Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6666653a3a2f34382d3438203d3e20343031353735.roa
File:                     323630323a663936643a6666653a3a2f34382d3438203d3e20343031353735.roa (raw, json)
Hash identifier:          UlSiXSZEUdqn+CPRl1UADlEnMP74fUOLan1veTTf964=
Subject key identifier:   44:5D:83:5C:21:5E:81:03:ED:8A:B5:25:7D:80:D0:0B:18:62:5E:F6
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       3834B45E20C2C5071B3ABC75B5F1F05598C0E26A
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6666653a3a2f34382d3438203d3e20343031353735.roa
Signing time:             Sat 23 Aug 2025 21:43:19 +0000
ROA not before:           Sat 23 Aug 2025 21:38:19 +0000
ROA not after:            Sat 22 Aug 2026 21:43:19 +0000
asID:                     401575
IP address blocks:        2602:f96d:ffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 15:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:34:b4:5e:20:c2:c5:07:1b:3a:bc:75:b5:f1:f0:55:98:c0:e2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Aug 23 21:38:19 2025 GMT
            Not After : Aug 22 21:43:19 2026 GMT
        Subject: CN=445D835C215E8103ED8AB5257D80D00B18625EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:60:01:db:75:53:52:39:93:dc:39:50:4c:
                    46:0f:83:70:7c:e0:26:8a:0a:71:68:55:0e:57:62:
                    a2:6e:c0:7f:b1:c8:a1:4d:ac:2e:5d:12:2a:7f:0b:
                    a7:23:31:dd:85:60:38:ed:95:5c:c7:08:b8:9b:e8:
                    27:44:1c:f2:82:74:39:41:07:65:10:69:a2:6e:54:
                    26:25:f2:db:fb:0a:08:3f:e4:b4:b7:c7:63:a6:db:
                    ab:16:ff:87:54:1b:f8:4d:dc:ee:f9:c2:19:90:0b:
                    d9:21:c6:0b:f8:38:54:5d:93:c6:36:be:10:77:61:
                    8e:9e:d1:33:75:71:65:07:c0:a4:7d:00:01:d2:75:
                    c5:4c:de:46:43:85:01:c7:f9:64:29:3e:ec:66:5d:
                    92:d1:5e:e5:7d:f2:3b:93:f7:a4:3d:c4:02:27:c2:
                    c3:d1:c1:71:04:0c:0e:4b:9a:d5:bb:31:e7:42:77:
                    54:a5:08:6c:60:09:37:83:14:99:e6:2f:63:d5:f0:
                    a4:d4:f9:b4:b4:bf:41:95:2a:ac:87:11:0e:70:a1:
                    8f:4b:e2:40:eb:bb:1d:67:f5:b6:66:b2:ff:b9:7e:
                    76:10:c2:70:43:0e:82:3a:1f:26:ca:e1:3b:55:72:
                    50:48:d4:23:b9:4d:bb:56:2e:43:c6:f2:8d:cd:d5:
                    1b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5D:83:5C:21:5E:81:03:ED:8A:B5:25:7D:80:D0:0B:18:62:5E:F6
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6666653a3a2f34382d3438203d3e20343031353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:ffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:6b:ca:dd:ee:09:c2:2e:ef:44:76:50:19:45:de:af:75:65:
         cb:51:99:7f:81:03:92:06:09:67:53:c4:2b:95:f4:78:0b:58:
