Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa
File:                     323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          jvUgnNfSa3qoTM3S08/3uSVZH58QoXl/4vC/e7BC3rs=
Subject key identifier:   27:2C:6F:A6:56:4A:5F:5F:27:ED:F1:5E:1F:D7:91:75:18:29:57:16
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       65213DCA6B1A0D7D5C57EFFF5C5216B1C225F115
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:51 +0000
ROA not before:           Thu 03 Jul 2025 15:04:51 +0000
ROA not after:            Thu 02 Jul 2026 15:09:51 +0000
asID:                     47272
IP address blocks:        2602:f96d:f71::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:21:3d:ca:6b:1a:0d:7d:5c:57:ef:ff:5c:52:16:b1:c2:25:f1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul  3 15:04:51 2025 GMT
            Not After : Jul  2 15:09:51 2026 GMT
        Subject: CN=272C6FA6564A5F5F27EDF15E1FD7917518295716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:02:3e:d6:b3:dd:af:7e:b3:39:58:2e:88:
                    58:42:11:ae:51:cd:4f:93:49:44:b3:0f:b7:65:12:
                    4e:76:16:f2:86:a4:e6:65:fb:df:7a:c7:b6:dc:1c:
                    51:96:00:25:02:0b:a5:b8:c0:33:47:df:f3:79:f1:
                    4b:f2:fc:ff:47:3f:27:d0:b3:26:1a:6f:e8:51:3a:
                    6d:30:dc:f9:42:b0:83:46:bd:bb:18:5e:a7:2c:75:
                    38:9d:72:67:64:ae:94:78:66:e3:44:6f:69:d3:72:
                    62:cc:16:72:02:b9:c3:4a:c8:7a:72:a4:3d:cc:f1:
                    89:70:8b:d6:81:c0:41:d1:0b:5d:ef:ad:71:ac:98:
                    c4:f6:f0:82:19:d3:83:45:21:c5:a3:e3:f0:da:81:
                    c1:c0:4d:15:3c:9a:94:b1:68:9d:d4:95:78:7a:d1:
                    4b:80:a6:b6:b2:19:a1:85:7e:bd:7f:dd:4d:65:31:
                    ff:05:5f:25:2a:d4:ff:ff:0b:cb:7b:c2:49:80:c5:
                    49:c4:9f:58:27:04:b0:46:14:68:17:d4:c2:91:e9:
                    12:c9:e9:16:fa:92:fc:6a:7d:62:e5:b8:26:2c:9d:
                    d7:ff:1f:e4:5e:01:1f:bf:aa:af:af:cc:ae:f1:86:
                    17:a8:3d:a8:a7:fe:e9:3b:3f:12:3d:fb:77:17:4b:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2C:6F:A6:56:4A:5F:5F:27:ED:F1:5E:1F:D7:91:75:18:29:57:16
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637313a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f71::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:7e:20:28:9c:85:28:d5:a6:da:07:02:da:2b:08:8f:3d:16:
         95:6b:47:a1:12:4e:08:52:86:7c:13:7b:bb:45:5c:f0:d9:5b:
         60:74:1e:fb:12:41:f2:31:51:8c:99:66:5e:08:de:da:d6:8b:
         ce:db:3f:29:04:c5:a9:16:4a:a5:23:09:2a:fb:3f:d0:ca:d5:
         7c:58:d9:4e:8e:5b:4c:1c:53:70:e6:0d:72:7c:74:b1:ec:48:
