Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/32332e3137322e3132302e302f32342d3332203d3e203437323732.roa
File:                     32332e3137322e3132302e302f32342d3332203d3e203437323732.roa (raw, json)
Hash identifier:          /N5FYjwRPWi2kw6HqoaRS/fQim70Fh7a0ER0sIeains=
Subject key identifier:   C5:AC:B8:21:4E:FA:FB:5C:FC:AD:F3:34:8E:87:BE:2A:5B:74:BE:91
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       46BD86F544514DCAEE001AC8074D7B4FC50389F9
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/32332e3137322e3132302e302f32342d3332203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:52 +0000
ROA not before:           Thu 03 Jul 2025 15:04:52 +0000
ROA not after:            Thu 02 Jul 2026 15:09:52 +0000
asID:                     47272
IP address blocks:        23.172.120.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 17:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bd:86:f5:44:51:4d:ca:ee:00:1a:c8:07:4d:7b:4f:c5:03:89:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul  3 15:04:52 2025 GMT
            Not After : Jul  2 15:09:52 2026 GMT
        Subject: CN=C5ACB8214EFAFB5CFCADF3348E87BE2A5B74BE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:b8:ff:b4:40:dd:90:19:32:e3:da:f4:5c:
                    af:9a:aa:af:73:5f:66:39:2d:77:c7:ae:49:15:40:
                    a8:90:e3:ff:49:d9:c0:ae:f8:2a:b8:f7:b7:f7:40:
                    31:e5:a5:a4:75:86:eb:39:a7:1a:b3:81:c4:f0:3f:
                    5c:40:3a:54:b0:75:48:c4:8a:fc:3d:88:62:67:6c:
                    06:f5:71:15:40:df:e9:9c:5b:9c:92:03:6f:a8:e5:
                    c2:74:21:eb:c7:a9:13:a1:ee:5f:dd:74:9d:5b:af:
                    5f:fe:b6:cd:b4:fd:21:9a:84:d1:42:74:62:7e:e3:
                    74:15:79:4d:24:a0:c0:ea:22:3b:cd:3d:cf:76:99:
                    6c:ca:fc:a0:8b:cb:eb:34:fb:97:70:83:01:c4:f3:
                    75:c2:0f:b6:f7:34:4b:f5:19:1f:28:bc:97:2a:d9:
                    9a:58:cd:a8:9b:42:ef:d8:4c:63:42:b4:6f:ff:99:
                    9a:68:ec:ff:82:1e:b0:36:64:d9:27:1b:53:d7:7c:
                    73:7b:02:85:ff:c2:4e:ed:61:a2:58:6a:a2:64:5d:
                    7e:b1:a9:f9:17:67:7e:9a:ca:0e:d4:5a:5a:3a:85:
                    17:0f:da:41:4b:2b:1a:40:80:78:46:42:ae:67:24:
                    7a:e1:4e:4b:91:f8:39:3b:ba:ea:75:2f:48:17:be:
                    d6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:B8:21:4E:FA:FB:5C:FC:AD:F3:34:8E:87:BE:2A:5B:74:BE:91
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/32332e3137322e3132302e302f32342d3332203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:da:a7:4a:95:81:29:dd:99:d4:93:88:00:58:b5:bb:b4:01:
         b4:f8:8f:e3:e4:0d:ee:f8:ef:0f:f7:3e:d0:23:dd:4b:10:94:
         6a:02:54:43:ad:3c:8f:c7:5c:33:33:1f:1c:dd:70:a2:01:b7:
         46:fc:b3:48:cf:3b:f4:9d:46:0a:83:b3:e3:96:b8:67:51:f8:
         7b:e6:92:52:7b:bd:b1:d4:0e:77:50:7a:04:49:1a:59:61:ec:
         b8:0a:05:55:f3:88:51:be:34:0b:22:45:7e:18:d6:af:ee:c5:
         07:d2:46:8d:fa:6a:b8:2e:44:10:34:bf:13:43:6b:aa:f8:0a:
         be:b1:0d:4d:b4:b1:76:cf:a9:7f:eb:c5:e4:45:ba:8a:72:0d:
         9a:cd:fb:e1:5c:0d:3d:8d:c1:3b:c7:86:b3:a7:35:eb:2c:d0:
         1f:98:b5:9c:a8:e9:7e:21:e9:d4:99:e4:f1:18:78:af:32:5b:
         1c:50:ad:39:f9:ef:1d:12:76:4c:b7:ba:ac:77:26:e5:00:bf:
         e3:dd:c7:10:7a:06:60:c7:a7:2d:c2:cf:80:68:db:89:73:2a:
         19:00:be:c0:0a:9e:85:4f:23:2f:27:30:9f:d5:58:19:8f:c2:
         01:89:94:64:90:d9:7f:4c:93:73:21:c4:78:3b:6a:51:a8:b0:
         81:56:b4:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:42:37 2025 by rpki-client