Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa
File:                     323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa (raw, json)
Hash identifier:          vKYWITjnMBv5DKVo5EN+fJdhM4yAQC9ioSB0ho+R070=
Subject key identifier:   9A:6B:6B:54:DD:31:24:69:8A:73:0A:09:0B:56:B6:01:25:D9:FC:C6
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       5D0137325C7516EA3CDB48EFFFB3810EA0902AA2
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:51 +0000
ROA not before:           Thu 03 Jul 2025 15:04:51 +0000
ROA not after:            Thu 02 Jul 2026 15:09:51 +0000
asID:                     47272
IP address blocks:        2602:f96d:980::/42 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:01:37:32:5c:75:16:ea:3c:db:48:ef:ff:b3:81:0e:a0:90:2a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul  3 15:04:51 2025 GMT
            Not After : Jul  2 15:09:51 2026 GMT
        Subject: CN=9A6B6B54DD3124698A730A090B56B60125D9FCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:d6:d9:b8:98:df:f0:b8:a5:23:25:e3:f0:
                    f5:e2:15:50:1a:1b:4d:84:37:9b:6e:91:0e:ab:d2:
                    dc:92:59:c2:06:1e:66:5c:72:e6:04:12:95:2f:9e:
                    86:ac:0d:23:9d:49:79:f5:8b:65:76:30:d1:20:ee:
                    96:5f:4c:ba:d2:d6:f9:8f:9e:ff:a3:b0:81:60:f2:
                    72:55:48:12:82:6f:c7:e2:62:a8:6e:cf:f9:68:de:
                    f1:ad:a6:95:e3:c3:57:8e:2b:0e:5b:f9:b1:1d:d0:
                    69:29:07:4b:1f:c3:51:0b:12:48:3d:23:cd:56:0e:
                    8f:29:1a:5e:4e:7d:1f:39:3a:fa:ed:cd:40:50:af:
                    14:95:12:bc:7d:d8:cb:97:38:46:d3:13:19:30:87:
                    3d:ca:51:d4:dd:6b:19:49:f0:69:52:98:5d:ec:8a:
                    df:2c:7d:0f:ba:1f:f8:20:25:94:38:7f:72:c4:5e:
                    c9:60:c9:b9:b5:53:5f:4b:74:a1:52:8e:34:7b:6f:
                    9f:f5:e5:3b:90:4d:d5:5f:9a:69:64:6b:7a:cc:45:
                    f1:6f:6f:29:f5:bb:90:ff:c8:0f:32:2d:2f:82:b7:
                    2b:bb:53:5e:09:b9:a7:ad:4f:10:f6:95:c8:14:38:
                    41:78:8f:3a:f6:05:f4:e4:43:21:ff:95:4a:ad:2e:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6B:6B:54:DD:31:24:69:8A:73:0A:09:0B:56:B6:01:25:D9:FC:C6
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3938303a3a2f34322d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:980::/42

    Signature Algorithm: sha256WithRSAEncryption
         62:32:50:d0:2c:fe:07:a0:be:03:27:37:e6:58:63:af:e9:26:
         47:9e:e5:be:cc:ad:e5:71:3f:e5:ff:bd:58:fe:48:76:db:f3:
         d4:55:24:d3:84:ff:c7:1e:d7:24:e1:c1:9e:c5:78:f5:c7:ab:
         20:1b:f6:fa:b6:71:e1:4d:1e:5c:88:93:df:d8:66:fb:4d:21:
         a8:28:a3:c8:56:8a:14:d6:07:8f:11:58:07:ef:78:31:40:b6:
         8d:22:d6:0f:48:72:36:0b:87:84:b7:a2:5c:4e:0f:6d:5f:5e:
         b2:f3:aa:8a:c6:1a:cc:7c:8a:f3:ce:4d:5b:18:cc:a9:ba:b5:
         2e:ef:2a:6d:7a:3e:06:7f:90:e9:e7:42:b3:b3:ec:14:49:3f:
         b7:0e:06:40:03:c5:6c:c0:65:a8:c7:97:8f:e4:a9:d5:af:79:
         54:c3:1c:92:6d:ef:c6:d4:98:53:56:a5:b6:2e:20:35:77:5f:
         5c:0e:c8:d3:8a:17:9d:7c:87:6d:11:4d:1f:53:4b:3f:fd:ac:
         22:ac:67:cd:d6:06:53:2f:d6:8d:a5:f6:b3:95:73:92:9d:0d:
         06:69:d6:50:c0:5c:87:14:24:ee:fc:70:d2:79:e4:6f:af:ac:
         44:e4:c3:45:ba:a9:47:1d:ce:ec:6e:8e:fd:27:75:9a:61:6d:
         51:e2:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:58 2025 by rpki-client