d:a5:
         2d:bc:65:92:47:e1:ba:ec:08:68:81:f7:8a:ff:44:ac:de:f3:
         3c:cb:0c:85:5f:00:0e:db:de:53:cf:c2:08:7c:3c:20:c3:a5:
         d0:3c:cb:23:0c:66:ac:86:29:f9:ba:87:cd:6e:4d:39:c7:54:
         59:7d:4a:17:39:cb:45:7c:59:51:45:32:43:75:f0:11:99:6c:
         8e:e5:2b:99:49:e3:ee:59:af:65:b3:e7:44:5f:40:4b:3f:43:
         2e:ab:2e:84
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIUE0y3b6VxHRRdeIPn1yFQKW9LP4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEwODVGRkIyOTA3RTQ3RDQ3NkUwNERBQ0M5QkI5QzUz
Nzc0MENBNTAeFw0yNjAyMDgxNDA5MTlaFw0yNzAyMDcxNDE0MTlaMDMxMTAvBgNV
BAMTKDc2OTUyMTIzODI5MTM2NjgyRkJBQTU2NjQ2RDUyQjIzRDQ1RjFCMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZ5rMLIWcywgpcM62IPH2N1Kd
FFCvdug/wlcbbXFlvAQqa5a5jgAx0fsTxcvqEO45dz7YyVqogvERSAXB3u8+yckp
7qYQ+aK57IZTb83o4QZV95SaOcwaksOYt8uKZfI7LrYQLZGXGC4DwQDOcM0kTNMg
ZFHZIvkE1BnC1yc8gW/jUtSWB5Qs7SjqV24332l8aJPPeG/ObjnZCEKFibKWpMCU
FPInTXWOMhw+nLHlVMstKOrPnI3JGpAxe2FLhYn4peOSrWYVEtyJyH1e0KcLB/d5
hrbnzjZPhqoStQI/JUbN6fLqzg/uC6J/QPaSRndFsBgho2KwWmJZc/kYcTAfAgMB
AAGjggIAMIIB/DAdBgNVHQ4EFgQUdpUhI4KRNmgvuqVmRtUrI9RfGy4wHwYDVR0j
BBgwFoAUaghf+ykH5H1HbgTazJu5xTd0DKUwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC80LzZBMDg1RkZCMjkwN0U0N0Q0NzZFMDREQUNDOUJCOUM1Mzc3NDBDQTUuY3Js
MIGJBggrBgEFBQcBAQR9MHsweQYIKwYBBQUHMAKGbXJzeW5jOi8va3JpbGwuYWNj
dXJpc3RlY2hub2xvZ2llcy5jYS9yZXBvL0FjY3VyaXMtVGVjaG5vbG9naWVzLzAv
NkEwODVGRkIyOTA3RTQ3RDQ3NkUwNERBQ0M5QkI5QzUzNzc0MENBNS5jZXIwfQYI
KwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFyc3luYzovL2tyaWxsLjQ3MjcyLm5l
dC9yZXBvL0hZRUhPU1QvNC8zMTM5MzIyZTM2MzcyZTMzMzUyZTMwMmYzMjM0MmQz
MzMyMjAzZDNlMjAzMjMwMzQzMjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAQyMwDQYJKoZIhvcN
AQELBQADggEBAJPYNT1t5foYOPXHceU0jtD0yTYfWEXLZlJbtX1KCLqb9o7qmkJu
AFakyQ/RATGGpsBiLsHbrbPOAOQs6qOOjSwOtMBVzeEF7hk/t2M4FyPAEe3mIyE1
BubNTF8GG0crEwQhYsvdBIn8M/jG1sDoP4wugzZJKu00NFuKbw1rWTup5ZgvZ/qY
/zqpzqxeyHlR2ScV7VF4CiK+llkcBA39u74tpS28ZZJH4brsCGiB94r/RKze8zzL
DIVfAA7b3lPPwgh8PCDDpdA8yyMMZqyGKfm6h81uTTnHVFl9Shc5y0V8WVFFMkN1
8BGZbI7lK5lJ4+5Zr2Wz50RfQEs/Qy6rLoQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:48 2026 by rpki-client