Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa
File:                     323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          16b8uNX0nAwxWpMcIfowzKAZUXxR6X8pWmzMSj7KzEo=
Subject key identifier:   F6:2F:D3:0F:AF:02:32:5F:9B:8F:8D:82:4C:E9:AC:8A:47:30:CE:66
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       56B23C68611E3974DA61E4567D6F950C3D5D2F3F
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:52 +0000
ROA not before:           Thu 03 Jul 2025 15:04:52 +0000
ROA not after:            Thu 02 Jul 2026 15:09:52 +0000
asID:                     47272
IP address blocks:        2602:f96d:100::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b2:3c:68:61:1e:39:74:da:61:e4:56:7d:6f:95:0c:3d:5d:2f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul  3 15:04:52 2025 GMT
            Not After : Jul  2 15:09:52 2026 GMT
        Subject: CN=F62FD30FAF02325F9B8F8D824CE9AC8A4730CE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:36:70:39:e4:9e:88:f2:db:92:fd:5c:49:
                    48:a8:74:c8:d6:8c:03:94:8a:79:04:0b:96:d8:3b:
                    f1:a6:f1:b3:6a:c4:f3:9a:6c:5e:27:4a:0e:d5:9c:
                    69:66:69:ab:a8:4c:ff:da:07:e0:02:50:13:a4:3a:
                    36:23:0d:05:eb:71:11:57:81:31:25:3a:62:9c:d1:
                    0b:e9:a0:0b:ec:af:7a:b9:e1:05:21:81:65:06:a6:
                    4d:b9:7f:be:97:50:47:ba:54:be:ac:38:99:88:a9:
                    8c:34:b9:32:a7:57:d5:61:90:87:70:cc:f2:0d:07:
                    af:d3:c8:23:54:4c:92:6b:40:6f:3c:ef:03:9e:89:
                    f4:93:69:55:a2:99:c8:9f:2f:d8:8b:72:47:d7:8c:
                    10:ea:f6:51:32:9e:74:f6:52:6b:5e:0d:a6:51:88:
                    e5:3c:a7:8c:3d:8b:60:8d:d8:22:59:51:fc:ea:44:
                    3e:d5:d6:f9:7b:7c:df:36:ef:1c:20:a0:aa:2e:c1:
                    56:ac:59:2d:28:9b:86:17:ad:a3:d0:21:cd:94:df:
                    b4:9f:98:62:80:95:8e:19:84:d2:52:cb:92:70:54:
                    0e:e8:37:e3:77:3c:e9:be:2f:01:ed:63:eb:aa:b2:
                    cc:7b:7c:e1:98:60:32:72:94:0a:ef:2e:d9:1c:03:
                    18:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:D3:0F:AF:02:32:5F:9B:8F:8D:82:4C:E9:AC:8A:47:30:CE:66
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:58:7c:92:3e:43:17:03:41:d9:f8:25:52:41:94:8c:c1:
         6b:7b:c5:c6:16:da:d2:80:7c:56:ab:8a:54:92:b1:77:e1:18:
         48:6b:16:2f:66:38:8d:03:e4:67:5e:22:81:fc:81:c0:c1:86:
         71:54:1a:58:24:e8:1d:4b:75:d6:d7:eb:f9:03:e5:d7:ef:c2:
         6a:dd:28:ac:32:d9:b6:b6:1e:8e:a7:ba:8c:65:fe:84:97:24:
         c8:bf:0d:ff:99:14:cd:d0:79:05:5e:b1:53:c8:79:a7:97:e1:
         30:f9:df:44:b8:76:b8:94:b3:82:c0:f5:0e:87:76:d9:08:83:
         31:a9:f9:4e:9e:e4:77:d2:37:00:d7:ee:bc:cf:d1:a6:a0:27:
         bd:a8:60:8d:a0:27:69:99:76:b1:f9:2c:3f:1c:ce:bf:7b:b5:
         8e:39:b8:04:38:0a:7c:eb:9c:61:1e:ef:e4:0a:30:9f:87:45:
         c0:5c:7b:a3:9a:2c:35:ac:50:be:e0:19:17:9e:d7:77:62:79:
         a1:f8:c4:cf:a1:4e:82:39:71:7d:1c:60:60:06:9f:f2:d2:c6:
         b2:b6:86:0a:de:52:a9:55:0e:bc:bc:b9:07:80:62:05:86:6a:
         b9:eb:97:a7:d8:57:8d:c1:4f:58:6a:27:b2:5b:d6:5c:c7:24:
         5a:ae:08:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:30 2025 by rpki-client