         00:2c:a2:09:d9:87:ab:1c:79:bd:ca:c2:33:c2:0c:0b:c9:82:
         eb:8a:1c:a1:b2:64:b5:1b:1a:bb:fd:ff:ba:66:d9:68:72:7f:
         f0:d2:5a:05:c8:2f:03:ec:01:f0:bb:f6:e1:b1:02:0e:80:4a:
         38:92:f2:bb:5b:5c:6f:f5:30:78:b2:82:5f:2e:57:13:86:d0:
         e7:ff:a0:cb:40:12:8d:6c:1c:be:d6:50:ad:2c:89:2a:91:44:
         23:d3:94:33:e7:f9:0c:98:51:00:6b:a4:c2:47:48:f6:cc:b1:
         95:7b:36:1f:9b:00:57:e4:08:ce:d9:d4:92:db:5f:96:1e:34:
         c6:f2:80:c7:06:f6:f6:a5:32:c3:ab:a3:7c:1a:dc:bd:5d:eb:
         cf:c6:8b:c9:8f:70:f5:66:95:a5:47:3c:e0:bd:bc:39:60:ff:
         21:ff:81:cf
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIUZSE9ymsaDX1cV+//XFIWscIl8RUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYWQzMTkyODNmYjI0MjJiNGQwMGMwODQ5
YjlhODNjOTY0NGY4ODhjYmIwHhcNMjUwNzAzMTUwNDUxWhcNMjYwNzAyMTUwOTUx
WjAzMTEwLwYDVQQDEygyNzJDNkZBNjU2NEE1RjVGMjdFREYxNUUxRkQ3OTE3NTE4
Mjk1NzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtACPtaz3a9+
szlYLohYQhGuUc1Pk0lEsw+3ZRJOdhbyhqTmZfvfese23BxRlgAlAguluMAzR9/z
efFL8vz/Rz8n0LMmGm/oUTptMNz5QrCDRr27GF6nLHU4nXJnZK6UeGbjRG9p03Ji
zBZyArnDSsh6cqQ9zPGJcIvWgcBB0Qtd761xrJjE9vCCGdODRSHFo+Pw2oHBwE0V
PJqUsWid1JV4etFLgKa2shmhhX69f91NZTH/BV8lKtT//wvLe8JJgMVJxJ9YJwSw
RhRoF9TCkekSyekW+pL8an1i5bgmLJ3X/x/kXgEfv6qvr8yu8YYXqD2op/7pOz8S
Pft3F0vIMwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFCcsb6ZWSl9fJ+3xXh/XkXUY
KVcWMB8GA1UdIwQYMBaAFID1Ai1qifTqV6sPYTHTNmGqwwvpMA4GA1UdDwEB/wQE
AwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzovL2tyaWxsLjQ3MjcyLm5ldC9y
ZXBvL0hZRUhPU1QvMS84MEY1MDIyRDZBODlGNEVBNTdBQjBGNjEzMUQzMzY2MUFB
QzMwQkU5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5
bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEy
M2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QvMDJjNzcwNmItM2JhZi00MmNiLWJkZjctNzgy
YjAzNjI1MmIzL2Y0NGM4MmRhYmFkMzE5MjgzZmIyNDIyYjRkMDBjMDg0OWI5YTgz
Yzk2NDRmODg4Y2JiLmNlcjCBhQYIKwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmly
c3luYzovL2tyaWxsLjQ3MjcyLm5ldC9yZXBvL0hZRUhPU1QvMS8zMjM2MzAzMjNh
NjYzOTM2NjQzYTY2MzczMTNhM2EyZjM0MzgyZDMxMzIzODIwM2QzZTIwMzQzNzMy
MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACYC+W0PcTANBgkqhkiG9w0BAQsFAAOCAQEAa34gKJyF
KNWm2gcC2isIjz0WlWtHoRJOCFKGfBN7u0Vc8NlbYHQe+xJB8jFRjJlmXgje2taL
zts/KQTFqRZKpSMJKvs/0MrVfFjZTo5bTBxTcOYNcnx0sexIACyiCdmHqxx5vcrC
M8IMC8mC64ocobJktRsau/3/umbZaHJ/8NJaBcgvA+wB8Lv24bECDoBKOJLyu1tc
b/UweLKCXy5XE4bQ5/+gy0ASjWwcvtZQrSyJKpFEI9OUM+f5DJhRAGukwkdI9syx
lXs2H5sAV+QIztnUkttflh40xvKAxwb29qUyw6ujfBrcvV3rz8aLyY9w9WaVpUc8
4L28OWD/If+Bzw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:11 2025 by rpki-client