Route Origin Authorization

$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32633a3a2f34382d3438203d3e203631353734.roa
File:                     323830343a323639633a32633a3a2f34382d3438203d3e203631353734.roa (raw, json)
Hash identifier:          EJs9EyYA7/ku/iG4uFLiKW8buKFxKzpXm0Q2cwSWFG4=
Subject key identifier:   81:8F:04:4A:30:E5:6E:AB:42:CB:6D:40:15:EC:43:17:E5:ED:8A:57
Certificate issuer:       /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial:       6385B9703E71D346B80AB9F225E00CDBC8760757
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access:      rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32633a3a2f34382d3438203d3e203631353734.roa
Signing time:             Wed 15 Apr 2026 04:01:24 +0000
ROA not before:           Wed 15 Apr 2026 03:56:24 +0000
ROA not after:            Wed 14 Apr 2027 04:01:24 +0000
asID:                     61574
IP address blocks:        2804:269c:2c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
                          rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:85:b9:70:3e:71:d3:46:b8:0a:b9:f2:25:e0:0c:db:c8:76:07:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
        Validity
            Not Before: Apr 15 03:56:24 2026 GMT
            Not After : Apr 14 04:01:24 2027 GMT
        Subject: CN=818F044A30E56EAB42CB6D4015EC4317E5ED8A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e1:f1:66:18:03:e4:9c:e8:f9:63:ad:b5:19:
                    d7:0d:9c:bc:b6:d2:92:e4:cf:8a:a1:7e:7d:42:a0:
                    e6:32:fb:ae:43:ad:9b:03:c4:ea:ce:7e:f8:b1:a0:
                    4c:b2:61:2e:8e:43:23:6e:ed:48:9a:64:95:0e:82:
                    d9:da:f5:11:1c:f3:f7:de:27:e2:15:d5:6a:52:c1:
                    76:89:31:6d:b2:ab:0f:f9:7a:47:e7:a2:c9:03:dd:
                    8d:be:5e:c4:d9:52:a1:fc:cd:6c:d6:53:b3:24:4e:
                    e9:11:a1:94:d1:cf:33:93:ec:5e:ca:27:07:cb:2e:
                    0f:09:2b:08:f0:c5:10:0a:f1:c9:62:4d:8b:6f:4a:
                    18:6c:37:8d:df:c2:54:d3:58:3f:b9:b4:14:e5:2d:
                    7a:db:7d:58:e7:07:92:6f:93:5b:4f:9b:85:65:2e:
                    ec:1a:57:99:bb:62:52:aa:0b:cc:03:e7:6f:0b:98:
                    19:7a:94:1d:fc:f7:f3:c2:c1:c9:55:40:a6:ec:4a:
                    45:88:3b:39:a9:ae:e6:84:42:8f:1e:a5:4e:21:84:
                    91:ea:e1:19:7c:3c:32:5f:ca:26:0a:b0:83:e5:f8:
                    f2:fa:b0:a4:84:cb:fd:b7:a2:bf:4f:98:71:5c:ae:
                    af:0b:79:32:9c:bd:d2:3c:c2:24:d8:8a:f4:1c:65:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8F:04:4A:30:E5:6E:AB:42:CB:6D:40:15:EC:43:17:E5:ED:8A:57
            X509v3 Authority Key Identifier:
                keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32633a3a2f34382d3438203d3e203631353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:269c:2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:a9:11:3c:a9:bf:d4:2f:af:1b:20:20:13:c8:21:2e:6e:14:
