Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS57110.roa
File:                     AS57110.roa (raw, json)
Hash identifier:          92pWlrTOnE+U+DL5/2bTTM/Ss7K10XEeYylbWzybKAc=
Subject key identifier:   60:3B:7D:B7:31:14:DA:32:B4:51:A9:62:F9:F1:0F:2F:98:14:F0:B5
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       4EDB9BE2BDDCA8CA49E6F77A7AE201AE8DEB902E
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS57110.roa
Signing time:             Sun 17 May 2026 15:26:09 +0000
ROA not before:           Sun 17 May 2026 15:21:09 +0000
ROA not after:            Sun 16 May 2027 15:26:09 +0000
asID:                     57110
IP address blocks:        2a0a:6044:3000::/40 maxlen: 40
                          2a0a:6044:3001::/48 maxlen: 48
                          2a0f:6283:1101::/48 maxlen: 48
                          2a0f:6283:1120::/44 maxlen: 48
                          2a0f:6284:4001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 01:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:db:9b:e2:bd:dc:a8:ca:49:e6:f7:7a:7a:e2:01:ae:8d:eb:90:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: May 17 15:21:09 2026 GMT
            Not After : May 16 15:26:09 2027 GMT
        Subject: CN=603B7DB73114DA32B451A962F9F10F2F9814F0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:00:1d:f4:ab:c3:14:1e:94:3f:78:16:e4:8e:
                    9e:15:e3:a6:19:0e:e6:95:32:6f:2a:b4:d1:05:d5:
                    e2:8a:9e:f2:32:ab:85:23:3c:86:8c:42:76:14:5e:
                    75:00:7c:4c:cc:08:f4:59:4a:82:f1:de:62:6a:a5:
                    ad:63:4d:55:80:08:4a:e0:70:20:b7:ca:1b:a5:b0:
                    78:e3:e2:0e:b9:e4:d2:9c:6e:df:9b:e3:e0:1a:17:
                    bf:b5:45:b9:21:ef:7e:44:13:38:29:f3:95:6c:68:
                    35:69:21:e0:a2:00:58:ba:9f:0b:6d:eb:9e:c4:43:
                    82:20:ef:19:76:d9:12:54:15:1e:41:f4:54:8b:5d:
                    b2:38:40:1b:12:a9:16:d6:f1:a9:72:10:0b:aa:83:
                    8d:8e:54:af:27:89:a1:04:79:ce:53:c8:78:a2:bb:
                    89:8a:53:4d:0b:de:b1:08:2c:c7:5b:aa:1b:e1:30:
                    17:1d:29:f0:ef:a4:8f:72:02:47:eb:d8:a3:83:c4:
                    b5:70:d0:d3:94:38:c0:f6:f0:56:3c:d3:86:ff:71:
                    5b:56:65:1c:21:2d:77:85:38:a7:81:e5:14:2b:0e:
                    e6:ac:60:bd:f8:1f:7e:23:0d:dc:52:3f:cc:8f:52:
                    45:fe:84:77:93:03:5f:3d:7e:f4:6d:bc:d0:f1:68:
                    23:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3B:7D:B7:31:14:DA:32:B4:51:A9:62:F9:F1:0F:2F:98:14:F0:B5
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS57110.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:3000::/40
                  2a0f:6283:1101::/48
                  2a0f:6283:1120::/44
                  2a0f:6284:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:1d:6e:c6:27:96:cf:e5:95:23:ec:00:88:f4:d5:62:3f:0f:
         cb:65:9f:b6:2c:17:07:d8:81:8f:a3:3a:8f:60:51:fb:32:77:
         12:63:9f:99:58:25:f5:d1:ec:1d:d2:6f:2a:a4:5e:60:3f:53:
         2f:ed:d5:69:8b:02:6d:12:59:70:9e:ca:f6:3e:0e:1c:72:ba:
         3e:5a:b6:b1:e4:a0:6f:26:1a:40:4c:34:85:0c:3a:56:f4:f0:
         cf:a7:01:a8:cc:d4:12:cf:2e:e9:4e:e2:94:52:67:ce:4b:39:
         da:4e:ed:73:f3:27:84:0c:e7:65:c7:2b:5c:d2:3d:00:9e:55:
         3c:c7:b5:f8:80:bd:3a:cf:01:b4:59:5b:97:3f:fb:2a:72:e0:
         3b:d2:4d:06:0d:96:2e:da:c0:a7:1b:77:e1:82:47:80:2e:f1:
         84:40:03:a8:5b:75:b4:32:08:ca:21:31:c2:21:e7:f2:cc:a8:
         89:e2:8e:e9:54:b1:0e:3b:1e:18:4e:c0:f2:07:0a:9b:c3:0c:
         03:f4:29:7d:5c:31:fa:1a:16:c1:60:32:20:81:70:ab:06:ff:
         be:79:c3:ba:21:1f:42:a6:6c:39:03:0f:7d:13:29:f4:ee:e3:
         4b:43:39:2e:72:b8:dc:a4:c2:5a:34:11:f2:44:f3:1d:d0:3a:
         cd:5d:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 14:59:54 2026 by rpki-client