Route Origin Authorization

$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32643a3a2f34382d3438203d3e203631353734.roa
File:                     323830343a323639633a32643a3a2f34382d3438203d3e203631353734.roa (raw, json)
Hash identifier:          A05XIRUEYKwgA+sAFSG0wK3DPjPON212TOlQ+UD0G3M=
Subject key identifier:   E5:F4:5F:4A:88:DA:12:5C:53:BF:84:94:41:07:A2:E3:0E:7B:1A:55
Certificate issuer:       /CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
Certificate serial:       30E941AAD1A80F679640AA0E52854AE99A2B00B0
Authority key identifier: 16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
Subject info access:      rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32643a3a2f34382d3438203d3e203631353734.roa
Signing time:             Wed 15 Apr 2026 04:01:27 +0000
ROA not before:           Wed 15 Apr 2026 03:56:27 +0000
ROA not after:            Wed 14 Apr 2027 04:01:27 +0000
asID:                     61574
IP address blocks:        2804:269c:2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl
                          rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e9:41:aa:d1:a8:0f:67:96:40:aa:0e:52:85:4a:e9:9a:2b:00:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C
        Validity
            Not Before: Apr 15 03:56:27 2026 GMT
            Not After : Apr 14 04:01:27 2027 GMT
        Subject: CN=E5F45F4A88DA125C53BF84944107A2E30E7B1A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:dd:1c:af:5a:6d:bb:f0:f6:39:43:bf:d6:
                    93:b3:23:bb:a8:e0:5b:6f:f1:bf:17:95:62:47:7a:
                    f5:37:6c:c0:e6:2e:d3:3c:9a:ef:a9:3f:7d:e4:b7:
                    00:b1:37:9b:62:cd:ea:c2:fc:29:70:3c:4e:d3:5c:
                    b2:e7:69:b6:c0:e8:93:9d:f9:4a:62:05:74:a8:04:
                    e1:0e:95:ab:f8:0d:17:62:cf:fe:38:f6:8c:59:43:
                    29:21:98:28:e5:3c:e1:77:c0:a3:97:a8:f5:56:65:
                    f2:15:d5:da:75:24:04:fe:11:84:1e:24:b9:38:8b:
                    c2:e3:09:ab:4a:10:6d:8e:61:fc:b3:59:14:41:60:
                    a3:6b:b5:b3:57:07:24:3c:cb:36:35:06:5a:dd:6c:
                    13:3d:e8:98:82:f9:16:95:33:59:59:cf:ef:ca:0a:
                    82:d0:c0:7d:71:1e:9f:84:dd:72:0b:59:57:f4:1a:
                    5e:f6:a3:11:79:19:37:68:2b:65:a7:93:4e:62:91:
                    18:5d:30:6c:fb:cc:f3:0d:23:71:da:49:74:f0:58:
                    a2:d7:60:74:42:da:84:99:5a:c8:7e:0f:49:b9:d2:
                    3f:43:b0:ba:c4:92:2a:f3:ed:58:5d:ad:f5:3d:ef:
                    23:37:1d:b6:b2:eb:05:63:30:95:9a:d7:97:8f:88:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F4:5F:4A:88:DA:12:5C:53:BF:84:94:41:07:A2:E3:0E:7B:1A:55
            X509v3 Authority Key Identifier:
                keyid:16:0F:D2:1A:97:6A:19:A7:B8:1A:59:AA:FA:69:F6:A0:AF:E3:6D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/160FD21A976A19A7B81A59AAFA69F6A0AFE36D0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/lifeng-hitcowhorse/0/323830343a323639633a32643a3a2f34382d3438203d3e203631353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:269c:2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:c0:78:92:ea:c9:0b:92:13:06:af:c6:ee:0a:a3:60:57:22:
         60:eb:f5:bb:97:41:ff:02:15:7f:4a:2c:c2:ab:34:b3:c7:56:
         26:f9:5d:9f:aa:6b:54:d8:b5:b1:b8:3c:4f:fc:c4:d7:dd:66:
         5d:a8:4a:44:32:15:cb:18:8e:d0:25:91:03:fc:72:78:56:ba:
         5f:d8:9c:14:dd:74:a3:5c:17:e3:e1:ec:32:6a:e0:a2:89:ff:
         62:17:be:26:33:5a:f4:2b:d3:a3:df:e0:33:a9:83:2d:47:11:
         74:64:49:17:2b:a6:4e:9f:69:40:3c:c6:45:99:ed:16:4b:26:
         d7:74:e8:94:25:df:32:ea:f1:58:e3:8b:60:0d:83:48:2d:74:
         63:3b:4c:cf:75:1f:11:bb:c1:e6:8c:3b:88:76:27:30:9d:b6:
         03:cd:e1:2e:84:19:84:50:86:c7:2b:64:4b:dc:7b:de:93:db:
         fc:b4:4d:e2:9b:cb:29:3d:fc:30:67:10:48:b3:f6:3c:fc:af:
         14:5f:03:d7:7f:fd:27:31:b7:3e:3d:5c:73:b6:e1:59:48:cd:
         d6:9d:ad:30:14:dc:09:d7:43:96:67:7b:90:7f:bd:69:66:67:
         62:d2:52:7d:71:39:f9:9b:b9:c1:5f:98:8e:f5:8c:d3:9a:df:
         66:de:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:13:25 2026 by rpki-client