Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a3a2f34302d313238203d3e203437323732.roa
File:                     323630323a663936643a3a2f34302d313238203d3e203437323732.roa (raw, json)
Hash identifier:          j//2v4H1ZJlWuvkuUKiSx4ZInlpg5RVV5IloIctpluQ=
Subject key identifier:   67:0D:7D:88:8F:76:04:AC:F3:F2:B9:2D:47:73:A3:8D:FC:BA:CE:07
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       414996C3108AB4A1ED4D6750EE78838E2FF85855
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3a2f34302d313238203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:52 +0000
ROA not before:           Thu 03 Jul 2025 15:04:52 +0000
ROA not after:            Thu 02 Jul 2026 15:09:52 +0000
asID:                     47272
IP address blocks:        2602:f96d::/40 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 17:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:49:96:c3:10:8a:b4:a1:ed:4d:67:50:ee:78:83:8e:2f:f8:58:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul  3 15:04:52 2025 GMT
            Not After : Jul  2 15:09:52 2026 GMT
        Subject: CN=670D7D888F7604ACF3F2B92D4773A38DFCBACE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:37:ee:33:7e:fd:35:74:3a:b0:f8:30:ca:15:
                    7b:91:ae:8f:28:43:ee:a5:f6:9b:4a:c4:d1:37:84:
                    77:23:23:d0:5b:34:6a:f5:1b:09:9e:53:b4:43:22:
                    cc:ea:a0:08:d6:7b:9e:73:3e:9b:aa:3a:cd:b0:53:
                    25:71:b5:a4:6b:c2:b4:13:c2:9c:40:37:90:04:16:
                    16:a3:28:08:0b:fb:38:c2:9f:fd:c4:7b:2a:2f:11:
                    b1:21:3d:15:f7:b7:0e:27:e6:2a:b8:ab:da:2d:73:
                    14:f2:6f:44:53:9d:d7:5a:9e:55:17:a6:9d:f3:0b:
                    dd:f0:a9:42:1b:22:c9:f4:57:b0:95:8d:c8:88:67:
                    be:8a:f6:e4:10:00:c2:b0:7d:7d:03:52:bb:a3:60:
                    98:c7:33:49:43:62:ad:3b:bb:c3:54:30:ce:38:36:
                    83:bd:da:f5:a6:1f:f5:a3:4c:9c:f9:b7:60:7a:1b:
                    45:c4:37:af:94:4f:70:68:16:26:57:ef:b6:48:43:
                    88:9a:52:85:df:ed:bd:fd:c8:47:b0:b2:9f:87:a5:
                    c4:f9:20:8e:5e:ca:ae:3d:47:ff:cd:b4:70:2f:7d:
                    9f:ec:e4:05:db:a2:ea:5b:8b:70:6d:00:49:8d:01:
                    c3:86:52:29:26:8f:12:b4:ee:2d:2d:1e:ad:6e:8d:
                    20:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0D:7D:88:8F:76:04:AC:F3:F2:B9:2D:47:73:A3:8D:FC:BA:CE:07
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a3a2f34302d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:ac:4a:52:f0:db:00:5c:19:4d:65:84:cd:74:4c:6f:6b:e7:
         b1:b0:83:18:7a:c8:f5:ed:64:69:92:31:95:48:22:a0:a1:7e:
         0e:67:b1:0e:7c:8a:6a:0a:fb:45:e1:a4:c9:29:91:85:3d:8c:
