Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/1/326130623a346530373a6330303a3a2f33382d3338203d3e20323135373630.roa
File:                     326130623a346530373a6330303a3a2f33382d3338203d3e20323135373630.roa (raw, json)
Hash identifier:          UMmG+NOMjo5bwSzsJN5Azk+445fi59psrSxvVA1rd/g=
Subject key identifier:   75:4C:0D:08:27:5F:0B:B9:E5:D1:B7:07:6F:90:47:50:AC:52:9E:AB
Certificate issuer:       /CN=FC794E6B8454C609FB3CCEF0A2682930A71D28F2
Certificate serial:       72F524A4E77B4A6E5A07F29A058F0BCC689853AF
Authority key identifier: FC:79:4E:6B:84:54:C6:09:FB:3C:CE:F0:A2:68:29:30:A7:1D:28:F2
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/326130623a346530373a6330303a3a2f33382d3338203d3e20323135373630.roa
Signing time:             Wed 26 Aug 2026 02:46:58 +0000
ROA not before:           Wed 26 Aug 2026 02:41:58 +0000
ROA not after:            Wed 25 Aug 2027 02:46:58 +0000
asID:                     215760
IP address blocks:        2a0b:4e07:c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f5:24:a4:e7:7b:4a:6e:5a:07:f2:9a:05:8f:0b:cc:68:98:53:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC794E6B8454C609FB3CCEF0A2682930A71D28F2
        Validity
            Not Before: Aug 26 02:41:58 2026 GMT
            Not After : Aug 25 02:46:58 2027 GMT
        Subject: CN=754C0D08275F0BB9E5D1B7076F904750AC529EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:21:df:ff:4f:f7:71:2d:1f:9a:49:0a:23:
                    f5:ef:94:10:65:1b:4a:7d:7c:0b:20:b1:37:77:5f:
                    4f:48:3b:b7:0d:86:92:92:31:1e:a3:f6:5f:bb:d4:
                    1b:3d:fd:51:e0:78:f9:7b:3c:9b:0c:69:69:33:be:
                    0c:e3:7b:84:b8:b7:6e:31:e7:ed:31:f2:d6:f0:20:
                    aa:62:16:3b:0e:31:3a:85:c9:6d:06:ce:35:9a:62:
                    9d:1f:b8:50:de:23:36:5c:58:5d:25:cf:f7:93:a0:
                    f1:c7:af:9f:e5:9b:e2:6b:51:e0:ae:74:f0:a6:2d:
                    bd:a2:8b:8e:85:44:d5:a1:e9:f8:48:ae:2c:0d:ee:
                    65:ab:ae:f3:da:8d:f7:97:5e:4b:4d:f9:35:8b:59:
                    49:7c:6d:05:4e:9f:d0:e2:fe:aa:20:c6:43:38:5a:
                    01:51:85:fb:dc:c3:d2:df:f7:a9:76:84:d1:4c:97:
                    2b:70:47:2d:5a:58:13:80:94:a8:84:fe:a8:07:88:
                    a1:42:f3:96:8f:d8:ed:1d:f0:72:51:0b:fb:f2:c8:
                    37:43:0b:75:e6:bb:c0:4f:1c:f9:2c:88:bd:d8:1f:
                    89:6e:1d:ab:ff:08:16:8b:83:3f:69:3d:63:48:e1:
                    56:07:44:ea:ff:66:57:33:93:c9:14:f2:35:35:5c:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4C:0D:08:27:5F:0B:B9:E5:D1:B7:07:6F:90:47:50:AC:52:9E:AB
            X509v3 Authority Key Identifier:
                keyid:FC:79:4E:6B:84:54:C6:09:FB:3C:CE:F0:A2:68:29:30:A7:1D:28:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/326130623a346530373a6330303a3a2f33382d3338203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         bd:fc:9c:b3:bb:37:6f:31:e1:b5:51:26:35:1f:e6:ab:d9:59:
