Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS57483.roa
File:                     AS57483.roa (raw, json)
Hash identifier:          yYy3QVNhZ4IXrNwJX2fFYCNG4FtAqCwmgC6K/t9WWWQ=
Subject key identifier:   34:59:8D:46:24:0D:92:00:AC:D4:55:F2:94:10:EB:7D:99:77:CA:0C
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       054C4B5E623CBD0E05B2488242CD9260BA601324
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS57483.roa
Signing time:             Thu 04 Jun 2026 16:51:47 +0000
ROA not before:           Thu 04 Jun 2026 16:46:47 +0000
ROA not after:            Thu 03 Jun 2027 16:51:47 +0000
asID:                     57483
IP address blocks:        2a0a:6044:7100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4c:4b:5e:62:3c:bd:0e:05:b2:48:82:42:cd:92:60:ba:60:13:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jun  4 16:46:47 2026 GMT
            Not After : Jun  3 16:51:47 2027 GMT
        Subject: CN=34598D46240D9200ACD455F29410EB7D9977CA0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:d6:d5:ea:90:cd:c9:b6:e5:29:04:26:c4:
                    29:b2:75:d4:fa:4a:5e:e8:db:4f:70:d1:07:81:97:
                    17:fd:b3:17:9a:18:99:eb:77:01:e3:ba:b1:aa:c1:
                    e4:f2:7b:87:60:00:40:0a:23:5a:78:84:bb:1e:e2:
                    7f:d1:8a:3b:f9:10:d2:a3:2c:0b:4c:8e:5a:07:4a:
                    08:2d:57:77:c9:19:52:f1:ca:9b:7d:42:63:35:6c:
                    7f:ea:81:f9:c0:e2:3e:9e:37:24:5c:da:8e:cf:3b:
                    7f:3c:2f:f6:d3:ec:75:62:27:03:04:1c:4b:0e:ca:
                    45:62:1b:19:e1:5d:0e:1b:df:90:2a:25:54:bd:81:
                    22:00:76:3b:59:54:5a:94:64:1b:0f:af:41:d7:ac:
                    d7:5d:44:41:06:84:62:30:bf:90:c1:72:41:8c:6c:
                    ad:73:09:bf:f5:64:f3:73:6e:08:60:74:11:47:a1:
                    e4:74:f6:5f:31:2d:67:74:e6:ad:60:d4:6b:45:cc:
                    64:24:4d:0c:88:e7:f4:56:38:9b:11:02:2e:1b:1b:
                    7c:94:08:a6:a3:73:9c:aa:f4:00:4d:2b:c7:36:2e:
                    b4:d0:81:23:0a:84:cc:10:83:66:74:36:3a:68:12:
                    52:15:12:45:03:ae:b9:19:08:81:69:8f:b7:6d:0c:
                    c5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:59:8D:46:24:0D:92:00:AC:D4:55:F2:94:10:EB:7D:99:77:CA:0C
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS57483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:45:f7:98:d4:ab:c8:00:c8:24:9e:04:29:ab:53:7f:6e:ed:
         1e:81:27:27:8d:04:a8:af:d5:31:74:29:fd:10:a8:59:57:ba:
         ad:89:80:60:5e:ef:fb:05:51:c5:a2:5a:cf:95:4b:ba:87:cd:
         ad:24:c2:b7:fb:25:5b:95:ff:6e:f9:ff:1f:ad:bc:1d:8c:8c:
         c5:a2:82:cf:c6:d8:71:41:b2:88:40:66:c4:f3:1c:f9:b0:7b:
         50:aa:f0:e7:1f:54:06:23:6a:9f:1b:97:8a:47:58:a4:21:89:
         42:e3:d4:23:dc:a1:00:59:09:87:bf:5a:6a:0c:0d:36:b4:0c:
         61:72:27:be:1c:12:42:30:90:46:2e:42:11:5d:d5:0a:08:9a:
         9b:75:9d:ce:85:d1:77:06:6b:8a:82:7b:5a:fb:f8:74:a5:d2:
         cb:d3:33:35:8a:53:63:22:bc:58:be:e8:96:e0:45:f0:e1:d2:
         eb:5b:6e:eb:05:4b:aa:fe:72:5d:45:54:87:fa:2e:0b:27:91:
         bb:e4:92:90:fe:e7:80:7e:e7:ea:99:bf:20:aa:f3:c5:63:2e:
         d7:35:da:05:fb:af:2b:c8:9a:c3:b7:d2:a9:19:17:63:82:0c:
         53:8f:5c:ce:6a:2a:3f:52:84:35:63:69:4f:e5:c8:01:ad:df:
         62:ca:be:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:32:00 2026 by rpki-client