Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa
File:                     323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa (raw, json)
Hash identifier:          ac8ytDf9M73GFgwNSi05UEJsmxmuqB1rwkjvWqWNDDQ=
Subject key identifier:   2D:F9:83:66:03:B6:64:BA:E3:C6:8C:A9:E7:82:F1:B3:D6:5E:9B:FA
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       7BBB4D231F9D3E4C7B2057C36E50B1AD6B16E347
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:49 +0000
ROA not before:           Thu 03 Jul 2025 15:04:49 +0000
ROA not after:            Thu 02 Jul 2026 15:09:49 +0000
asID:                     47272
IP address blocks:        2602:f96d:940::/42 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bb:4d:23:1f:9d:3e:4c:7b:20:57:c3:6e:50:b1:ad:6b:16:e3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul  3 15:04:49 2025 GMT
            Not After : Jul  2 15:09:49 2026 GMT
        Subject: CN=2DF9836603B664BAE3C68CA9E782F1B3D65E9BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:27:c8:93:06:ff:94:a4:9e:b4:11:e3:7f:
                    5b:cb:3c:f6:6a:98:46:44:d7:d0:1f:c4:de:c9:8a:
                    26:d9:b7:77:88:bf:d9:6b:e3:e1:df:12:92:2b:d8:
                    63:06:62:e3:45:3d:67:31:ee:7a:5f:e0:e4:fe:a0:
                    f7:d9:3c:1d:29:ab:25:89:66:f6:a2:b0:8f:b2:83:
                    bf:00:f2:aa:af:c0:03:66:b1:90:8b:90:64:2d:6e:
                    20:5d:32:6a:d8:03:6f:ab:78:26:7d:65:88:49:70:
                    70:4c:ed:51:8e:93:89:9f:f6:e2:80:e7:1e:32:e7:
                    a1:fb:dd:b3:30:2b:24:88:bd:a9:19:95:a9:86:6c:
                    e6:93:15:cd:7d:43:c8:6e:c5:b1:b8:f9:e1:db:22:
                    81:52:25:71:0f:c1:a7:7c:fa:33:c9:3d:02:e0:f3:
                    a8:f4:ce:aa:5d:5d:72:29:cd:af:6f:5b:eb:db:f0:
                    3f:6c:0b:17:80:ec:4f:85:5d:05:f6:2a:cf:b7:e9:
                    65:40:e6:10:27:08:15:00:ac:b4:a0:8e:72:4a:f3:
                    46:98:5b:97:51:6a:2d:2d:f8:25:bd:fc:04:72:fd:
                    18:48:1a:8c:b7:4c:94:9b:21:10:a6:5c:36:0f:4d:
                    af:c7:fc:b2:26:0c:d6:c5:43:ba:b6:f7:ce:3c:6f:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F9:83:66:03:B6:64:BA:E3:C6:8C:A9:E7:82:F1:B3:D6:5E:9B:FA
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3934303a3a2f34322d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:940::/42

    Signature Algorithm: sha256WithRSAEncryption
         41:e8:e9:e1:28:98:4f:cf:1d:7b:c0:95:1b:21:cc:56:f4:85:
         fe:fa:68:1e:36:55:f7:88:cf:8d:f0:be:a3:e6:c8:4d:d1:19:
         62:6a:4c:a3:7b:6e:da:76:6d:85:e4:5f:ac:1a:1c:6b:91:44:
         32:28:df:c7:b9:39:d4:64:89:25:fa:2b:5b:9c:ec:5a:e0:ff:
         42:9d:cf:0d:80:c2:23:0a:da:2b:5f:4a:81:19:f8:f6:c2:cc:
         15:2e:55:69:7a:8a:10:75:9e:4d:d9:8a:29:e6:72:40:cf:75:
         31:1a:fe:9a:71:96:63:60:a3:54:42:8a:8b:d8:80:c9:28:75:
         92:0e:ce:04:8b:3c:c5:2b:40:3a:5c:e4:4c:9e:6f:53:2b:87:
         c3:15:10:e6:d7:ff:27:64:d9:dd:c0:b9:29:a3:16:fc:88:e6:
         bb:21:2e:60:19:9c:fb:f5:63:e2:a8:bc:c8:8f:fc:26:39:cb:
         b8:98:e0:79:17:3f:1e:50:38:49:b9:10:32:a1:c0:45:31:e0:
         ae:69:83:8f:95:85:22:7c:5e:e4:b8:78:f2:76:ce:69:ad:7b:
         74:37:e6:18:80:26:0b:51:c0:23:2d:43:45:56:f1:4f:6f:87:
         bd:71:fd:80:3f:38:62:93:2b:74:46:de:44:a4:e6:89:50:fa:
         84:db:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:10 2025 by rpki-client