Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa
File:                     323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier:          E1i4mntJCQGjwhVoxk8NcBGzyeT8xRhxthfvj4gtugs=
Subject key identifier:   2F:8A:80:59:CA:41:AC:82:53:2D:D5:B3:F2:15:5B:1D:21:F4:6D:4B
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       305E905059A630A7018A195C8241FCF4D9B0F371
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:51 +0000
ROA not before:           Thu 03 Jul 2025 15:04:51 +0000
ROA not after:            Thu 02 Jul 2026 15:09:51 +0000
asID:                     47272
IP address blocks:        2602:f96d:f72::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5e:90:50:59:a6:30:a7:01:8a:19:5c:82:41:fc:f4:d9:b0:f3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul  3 15:04:51 2025 GMT
            Not After : Jul  2 15:09:51 2026 GMT
        Subject: CN=2F8A8059CA41AC82532DD5B3F2155B1D21F46D4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:d6:bb:cc:10:0d:58:d8:8e:19:77:3f:15:
                    9f:af:6b:2a:68:cc:b5:c5:98:28:8b:6e:19:6b:25:
                    0c:f6:c5:dc:45:ca:6a:2a:6c:04:65:ab:7a:90:79:
                    c8:19:f2:fd:a1:36:3e:d0:bc:ad:5e:f7:f4:9e:a8:
                    60:7a:00:c5:66:c6:fe:cf:de:c3:7b:49:09:1b:aa:
                    3e:8f:6e:a9:cb:82:4a:20:7b:60:7a:ba:8d:25:dd:
                    b0:87:1e:b6:7e:d5:3b:93:bd:5b:76:74:52:25:b2:
                    29:e8:89:f2:32:e9:bc:0b:ba:e7:f0:04:e4:f4:c8:
                    88:40:7c:4c:f7:5c:71:13:e8:e8:f5:9d:e3:18:fb:
                    28:81:79:e4:bd:0a:72:bb:d9:d2:54:b4:05:33:de:
                    0a:99:43:ae:35:b6:76:08:68:36:28:40:0e:ac:28:
                    87:45:f8:94:83:71:12:9d:8f:5d:62:55:3c:f0:02:
                    ab:50:fa:45:35:e7:81:9f:37:5c:91:37:7e:b5:09:
                    db:63:49:50:26:dc:ce:f7:ab:3c:f3:a2:62:dd:6d:
                    c1:0c:b9:f2:b1:d9:05:ed:2d:ea:64:53:f9:5c:f0:
                    8a:14:3e:a9:31:17:8a:bb:f2:98:9d:dc:4b:af:12:
                    31:6f:1c:30:73:98:85:8d:5f:d9:ce:9f:16:3e:05:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:80:59:CA:41:AC:82:53:2D:D5:B3:F2:15:5B:1D:21:F4:6D:4B
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637323a3a2f34382d313238203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f72::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:98:47:a4:73:bd:1c:53:85:77:ba:39:3f:47:4c:54:70:53:
         1e:e4:68:20:8f:11:ac:aa:58:24:b0:b7:67:57:a7:60:0b:82:
         a0:0e:fe:44:43:db:6b:b4:d2:44:07:2e:c4:ce:40:9d:e8:db:
         22:e9:a8:dd:35:3e:de:aa:b0:7b:07:37:37:5d:c1:56:10:e7:
         f6:24:c7:40:76:e0:7f:eb:92:79:e3:4a:78:5a:14:ac:61:f2:
         fc:37:00:3d:b0:04:8c:a1:6d:ba:ae:31:0f:0b:49:cc:0f:f3:
         26:ef:60:5a:f6:72:40:1c:57:16:ab:e6:6c:dd:b5:18:8d:2a:
         a1:80:0f:c0:62:32:d8:5d:75:5e:7c:d9:46:88:e1:0e:fa:64:
         c9:7f:89:20:04:eb:b3:33:aa:8c:49:0c:23:86:a0:f0:75:a8:
         e0:17:ee:52:ec:7f:15:2b:9c:be:f0:6b:e7:77:f7:85:a0:27:
         66:f6:f9:74:96:ec:1b:e7:e2:7e:20:a4:bf:53:06:28:e6:e3:
         a3:bb:5c:51:47:85:fb:be:89:8b:27:3d:71:8b:90:76:72:f2:
         20:31:45:48:ff:f1:a3:b4:5f:3d:48:23:37:c7:f4:ef:08:43:
         5d:62:82:5c:5b:ad:29:c2:bd:62:92:48:d7:4e:10:a6:f3:c5:
         e9:94:d3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:08 2025 by rpki-client