         5a:3c:27:cc:d2:22:c7:7d:d8:8b:6e:fa:56:df:5d:60:dd:8f:
         37:db:5a:74:17:7d:7a:35:56:1c:63:df:c7:c0:22:77:34:cf:
         d4:79:84:af:28:3b:59:75:a8:7b:e0:e2:d1:47:3f:3b:63:6d:
         57:62:c9:b4:23:03:ce:0f:18:d5:fd:0b:f8:bc:cc:a3:98:77:
         2b:c9:cf:ff:9f:1b:d0:a0:75:85:12:5d:20:cb:af:7a:e8:78:
         6f:7d:39:95:45:03:f0:8f:89:e4:48:b7:ef:ea:87:fd:c1:e5:
         43:f7:8b:94:65:05:50:6f:43:a4:2d:6c:b2:44:41:fc:a8:a2:
         e8:27:68:fe:cf:05:e1:fd:ca:ee:56:dd:25:c0:93:e3:01:04:
         e8:92:f7:07:58:f3:99:da:13:93:1a:89:ae:ee:b3:af:c4:78:
         7e:1d:5b:4b:02:d4:1f:88:eb:e8:04:58:b3:8c:86:3b:ae:40:
         21:75:2c:75:97:34:44:8e:c3:61:fe:f8:70:51:9f:3c:6a:11:
         37:97:ab:bb:55:c9:c8:6f:d9:0e:b5:77:22:f7:c4:0f:68:82:
         8f:aa:90:9d:0b:e0:b0:7a:04:13:4d:10:9b:ce:d5:79:ee:86:
         2a:4d:ab:6d
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUY4W5cD5x00a4CrnyJeAM28h2B1cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYwRkQyMUE5NzZBMTlBN0I4MUE1OUFBRkE2OUY2QTBB
RkUzNkQwQzAeFw0yNjA0MTUwMzU2MjRaFw0yNzA0MTQwNDAxMjRaMDMxMTAvBgNV
BAMTKDgxOEYwNDRBMzBFNTZFQUI0MkNCNkQ0MDE1RUM0MzE3RTVFRDhBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf4fFmGAPknOj5Y621GdcNnLy2
0pLkz4qhfn1CoOYy+65DrZsDxOrOfvixoEyyYS6OQyNu7UiaZJUOgtna9REc8/fe
J+IV1WpSwXaJMW2yqw/5ekfnoskD3Y2+XsTZUqH8zWzWU7MkTukRoZTRzzOT7F7K
JwfLLg8JKwjwxRAK8cliTYtvShhsN43fwlTTWD+5tBTlLXrbfVjnB5Jvk1tPm4Vl
LuwaV5m7YlKqC8wD528LmBl6lB389/PCwclVQKbsSkWIOzmpruaEQo8epU4hhJHq
4Rl8PDJfyiYKsIPl+PL6sKSEy/23or9PmHFcrq8LeTKcvdI8wiTYivQcZQ0pAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUgY8ESjDlbqtCy21AFexDF+XtilcwHwYDVR0j
BBgwFoAUFg/SGpdqGae4Glmq+mn2oK/jbQwwDgYDVR0PAQH/BAQDAgeAMH0GA1Ud
HwR2MHQwcqBwoG6GbHJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l
ZHUvcmVwby9saWZlbmctaGl0Y293aG9yc2UvMC8xNjBGRDIxQTk3NkExOUE3Qjgx
QTU5QUFGQTY5RjZBMEFGRTM2RDBDLmNybDCBhQYIKwYBBQUHAQEEeTB3MHUGCCsG
AQUFBzAChmlyc3luYzovL2tyaWxsLnBlZXJpbmcuZWUuY29sdW1iaWEuZWR1L3Jl
cG8vcGVlcmluZy10ZXN0YmVkLzAvMTYwRkQyMUE5NzZBMTlBN0I4MUE1OUFBRkE2
OUY2QTBBRkUzNkQwQy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcw
C4Z+cnN5bmM6Ly9rcmlsbC5wZWVyaW5nLmVlLmNvbHVtYmlhLmVkdS9yZXBvL2xp
ZmVuZy1oaXRjb3dob3JzZS8wLzMyMzgzMDM0M2EzMjM2Mzk2MzNhMzI2MzNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzEzNTM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBCacACww
DQYJKoZIhvcNAQELBQADggEBAI6pETypv9QvrxsgIBPIIS5uFFo8J8zSIsd92Itu
+lbfXWDdjzfbWnQXfXo1Vhxj38fAInc0z9R5hK8oO1l1qHvg4tFHPztjbVdiybQj
A84PGNX9C/i8zKOYdyvJz/+fG9CgdYUSXSDLr3roeG99OZVFA/CPieRIt+/qh/3B
5UP3i5RlBVBvQ6QtbLJEQfyoougnaP7PBeH9yu5W3SXAk+MBBOiS9wdY85naE5Ma
ia7us6/EeH4dW0sC1B+I6+gEWLOMhjuuQCF1LHWXNESOw2H++HBRnzxqETeXq7tV
ychv2Q61dyL3xA9ogo+qkJ0L4LB6BBNNEJvO1XnuhipNq20=
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:13:25 2026 by rpki-client