Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/5/AS219283.roa
File:                     AS219283.roa (raw, json)
Hash identifier:          qQLJ6YevDnFw7df4nyIXVZV//hp0F4Zvap5T5BRpdmc=
Subject key identifier:   F4:F7:D8:02:92:B1:AF:07:16:D1:71:AF:22:A4:D9:D3:31:4A:06:90
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       6214B5998A9A404DB9127AAFA26818B81C39C374
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS219283.roa
Signing time:             Sun 30 Aug 2026 14:00:45 +0000
ROA not before:           Sun 30 Aug 2026 13:55:45 +0000
ROA not after:            Sun 29 Aug 2027 14:00:45 +0000
asID:                     219283
IP address blocks:        2a0f:6281::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:14:b5:99:8a:9a:40:4d:b9:12:7a:af:a2:68:18:b8:1c:39:c3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Aug 30 13:55:45 2026 GMT
            Not After : Aug 29 14:00:45 2027 GMT
        Subject: CN=F4F7D80292B1AF0716D171AF22A4D9D3314A0690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:02:a5:fc:51:d5:40:6b:18:b2:eb:42:a5:78:
                    f4:f1:44:6b:c8:2a:6b:7c:16:77:af:b9:06:f1:3d:
                    c0:82:7c:c1:af:68:3d:0b:fc:14:8e:e8:49:8f:ab:
                    2b:fa:66:88:76:9d:89:21:aa:c6:10:b8:6a:86:ca:
                    b6:4d:ee:05:47:25:63:54:a7:65:3b:95:72:dc:bf:
                    65:b1:61:53:87:4b:5e:a5:47:a4:5d:f4:60:f3:7d:
                    ca:06:7f:e1:59:c9:f6:9f:0a:23:bb:16:8f:a8:62:
                    78:59:dd:c8:27:06:21:19:64:c0:b0:2a:95:3b:c9:
                    65:5a:b6:b3:30:52:6e:3a:cb:c2:ae:d2:07:82:27:
                    2f:bb:bd:c7:f6:98:a7:e2:1a:fb:0a:74:61:f6:09:
                    09:a1:47:93:cb:51:a2:5b:13:5d:ce:d0:f0:cd:e8:
                    dd:15:c8:81:74:6d:d9:eb:fb:3f:a9:68:0f:d8:82:
                    1c:a7:81:7e:be:84:ad:c9:04:b4:5d:76:1e:c3:01:
                    ac:95:eb:32:a8:6e:17:3f:ee:bd:cc:8e:84:0c:68:
                    2b:50:11:ce:0c:02:eb:9f:b6:af:7f:e1:5a:e4:da:
                    19:23:d9:65:53:cb:8b:c8:c4:1a:1d:a8:fa:18:a6:
                    dd:4b:f3:c3:d0:26:d3:cf:3d:75:9f:d6:49:d6:57:
                    ed:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F7:D8:02:92:B1:AF:07:16:D1:71:AF:22:A4:D9:D3:31:4A:06:90
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS219283.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6281::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:8a:98:5a:77:0d:a4:8f:56:17:16:8e:60:4d:61:cc:5d:e7:
         91:ca:85:03:4d:0e:10:49:e7:a6:1c:0e:6a:7f:45:76:ef:d2:
         63:21:30:61:da:83:7f:d0:f4:6a:38:24:53:ca:f4:85:94:1d:
         54:d9:fa:e6:10:4f:86:69:93:c3:f5:90:eb:16:b1:48:04:4d:
         b0:58:a5:ef:6f:0c:01:df:fd:3f:cf:c2:84:f7:0d:c5:44:64:
         75:ef:cf:ae:a7:02:1e:4f:b0:3c:ef:17:aa:8b:1f:0d:81:39:
         35:68:ff:2d:e2:67:ce:9e:c9:ed:a6:22:23:7b:32:8f:32:7f:
         c6:32:f8:8b:2a:b7:43:9b:3d:2f:ca:89:a4:00:0a:36:f5:a1:
         b5:60:4f:33:3b:c6:08:04:cb:41:0c:b6:5b:ad:b4:ad:30:f6:
         68:b2:44:07:14:18:53:d6:4a:40:83:2f:3b:6d:67:01:bb:68:
         20:d5:cb:a6:b3:78:f7:69:a8:58:5a:13:59:9d:ef:2d:9d:fb:
         a6:fa:c9:52:ce:cc:e1:fc:4b:89:7b:4e:8b:6d:1e:c7:14:54:
         16:87:12:0c:9e:ae:8a:10:0d:b0:35:a9:ce:08:a5:03:3f:0c:
         ec:36:4d:96:67:03:74:3e:0f:93:e0:c7:3d:7f:87:8f:2e:4f:
         6b:a3:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:04 2026 by rpki-client