Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637323a3a2f34382d3438203d3e203430363736.roa
File:                     323630323a663936643a6637323a3a2f34382d3438203d3e203430363736.roa (raw, json)
Hash identifier:          PYaMt0DOEbEkjAb5QNQUpyr8YhT/P2oHYoD6nb1o/qw=
Subject key identifier:   4E:8A:B2:1E:C4:3D:A0:18:BF:86:C2:53:00:6E:BD:9F:45:BF:15:9B
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       7CCECE18606EF3B58D1C770A29BCC6FEFBA5415F
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637323a3a2f34382d3438203d3e203430363736.roa
Signing time:             Thu 20 Aug 2026 18:47:33 +0000
ROA not before:           Thu 20 Aug 2026 18:42:33 +0000
ROA not after:            Thu 19 Aug 2027 18:47:33 +0000
asID:                     40676
IP address blocks:        2602:f96d:f72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ce:ce:18:60:6e:f3:b5:8d:1c:77:0a:29:bc:c6:fe:fb:a5:41:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Aug 20 18:42:33 2026 GMT
            Not After : Aug 19 18:47:33 2027 GMT
        Subject: CN=4E8AB21EC43DA018BF86C253006EBD9F45BF159B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4b:82:ef:6a:ad:69:70:49:ac:d9:f0:5f:be:
                    f2:4d:c2:a4:cb:28:38:e2:e8:14:4a:7c:74:ed:8e:
                    d0:d2:fa:9e:c3:4d:35:a6:ae:b0:db:e6:00:c5:02:
                    8f:1a:52:a8:81:5b:38:b7:a2:65:85:4f:59:5b:f8:
                    f4:37:75:2c:fc:8d:9b:d4:9d:39:33:bf:b5:31:20:
                    19:53:9e:90:e0:3b:0f:5d:d3:e3:4b:af:f0:0d:90:
                    ca:13:41:c7:c1:df:ba:76:eb:f4:69:47:03:7d:ea:
                    77:36:82:8e:8c:a1:9e:9d:b2:ea:89:15:50:84:ab:
                    81:6e:4e:31:e0:06:5b:39:e5:17:8a:38:63:20:97:
                    c4:d5:3d:c2:ad:1f:f6:25:b8:9c:48:88:9e:64:7a:
                    06:f3:ad:e7:7b:09:53:2b:fc:c9:4f:69:05:31:34:
                    ca:b5:ff:ac:45:87:2a:5d:94:7f:c8:b4:1a:e8:65:
                    99:f8:1c:d6:28:6e:0e:e9:e9:6c:57:08:3f:48:61:
                    84:be:37:f2:34:cf:e2:db:a6:36:3e:93:74:da:6a:
                    16:3f:3e:8d:a1:dc:2f:17:1e:59:86:7e:ca:de:c4:
                    80:0a:ec:c9:39:9d:55:33:07:ea:85:ca:2c:7e:df:
                    46:3d:78:f3:9a:38:ad:0c:7d:ce:21:74:81:d4:31:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8A:B2:1E:C4:3D:A0:18:BF:86:C2:53:00:6E:BD:9F:45:BF:15:9B
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6637323a3a2f34382d3438203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:f72::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:32:9f:64:7d:a4:c8:06:63:19:34:e6:a1:30:4e:21:0a:6f:
         4d:b7:ae:b0:a1:a9:67:36:ef:92:e2:28:10:24:35:3c:98:da:
         ce:5b:17:7f:84:db:60:a1:ec:2c:8b:99:da:bf:50:07:13:7b:
         d2:7a:7e:2e:f8:31:69:00:7d:22:fd:dd:6b:d0:2b:0a:3d:8d:
         e6:d0:08:a6:ce:d2:82:e6:c4:c4:07:7e:b8:c1:df:2e:b3:6e:
         68:ca:01:79:f3:ce:bd:ac:74:c7:31:2a:84:60:51:7a:f1:8d:
         1e:df:62:d3:78:d2:cf:60:c0:7d:cd:30:ae:df:51:22:eb:22:
         7d:72:f2:ff:f7:81:d4:89:fe:71:d9:8e:06:72:ca:6d:7a:83:
         7f:cb:43:6f:a3:88:ac:2e:f4:03:a2:fb:2f:52:33:d3:fe:d8:
         32:3c:f0:51:df:bd:6c:16:08:59:df:99:e3:4b:c8:4f:09:b0:
         01:fa:b5:e7:ed:64:11:34:15:85:5b:28:e3:35:cc:a7:cb:11:
         eb:f0:e0:8c:99:43:59:c7:d3:6e:a5:0e:03:75:e1:7d:a5:bd:
         04:b0:88:31:36:0f:46:8f:0a:ca:89:71:bf:15:22:75:b0:73:
         15:a3:90:e6:be:b2:46:c0:9d:f7:61:66:c0:a5:07:e4:84:7e:
         f0:2f:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:12 2026 by rpki-client