         17:de:d2:99:f6:1b:53:0e:38:a4:c8:5d:60:d1:9d:5f:91:5a:
         5c:75:47:25:cd:5b:b6:72:d7:19:43:36:08:c2:24:30:d4:f3:
         bd:1e:1e:17:38:bc:f3:7b:b4:38:5d:de:63:be:49:63:81:5b:
         60:d6:37:de:7c:49:f6:f5:9f:ca:e1:4c:e8:67:ca:c7:40:20:
         53:c1:04:1c:f3:7c:23:a4:80:eb:46:d1:2a:2d:e7:63:0b:f5:
         aa:f5:85:c8:41:f9:8d:ba:45:9c:39:6d:02:8b:84:ae:7f:cd:
         74:1d:1c:f0:e5:47:0f:78:78:42:78:80:84:7c:93:a5:5b:4d:
         ca:8a:82:f5:53:18:29:8d:45:e8:4c:46:26:40:e2:50:80:84:
         54:2a:dd:91:68:70:a0:e2:32:cf:f9:09:d9:ca:5c:d0:69:a9:
         c9:1c:18:62:b2:8f:29:c1:8c:93:84:da:8a:51:e8:7c:54:60:
         bb:e7:cc:e7:e5:be:8d:ca:72:32:69:d1:01:62:3b:c1:8e:b4:
         c2:82:ab:99:1a:cd:51:c2:6b:f4:5b:f8:23:e2:9c:63:61:9c:
         f7:c9:1f:89:e8:74:f9:f2:08:99:63:3e:7f:23:c8:bf:2c:bf:
         79:57:27:54
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUcvUkpOd7Sm5aB/KaBY8LzGiYU68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM3OTRFNkI4NDU0QzYwOUZCM0NDRUYwQTI2ODI5MzBB
NzFEMjhGMjAeFw0yNjA4MjYwMjQxNThaFw0yNzA4MjUwMjQ2NThaMDMxMTAvBgNV
BAMTKDc1NEMwRDA4Mjc1RjBCQjlFNUQxQjcwNzZGOTA0NzUwQUM1MjlFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDheiHf/0/3cS0fmkkKI/XvlBBl
G0p9fAsgsTd3X09IO7cNhpKSMR6j9l+71Bs9/VHgePl7PJsMaWkzvgzje4S4t24x
5+0x8tbwIKpiFjsOMTqFyW0GzjWaYp0fuFDeIzZcWF0lz/eToPHHr5/lm+JrUeCu
dPCmLb2ii46FRNWh6fhIriwN7mWrrvPajfeXXktN+TWLWUl8bQVOn9Di/qogxkM4
WgFRhfvcw9Lf96l2hNFMlytwRy1aWBOAlKiE/qgHiKFC85aP2O0d8HJRC/vyyDdD
C3Xmu8BPHPksiL3YH4luHav/CBaLgz9pPWNI4VYHROr/Zlczk8kU8jU1XBmPAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUdUwNCCdfC7nl0bcHb5BHUKxSnqswHwYDVR0j
BBgwFoAU/HlOa4RUxgn7PM7womgpMKcdKPIwDgYDVR0PAQH/BAQDAgeAMHcGA1Ud
HwRwMG4wbKBqoGiGZnJzeW5jOi8va3JpbGwuZGlzcGFpc3kuc3lzdGVtcy9yZXBv
L2Rpc3BhaXN5ZW50ZXJwcmlzZXMvMS9GQzc5NEU2Qjg0NTRDNjA5RkIzQ0NFRjBB
MjY4MjkzMEE3MUQyOEYyLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1
NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS9GQzc5NEU2Qjg0NTRDNjA5RkIz
Q0NFRjBBMjY4MjkzMEE3MUQyOEYyLmNlcjCBmwYIKwYBBQUHAQsEgY4wgYswgYgG
CCsGAQUFBzALhnxyc3luYzovL2tyaWxsLmRpc3BhaXN5LnN5c3RlbXMvcmVwby9k
aXNwYWlzeWVudGVycHJpc2VzLzEvMzI2MTMwNjIzYTM0NjUzMDM3M2E2MzMwMzAz
YTNhMmYzMzM4MmQzMzM4MjAzZDNlMjAzMjMxMzUzNzM2MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgIq
C04HDDANBgkqhkiG9w0BAQsFAAOCAQEAvfycs7s3bzHhtVEmNR/mq9lZF97SmfYb
Uw44pMhdYNGdX5FaXHVHJc1btnLXGUM2CMIkMNTzvR4eFzi883u0OF3eY75JY4Fb
YNY33nxJ9vWfyuFM6GfKx0AgU8EEHPN8I6SA60bRKi3nYwv1qvWFyEH5jbpFnDlt
AouErn/NdB0c8OVHD3h4QniAhHyTpVtNyoqC9VMYKY1F6ExGJkDiUICEVCrdkWhw
oOIyz/kJ2cpc0GmpyRwYYrKPKcGMk4TailHofFRgu+fM5+W+jcpyMmnRAWI7wY60
woKrmRrNUcJr9Fv4I+KcY2Gc98kfieh0+fIImWM+fyPIvyy/eVcnVA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:00 2026 by rpki-client