Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6666643a3a2f34382d3438203d3e203430363736.roa
File:                     323630323a663936643a6666643a3a2f34382d3438203d3e203430363736.roa (raw, json)
Hash identifier:          iWF+qR5iS0hHmCsNhCcee9HpemXQIX94QHuvHgUwEHc=
Subject key identifier:   FA:25:63:22:89:D9:D1:43:71:05:DC:F4:0F:B9:76:BF:6E:59:23:34
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       F5AF7FCFCB7CF449207CF2B83ECF259651CEEE
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6666643a3a2f34382d3438203d3e203430363736.roa
Signing time:             Thu 20 Aug 2026 18:48:19 +0000
ROA not before:           Thu 20 Aug 2026 18:43:19 +0000
ROA not after:            Thu 19 Aug 2027 18:48:19 +0000
asID:                     40676
IP address blocks:        2602:f96d:ffd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f5:af:7f:cf:cb:7c:f4:49:20:7c:f2:b8:3e:cf:25:96:51:ce:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Aug 20 18:43:19 2026 GMT
            Not After : Aug 19 18:48:19 2027 GMT
        Subject: CN=FA25632289D9D1437105DCF40FB976BF6E592334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:f6:88:43:aa:37:11:cf:f6:11:a9:70:4b:
                    29:d5:02:ab:65:f6:d1:a7:46:59:6d:3a:af:2d:93:
                    2f:01:bb:8d:6a:8e:d5:df:f1:4d:8b:c9:53:2b:3b:
                    e1:ef:9a:03:40:a5:c8:39:d3:b2:9f:f4:0b:ed:85:
                    c8:20:50:8e:9c:ab:b3:04:59:78:be:a9:40:ff:f1:
                    87:2b:ca:65:79:d5:46:7c:03:bc:53:68:09:f6:62:
                    f8:5d:d6:99:02:5b:a2:59:ca:ce:d1:bb:da:c6:11:
                    99:88:a5:31:eb:8c:c2:d6:0e:fb:3c:be:46:64:7e:
                    ad:fa:2b:5d:d7:c8:12:60:00:59:8e:c4:b8:59:f2:
                    56:bf:36:48:03:84:8d:78:86:29:b8:e1:5c:7c:7f:
                    3a:a0:14:27:ca:02:af:48:e8:a3:30:0d:9f:48:49:
                    7a:28:b0:83:5b:e8:e6:57:c4:ce:25:8f:41:df:dc:
                    23:6c:99:1e:52:e4:47:1f:3e:80:81:83:d5:61:da:
                    05:8e:63:34:7f:e5:77:9d:dc:44:32:e5:f4:70:c2:
                    d4:7b:a3:06:f6:48:1f:32:5d:15:a5:7a:ff:13:f0:
                    3b:2c:24:32:b8:a9:cf:16:d1:13:e7:2d:26:a7:97:
                    51:ff:58:f5:8f:39:1a:52:41:3f:97:ab:f1:e4:0c:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:25:63:22:89:D9:D1:43:71:05:DC:F4:0F:B9:76:BF:6E:59:23:34
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6666643a3a2f34382d3438203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:f8:8a:ca:65:95:fc:51:a0:b4:fa:0b:45:7d:2a:5e:07:0e:
         11:e6:53:4c:3f:64:fa:55:88:2f:c2:f4:3e:98:15:a1:d2:2c:
         7b:cd:6c:b3:03:d6:61:1c:cf:7d:39:95:72:6f:7f:5d:a1:dc:
         7c:c6:40:00:fd:ae:f1:7f:6b:80:0d:33:d7:74:0a:7c:2a:8a:
         69:28:08:54:b1:93:77:54:d5:07:2c:cc:23:6f:ff:48:8d:91:
         20:0d:61:e3:4f:5d:2f:48:07:a3:7b:8b:b3:89:d5:1a:c3:ba:
         1c:4c:3d:b8:9c:b7:83:54:a7:0e:dd:97:c4:08:b4:0c:f3:bc:
         8b:b8:ff:b1:71:83:4c:8d:29:55:ec:69:bc:25:6c:e9:bd:ca:
         0f:85:6e:00:e7:c3:c3:81:7e:b1:09:54:4d:1e:36:70:93:2b:
         d4:61:e7:90:07:6d:bd:5f:c5:ad:3f:3d:de:a3:1e:43:25:bf:
         78:6d:fa:9e:a8:1d:76:5e:b5:d6:33:57:e8:80:98:c7:89:ba:
         af:58:58:f6:36:4d:6a:34:20:dd:34:7b:61:c9:24:d8:ee:c2:
         83:5f:f2:42:45:cf:d3:df:b7:18:9e:ad:09:c4:eb:31:2e:15:
         c6:56:09:12:fb:62:c0:fe:84:9a:db:66:1f:bc:25:b1:68:13:
         45:66:0d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:12 2026 by rpki-client