Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200950.roa
File:                     AS200950.roa (raw, json)
Hash identifier:          FOBvyyycVpQjP5jxDzsrtJlPD+V2ahjkAvNswbpIdp0=
Subject key identifier:   ED:3B:93:34:4C:78:9C:34:20:18:47:DA:54:06:27:5B:B9:26:2C:CF
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       70A6E725B7BD92ACF6923A31CBA13CAAAA72D139
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa
Signing time:             Sun 17 May 2026 22:12:23 +0000
ROA not before:           Sun 17 May 2026 22:07:23 +0000
ROA not after:            Sun 16 May 2027 22:12:23 +0000
asID:                     200950
IP address blocks:        2a06:1281:70::/44 maxlen: 44
                          2a06:1281:70::/44 maxlen: 48
                          2a0f:6284:f00::/40 maxlen: 40
                          2a0f:6284:f00::/40 maxlen: 48
                          2a0f:6284:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 22:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a6:e7:25:b7:bd:92:ac:f6:92:3a:31:cb:a1:3c:aa:aa:72:d1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: May 17 22:07:23 2026 GMT
            Not After : May 16 22:12:23 2027 GMT
        Subject: CN=ED3B93344C789C34201847DA5406275BB9262CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:f7:b8:c1:7d:02:52:19:aa:12:ed:7d:22:
                    7b:64:da:58:a7:02:b7:6b:07:bb:ea:96:a5:23:fb:
                    eb:cf:6b:3d:57:b4:dc:91:53:08:a1:70:0d:5e:9c:
                    dc:3f:ed:a3:97:37:62:1d:c1:d3:21:cd:f3:2b:1a:
                    39:a8:be:b7:6e:86:aa:89:9c:3d:a3:db:89:f8:82:
                    de:af:f0:40:cc:12:69:91:2c:03:fd:8e:78:a6:51:
                    d9:66:9b:9d:9e:86:f8:e2:21:7b:f2:c2:a0:f9:73:
                    9f:f8:b3:a3:19:29:39:9a:0a:a2:88:54:ba:01:e5:
                    5a:92:85:40:6a:e6:6a:27:4f:07:10:21:eb:86:e6:
                    64:4e:4f:52:7e:b5:f4:63:bd:11:d6:ce:08:2a:22:
                    8b:ce:b2:3d:bc:5b:e3:10:0d:0c:9f:83:49:32:e4:
                    0f:18:e4:40:94:25:ec:2a:a3:0e:a2:0e:2f:a9:90:
                    a8:8a:fd:30:72:24:25:b0:18:5e:ef:42:d5:90:8d:
                    3c:e5:17:e3:8a:32:49:ee:bc:51:f4:d4:bf:83:99:
                    ae:d5:ba:5b:8c:37:9b:e6:a3:fc:c9:6c:be:94:84:
                    18:c9:b2:cf:9d:90:dd:7a:15:38:98:bd:49:b3:bb:
                    bc:30:8d:e8:cd:fb:5f:da:97:83:48:a9:30:ac:2d:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3B:93:34:4C:78:9C:34:20:18:47:DA:54:06:27:5B:B9:26:2C:CF
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200950.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:70::/44
                  2a0f:6284:f00::/40
                  2a0f:6284:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:bc:bd:d8:67:ec:9a:ea:ef:fd:b2:10:a0:2b:ba:b7:f2:d9:
         cf:87:b5:14:ce:9d:b1:d7:66:e1:2c:0e:a5:0b:65:1d:81:07:
         39:81:5b:b8:93:76:96:04:88:32:a5:67:59:22:92:48:8d:b7:
         92:48:df:1a:9a:c1:71:6e:d6:81:24:54:54:21:c0:00:32:4c:
         17:26:b4:9b:02:d0:92:1d:fc:74:42:06:ee:6e:6a:35:4a:a2:
         7b:96:9d:e6:dd:04:02:bf:f6:d9:a0:9e:cb:19:d8:b2:0a:5d:
         e8:b9:a4:85:73:aa:82:8e:eb:32:6f:7c:2c:77:4c:0b:fd:c7:
         75:56:39:30:67:17:ce:a9:be:c5:4a:9c:8a:05:28:2d:46:fe:
         20:bb:bf:4d:40:cd:c6:65:a1:78:1b:60:13:86:52:98:6c:d9:
         c1:7c:21:da:70:13:d0:fd:f4:21:94:60:89:39:7a:18:7d:38:
         8d:19:b3:10:43:4b:4d:d3:00:eb:87:91:fc:38:90:04:1c:16:
         f9:63:17:87:fb:06:31:29:e8:ca:5c:49:b0:62:62:db:2e:c6:
         fc:46:42:4c:26:0b:56:08:80:d0:c3:54:d7:23:e3:28:e0:d6:
         b0:d7:50:4a:32:ef:bf:b9:ff:55:2a:10:51:3f:ab:cb:41:68:
         9d:2b:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:26:13 2026 by rpki-client