Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa
File:                     323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa (raw, json)
Hash identifier:          hiplwxUfHBzmjRlEQvkqp4UxLCLpxhxkOkmcz1psbmM=
Subject key identifier:   99:38:B9:44:51:18:AD:CD:B7:F2:EE:A4:5B:C5:E1:07:2D:E9:19:E2
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       1C14C9204B5890AEF18B114AF8398F5CDF3023EF
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:52 +0000
ROA not before:           Thu 03 Jul 2025 15:04:52 +0000
ROA not after:            Thu 02 Jul 2026 15:09:52 +0000
asID:                     47272
IP address blocks:        2602:f96d:200::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:14:c9:20:4b:58:90:ae:f1:8b:11:4a:f8:39:8f:5c:df:30:23:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul  3 15:04:52 2025 GMT
            Not After : Jul  2 15:09:52 2026 GMT
        Subject: CN=9938B9445118ADCDB7F2EEA45BC5E1072DE919E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8e:a6:f8:58:8c:0f:4c:70:fc:05:a2:5e:df:
                    17:0b:32:1f:02:a3:a5:a5:07:67:45:fb:df:58:86:
                    75:7e:4f:1f:9e:7e:26:d5:9b:af:8f:50:1f:f1:99:
                    46:e4:e1:a3:ca:c8:dd:fd:9e:23:94:2b:54:13:56:
                    58:27:1b:b1:53:18:a7:b4:c9:51:bc:b8:90:13:da:
                    37:2f:2e:9f:d8:e3:8f:ca:58:53:4f:23:6a:a9:86:
                    e9:5c:31:97:90:e0:c6:96:8d:8d:fd:44:78:0a:64:
                    26:38:00:9e:dd:5d:7a:33:f6:ac:c1:4f:97:fb:f3:
                    e5:62:6d:7d:4a:7a:ed:48:d2:70:e3:f0:99:09:63:
                    e3:2f:99:76:8a:52:63:fa:5e:c1:19:7a:20:98:f6:
                    46:c0:7b:dd:e7:99:35:21:07:d6:11:7a:e5:9c:cc:
                    df:eb:ed:4a:32:48:a3:76:77:57:6d:9a:0f:c7:c2:
                    82:97:67:62:74:4c:4c:30:bf:b9:de:9f:a7:30:7e:
                    b8:6e:3e:63:33:ae:88:a6:9c:3a:a9:8d:42:46:03:
                    dd:35:2d:b6:a9:85:b8:ac:a9:63:7f:5a:0b:a0:23:
                    90:66:a1:91:3c:2b:d0:ca:9f:b5:27:02:42:b6:4a:
                    17:50:30:a1:b9:c3:5b:14:b2:96:9b:18:3b:c5:75:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:38:B9:44:51:18:AD:CD:B7:F2:EE:A4:5B:C5:E1:07:2D:E9:19:E2
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:18:be:8e:cc:6a:c1:ed:09:c6:f9:1d:e9:97:26:b2:71:
         eb:79:5c:9c:c0:ef:eb:a2:f8:22:cd:93:08:eb:09:7f:e3:85:
         bd:87:64:8e:2f:60:15:a4:af:c0:0a:37:15:83:95:e6:c5:85:
         52:dd:cd:07:b7:c9:14:05:8b:8f:42:0a:54:5c:85:6b:6f:5c:
         74:18:3d:11:94:46:2b:92:4f:81:cd:2f:7b:8a:10:09:6e:0d:
         41:d6:e7:97:72:83:e6:9c:45:fd:87:1e:75:aa:65:56:11:24:
         62:d3:6e:85:58:d7:e1:40:cc:e8:59:c3:5a:31:73:f0:f3:23:
         75:4e:6c:2f:28:7c:d3:9e:0b:e3:41:3c:6c:97:b1:ec:43:b6:
         85:bd:6e:79:33:9e:ad:41:fa:76:fe:0d:35:dc:d2:13:07:24:
         20:50:be:90:dc:af:e6:51:f6:09:2c:9b:5c:ac:cf:fd:ee:0e:
         e4:a1:ab:07:9e:fa:85:f1:30:23:56:81:0e:2f:43:8d:2d:4b:
         a3:e0:39:30:42:e8:2b:13:b7:9d:c3:34:9e:8b:83:99:ff:70:
         fb:fd:a9:af:9e:bc:80:5f:5a:f8:9d:90:af:4f:f6:07:df:ee:
         19:c5:9f:a4:6c:a5:88:c5:a1:88:10:30:43:78:17:07:91:64:
         93:ad:20:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:18:05 2025 by rpki-client