Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/4/3139322e36372e33352e302f32342d3332203d3e203437323732.roa
File:                     3139322e36372e33352e302f32342d3332203d3e203437323732.roa (raw, json)
Hash identifier:          4p1kg1lAdXnWBM4LFDB7Tg2etrzKJDSBYkJXmM434Xs=
Subject key identifier:   61:37:CD:5B:7F:03:E1:1C:A1:0F:21:56:AE:F2:99:B4:84:3A:04:9E
Certificate issuer:       /CN=6A085FFB2907E47D476E04DACC9BB9C537740CA5
Certificate serial:       183644AA907290F31964BB265FA39A3F7A9A8D62
Authority key identifier: 6A:08:5F:FB:29:07:E4:7D:47:6E:04:DA:CC:9B:B9:C5:37:74:0C:A5
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/6A085FFB2907E47D476E04DACC9BB9C537740CA5.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/4/3139322e36372e33352e302f32342d3332203d3e203437323732.roa
Signing time:             Thu 03 Jul 2025 15:09:53 +0000
ROA not before:           Thu 03 Jul 2025 15:04:53 +0000
ROA not after:            Thu 02 Jul 2026 15:09:53 +0000
asID:                     47272
IP address blocks:        192.67.35.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.crl
                          rsync://krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/6A085FFB2907E47D476E04DACC9BB9C537740CA5.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 07:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:36:44:aa:90:72:90:f3:19:64:bb:26:5f:a3:9a:3f:7a:9a:8d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A085FFB2907E47D476E04DACC9BB9C537740CA5
        Validity
            Not Before: Jul  3 15:04:53 2025 GMT
            Not After : Jul  2 15:09:53 2026 GMT
        Subject: CN=6137CD5B7F03E11CA10F2156AEF299B4843A049E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:b0:9d:5c:c6:44:91:04:22:0b:01:87:43:
                    cd:b7:5f:f2:cc:f2:3a:a8:05:fd:77:c8:ee:a1:dd:
                    39:05:e5:e4:c8:1b:c8:0d:0b:7b:99:7d:69:8f:3b:
                    7c:71:5d:12:66:38:c5:88:36:ee:91:06:ed:5f:0d:
                    ee:0c:2d:35:f7:9a:92:1b:97:26:5d:45:f6:80:90:
                    69:2e:d2:45:eb:f2:5d:df:bc:e0:67:b2:ec:8c:7c:
                    9c:ad:5e:94:e7:4e:0f:22:5c:0d:c0:fa:1f:fc:08:
                    9b:86:3c:a1:a0:e1:fa:1a:54:bb:6e:c0:d1:0e:25:
                    aa:c0:d3:b2:b7:dd:e0:92:cf:26:3e:32:8b:21:90:
                    00:62:d6:70:ed:c2:ec:83:26:c1:52:b5:90:fa:3a:
                    f3:2f:79:65:ab:df:5c:f8:29:52:f5:33:23:87:ec:
                    b0:ee:78:7e:d9:7a:a5:f3:8c:15:14:79:ce:be:db:
                    70:77:66:ca:3a:ce:d0:fc:d6:77:60:6b:91:b2:76:
                    1e:a5:ae:02:1f:e7:39:dd:c8:c2:fd:88:0e:32:2b:
                    67:21:53:1e:7c:3b:43:51:c4:b8:db:94:87:a3:1a:
                    7f:33:48:fd:d1:d5:8a:39:09:65:6a:61:c8:88:86:
                    28:0d:d0:49:99:a5:a8:32:db:15:23:5f:d2:16:b6:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:37:CD:5B:7F:03:E1:1C:A1:0F:21:56:AE:F2:99:B4:84:3A:04:9E
            X509v3 Authority Key Identifier:
                keyid:6A:08:5F:FB:29:07:E4:7D:47:6E:04:DA:CC:9B:B9:C5:37:74:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/4/6A085FFB2907E47D476E04DACC9BB9C537740CA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/6A085FFB2907E47D476E04DACC9BB9C537740CA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/4/3139322e36372e33352e302f32342d3332203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:66:76:41:ce:e1:e7:f1:d2:30:ad:2d:4e:a0:81:a5:08:c6:
         99:1f:fc:1f:a2:dc:a3:44:4d:c1:18:37:78:87:37:5f:77:ec:
         61:04:b9:8f:33:92:9f:5c:08:cb:5e:9f:30:01:9b:05:f7:3f:
         7e:5e:e7:ad:66:ce:4e:4e:58:a3:6c:2a:54:8b:c4:7c:65:7c:
         83:66:c9:45:8d:50:c0:63:d1:7d:b9:27:9f:4f:1b:ab:ea:82:
         52:73:83:8f:30:55:a8:f2:d9:92:35:fe:28:b0:21:e8:51:94:
         0c:e4:02:32:e7:20:2e:6c:37:37:de:e8:98:97:3a:55:59:a8:
         ce:9b:cf:cf:67:57:da:2e:17:7c:cc:eb:5a:7d:ba:72:57:5e:
         43:4e:a4:6d:a8:8f:23:74:02:63:48:f0:4d:61:99:a3:6b:9a:
         9b:ad:7e:7a:8e:f0:4e:f4:21:a6:9b:e8:72:21:7e:fe:94:48:
         04:74:7f:a9:a6:d3:4f:e3:52:05:49:4e:e9:db:4a:71:92:dc:
         bc:9d:7e:9b:ad:e6:48:a2:61:a5:98:8c:28:26:de:04:08:10:
         a5:9a:97:9f:ce:ba:5e:ba:6d:2c:75:49:55:c3:4c:da:17:c0:
         61:8a:6f:4e:26:1f:80:bc:f7:28:01:d4:87:35:73:56:91:92:
         04:c5:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 23:40:45 2025 by rpki-client