         b6:7a:ea:42:22:fe:ba:3a:e4:b2:90:dc:d7:76:ab:18:ed:58:
         3d:f6:7d:09:8f:44:ae:e8:50:f1:02:22:03:c2:ef:4b:08:37:
         3b:56:f0:4d:7d:0a:cd:63:bf:27:1d:78:cf:1e:c1:47:f9:bc:
         b8:97:38:db:91:da:81:5b:c8:47:3a:18:f6:7b:58:af:a3:2e:
         de:f2:31:b5:6b:26:83:94:93:a0:ea:39:fd:49:91:75:83:0b:
         89:29:ea:27:f1:f5:89:dc:46:75:79:04:9e:c8:9d:9f:dd:b0:
         82:2e:f4:67:8c:86:e4:b1:24:1d:3f:7f:78:47:13:5a:5e:7d:
         a4:38:ef:98:61:54:f8:67:d6:31:06:fd:70:7b:9c:2a:79:8e:
         d1:7c:cc:e1:4a:05:6d:c5:18:09:41:be:ae:4e:0e:ea:91:de:
         84:7c:07:be:1c:9b:78:f9:46:ab:f4:6b:47:18:74:ef:f4:8e:
         e2:5f:26:cd:bf:ab:40:ec:fb:2d:04:ac:b7:8a:86:16:b7:f6:
         07:3a:60:43:24:93:c3:87:22:31:f7:5e:62:f3:a6:e2:d0:35:
         dc:bc:94:dd
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIUODS0XiDCxQcbOrx1tfHwVZjA4mowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYWQzMTkyODNmYjI0MjJiNGQwMGMwODQ5
YjlhODNjOTY0NGY4ODhjYmIwHhcNMjUwODIzMjEzODE5WhcNMjYwODIyMjE0MzE5
WjAzMTEwLwYDVQQDEyg0NDVEODM1QzIxNUU4MTAzRUQ4QUI1MjU3RDgwRDAwQjE4
NjI1RUY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZtgAdt1U1I5
k9w5UExGD4NwfOAmigpxaFUOV2KibsB/scihTawuXRIqfwunIzHdhWA47ZVcxwi4
m+gnRBzygnQ5QQdlEGmiblQmJfLb+woIP+S0t8djpturFv+HVBv4Tdzu+cIZkAvZ
IcYL+DhUXZPGNr4Qd2GOntEzdXFlB8CkfQAB0nXFTN5GQ4UBx/lkKT7sZl2S0V7l
ffI7k/ekPcQCJ8LD0cFxBAwOS5rVuzHnQndUpQhsYAk3gxSZ5i9j1fCk1Pm0tL9B
lSqshxEOcKGPS+JA67sdZ/W2ZrL/uX52EMJwQw6COh8myuE7VXJQSNQjuU27Vi5D
xvKNzdUb2QIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFERdg1whXoED7Yq1JX2A0AsY
Yl72MB8GA1UdIwQYMBaAFID1Ai1qifTqV6sPYTHTNmGqwwvpMA4GA1UdDwEB/wQE
AwIHgDBkBgNVHR8EXTBbMFmgV6BVhlNyc3luYzovL2tyaWxsLjQ3MjcyLm5ldC9y
ZXBvL0hZRUhPU1QvMS84MEY1MDIyRDZBODlGNEVBNTdBQjBGNjEzMUQzMzY2MUFB
QzMwQkU5LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5
bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEy
M2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QvMDJjNzcwNmItM2JhZi00MmNiLWJkZjctNzgy
YjAzNjI1MmIzL2Y0NGM4MmRhYmFkMzE5MjgzZmIyNDIyYjRkMDBjMDg0OWI5YTgz
Yzk2NDRmODg4Y2JiLmNlcjCBhQYIKwYBBQUHAQsEeTB3MHUGCCsGAQUFBzALhmly
c3luYzovL2tyaWxsLjQ3MjcyLm5ldC9yZXBvL0hZRUhPU1QvMS8zMjM2MzAzMjNh
NjYzOTM2NjQzYTY2NjY2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzAzMTM1
MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHACYC+W0P/jANBgkqhkiG9w0BAQsFAAOCAQEARWvK3e4J
wi7vRHZQGUXer3Vly1GZf4EDkgYJZ1PEK5X0eAtYtnrqQiL+ujrkspDc13arGO1Y
PfZ9CY9EruhQ8QIiA8LvSwg3O1bwTX0KzWO/Jx14zx7BR/m8uJc425HagVvIRzoY
9ntYr6Mu3vIxtWsmg5SToOo5/UmRdYMLiSnqJ/H1idxGdXkEnsidn92wgi70Z4yG
5LEkHT9/eEcTWl59pDjvmGFU+GfWMQb9cHucKnmO0XzM4UoFbcUYCUG+rk4O6pHe
hHwHvhybePlGq/RrRxh07/SO4l8mzb+rQOz7LQSst4qGFrf2BzpgQySTw4ciMfde
YvOm4tA13LyU3Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 18:46:04 2025 by rpki-client