         e2:5f:23:b4:bb:a2:75:59:e3:80:8c:d3:38:df:e5:2a:66:5f:
         04:4d:07:4f:d4:bd:e0:3c:03:22:c9:18:82:4d:b3:85:90:00:
         c8:6a:67:a9:59:1c:0f:f7:09:67:a0:d4:4f:3c:a1:88:b4:56:
         2c:fe:39:f8:b8:fd:ee:74:83:09:58:5e:18:c8:a0:b2:cb:4b:
         f9:7a:51:c8:38:d4:96:27:17:2d:6b:79:be:a8:d1:2b:5d:90:
         6f:1e:32:dd:77:9d:79:03:7c:f9:8a:f3:b0:86:51:f4:cc:98:
         fc:9c:13:ff:63:8e:fd:9b:97:83:fc:b6:0a:3a:e0:d9:59:d7:
         03:e0:36:38:97:56:21:4f:c8:ec:07:21:63:32:36:2a:0b:e8:
         c0:b9:28:f4:12:27:94:9c:d6:50:cc:71:10:f6:9a:25:7a:5d:
         41:e7:71:6b:c8:57:38:6f:e4:73:97:96:c0:41:d9:84:ae:1a:
         7b:8d:50:e4:ad:e0:8b:78:c6:81:4d:c0:7d:4e:20:b1:50:93:
         01:58:c7:6c
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUQUmWwxCKtKHtTWdQ7niDji/4WFUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYWQzMTkyODNmYjI0MjJiNGQwMGMwODQ5
YjlhODNjOTY0NGY4ODhjYmIwHhcNMjUwNzAzMTUwNDUyWhcNMjYwNzAyMTUwOTUy
WjAzMTEwLwYDVQQDEyg2NzBEN0Q4ODhGNzYwNEFDRjNGMkI5MkQ0NzczQTM4REZD
QkFDRTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DfuM379NXQ6
sPgwyhV7ka6PKEPupfabSsTRN4R3IyPQWzRq9RsJnlO0QyLM6qAI1nuecz6bqjrN
sFMlcbWka8K0E8KcQDeQBBYWoygIC/s4wp/9xHsqLxGxIT0V97cOJ+YquKvaLXMU
8m9EU53XWp5VF6ad8wvd8KlCGyLJ9FewlY3IiGe+ivbkEADCsH19A1K7o2CYxzNJ
Q2KtO7vDVDDOODaDvdr1ph/1o0yc+bdgehtFxDevlE9waBYmV++2SEOImlKF3+29
/chHsLKfh6XE+SCOXsquPUf/zbRwL32f7OQF26LqW4twbQBJjQHDhlIpJo8StO4t
LR6tbo0gfQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGcNfYiPdgSs8/K5LUdzo438
us4HMB8GA1UdIwQYMBaAFID1Ai1qifTqV6sPYTHTNmGqwwvpMA4GA1UdDwEB/wQE
AwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzovL2tyaWxsLjQ3MjcyLm5ldC9y
ZXBvL0hZRUhPU1QvMS84MEY1MDIyRDZBODlGNEVBNTdBQjBGNjEzMUQzMzY2MUFB
QzMwQkU5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5
bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEy
M2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QvMDJjNzcwNmItM2JhZi00MmNiLWJkZjctNzgy
YjAzNjI1MmIzL2Y0NGM4MmRhYmFkMzE5MjgzZmIyNDIyYjRkMDBjMDg0OWI5YTgz
Yzk2NDRmODg4Y2JiLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJz
eW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9TVC8xLzMyMzYzMDMyM2E2
NjM5MzY2NDNhM2EyZjM0MzAyZDMxMzIzODIwM2QzZTIwMzQzNzMyMzczMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQC
AAIwCAMGACYC+W0AMA0GCSqGSIb3DQEBCwUAA4IBAQBTrEpS8NsAXBlNZYTNdExv
a+exsIMYesj17WRpkjGVSCKgoX4OZ7EOfIpqCvtF4aTJKZGFPYziXyO0u6J1WeOA
jNM43+UqZl8ETQdP1L3gPAMiyRiCTbOFkADIamepWRwP9wlnoNRPPKGItFYs/jn4
uP3udIMJWF4YyKCyy0v5elHIONSWJxcta3m+qNErXZBvHjLdd515A3z5ivOwhlH0
zJj8nBP/Y479m5eD/LYKOuDZWdcD4DY4l1YhT8jsByFjMjYqC+jAuSj0EieUnNZQ
zHEQ9polel1B53FryFc4b+Rzl5bAQdmErhp7jVDkreCLeMaBTcB9TiCxUJMBWMds
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:11 2025 by rpki-client