Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa
File:                     323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa (raw, json)
Hash identifier:          hadeX/UjD3jvyDYYzxSJYwAJ1n0x/g2gtbLN85zWg0M=
Subject key identifier:   38:D4:2B:F6:0A:EA:01:1C:C7:39:97:25:BC:69:90:8B:8A:CA:F2:09
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       052D1698C64562EB40794AD53A9E66641DB3778E
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:50 +0000
ROA not before:           Thu 03 Jul 2025 15:04:50 +0000
ROA not after:            Thu 02 Jul 2026 15:09:50 +0000
asID:                     47272
IP address blocks:        2602:f96d:f00::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2d:16:98:c6:45:62:eb:40:79:4a:d5:3a:9e:66:64:1d:b3:77:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul  3 15:04:50 2025 GMT
            Not After : Jul  2 15:09:50 2026 GMT
        Subject: CN=38D42BF60AEA011CC7399725BC69908B8ACAF209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:ff:54:ad:e5:5b:b2:0e:dc:07:29:eb:ea:
                    7f:db:81:66:e3:f5:a8:41:2f:a6:ec:95:f6:e7:9a:
                    45:8e:90:58:aa:cf:29:a7:bf:08:18:51:2d:f5:96:
                    0e:e8:b9:93:9b:3e:9b:3c:21:d8:c2:db:56:d6:92:
                    04:3b:57:d4:ea:13:d7:6e:72:d5:df:49:4f:b0:ee:
                    77:a3:58:9b:ef:c1:f6:5c:36:6d:fb:38:01:d2:2a:
                    16:7d:db:b2:4c:fc:b0:30:bf:d2:c5:a4:66:80:c1:
                    19:58:58:1a:d3:03:f7:08:9b:3e:fd:00:a8:81:1e:
                    00:a2:28:85:39:27:15:ff:31:76:50:b1:38:61:ff:
                    65:dc:70:cb:f2:7d:a5:5c:cf:ba:dc:3f:dd:a1:5f:
                    a2:87:e7:df:ef:18:09:1f:5c:c1:9f:c7:d2:bd:b0:
                    8b:a1:a9:1c:9c:3f:d5:89:04:90:48:bf:95:73:31:
                    9d:85:9c:e1:88:6e:06:54:14:fc:a8:49:65:68:19:
                    43:bf:54:b5:de:09:19:99:fa:60:2e:ff:47:79:04:
                    ea:1c:12:5e:84:66:23:1b:c1:84:df:b6:4f:67:67:
                    39:d4:e4:08:92:b4:4f:42:c5:7f:d3:5e:9d:40:51:
                    ac:aa:62:03:c6:8e:4d:17:12:b7:03:24:e3:ef:fe:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D4:2B:F6:0A:EA:01:1C:C7:39:97:25:BC:69:90:8B:8A:CA:F2:09
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6630303a3a2f34342d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f00::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:8c:ad:1c:f7:02:88:59:c8:01:d1:44:de:3e:45:a7:a4:02:
         db:e8:f3:9c:c7:65:56:d4:f1:11:e9:89:05:28:c3:b2:21:f9:
         86:2e:93:b6:ba:8e:ea:ee:cc:6d:58:ce:45:f3:f1:d4:ca:14:
         b2:f2:ea:d6:3d:b5:17:11:c4:b8:72:98:08:ef:59:f2:03:2d:
         f1:71:9d:b9:5c:98:be:51:8f:97:6b:b1:79:64:aa:4a:0f:ee:
         0e:fe:57:5c:f2:4e:95:86:5e:d5:a6:ca:e6:39:b3:c8:f7:34:
         16:83:fc:db:27:62:53:5d:41:f0:9f:47:98:5e:f2:35:9b:58:
         9e:00:d2:a2:fe:f4:34:db:d3:5f:05:c4:d2:fb:76:6d:79:be:
         fd:e8:29:3b:e8:6a:4c:ed:f4:2d:35:66:4e:13:43:4c:b6:a8:
         3b:a1:b9:4d:27:73:12:e4:8d:a4:6a:69:89:0e:90:bb:89:a5:
         e7:6a:92:08:9a:6c:4b:ab:05:27:fa:08:3d:22:28:04:44:46:
         99:66:15:bf:1d:34:ed:56:89:78:0e:8b:42:88:2d:c2:5f:77:
         d3:1d:30:b3:55:d2:d2:bc:61:11:98:05:5d:e5:f4:3e:b3:cd:
         3e:eb:c2:8a:f8:ae:c8:6a:75:74:a0:26:e8:a7:f8:55:b3:6c:
         a5:17:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:15:58 2025 by rpki-client