Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/1/326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa
File:                     326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa (raw, json)
Hash identifier:          EMw8ZcaM6tM0eP1d/WW5cxqnwnwKTMVXgHFj5z3y3ic=
Subject key identifier:   67:76:42:5C:78:E0:8D:F8:58:D2:5F:E7:9C:46:4A:CA:9C:CF:7B:86
Certificate issuer:       /CN=FC794E6B8454C609FB3CCEF0A2682930A71D28F2
Certificate serial:       692ED4CA56027CBA84DF4F705EDD168867B7C9E2
Authority key identifier: FC:79:4E:6B:84:54:C6:09:FB:3C:CE:F0:A2:68:29:30:A7:1D:28:F2
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa
Signing time:             Tue 25 Aug 2026 14:18:03 +0000
ROA not before:           Tue 25 Aug 2026 14:13:03 +0000
ROA not after:            Tue 24 Aug 2027 14:18:03 +0000
asID:                     396982
IP address blocks:        2a0b:4e07:cb9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2e:d4:ca:56:02:7c:ba:84:df:4f:70:5e:dd:16:88:67:b7:c9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC794E6B8454C609FB3CCEF0A2682930A71D28F2
        Validity
            Not Before: Aug 25 14:13:03 2026 GMT
            Not After : Aug 24 14:18:03 2027 GMT
        Subject: CN=6776425C78E08DF858D25FE79C464ACA9CCF7B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:89:cd:a5:b5:38:b1:3d:3e:81:9f:a1:a2:6b:
                    83:53:75:11:59:e2:a3:b2:ce:bc:a9:6f:97:b9:81:
                    37:39:81:9a:cd:fa:06:24:dd:db:6c:f5:87:24:9f:
                    a5:46:cd:c0:e2:5c:95:81:a1:bf:4d:0e:1c:b8:17:
                    14:3a:dc:e0:79:42:1a:10:3c:d2:ed:32:09:8c:bd:
                    0d:1e:dd:eb:b8:46:fb:22:65:e5:68:7a:23:eb:8b:
                    33:dd:03:28:3d:d6:8d:e4:99:53:61:ca:04:0b:eb:
                    0e:a8:85:4d:c1:5f:fb:18:64:69:73:33:ac:a3:6e:
                    50:c9:6c:84:a3:0a:7b:63:95:2d:08:98:0c:45:53:
                    62:29:1c:1d:32:d9:87:fb:ec:95:c0:37:5c:21:7a:
                    7d:d0:4c:58:02:7a:c8:ee:32:e2:f4:82:9c:5b:62:
                    f5:87:73:aa:63:71:ba:b1:f5:88:96:be:58:51:9e:
                    9b:31:b1:0a:cb:c4:63:6f:d7:2a:b4:76:92:6e:b0:
                    5b:7c:19:91:1b:5b:8e:f5:f3:74:e3:55:09:34:8a:
                    06:5c:b5:66:f1:ab:c5:93:e8:c7:78:c5:d9:03:67:
                    90:82:44:f6:48:34:ad:54:2f:80:5a:36:9d:3e:5e:
                    60:7e:aa:d7:86:98:72:52:41:f5:c6:ea:8f:a3:6f:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:76:42:5C:78:E0:8D:F8:58:D2:5F:E7:9C:46:4A:CA:9C:CF:7B:86
            X509v3 Authority Key Identifier:
                keyid:FC:79:4E:6B:84:54:C6:09:FB:3C:CE:F0:A2:68:29:30:A7:1D:28:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/FC794E6B8454C609FB3CCEF0A2682930A71D28F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/1/326130623a346530373a6362393a3a2f34382d3438203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:cb9::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:e5:3b:a9:36:2d:f1:2c:0d:97:c4:a9:94:b1:5c:33:e2:56:
         07:c3:58:06:e9:2e:25:29:ba:f4:c9:fc:9e:72:0e:34:48:93:
         82:0d:1e:fa:1e:9c:ad:57:a0:81:8c:43:7f:75:fb:15:4d:97:
         e9:e0:eb:6c:a0:af:14:ee:7d:b7:d3:09:58:7d:01:90:04:7e:
         1b:63:8d:d7:c0:b1:ff:37:26:c8:dc:e8:27:63:98:fa:f5:70:
         4c:4d:1f:d1:e2:4a:20:10:ff:5c:4a:b7:c1:9d:31:4c:79:fd:
         8a:4c:28:49:7d:44:e0:fc:b5:08:1d:a5:ec:40:16:bf:68:49:
         66:20:4f:f7:91:85:e8:c1:ea:f2:87:01:a8:2d:72:8d:7e:f9:
         d3:03:f5:1a:02:cc:e3:e2:3a:fd:78:40:ef:08:99:6e:9e:94:
         35:16:b6:f2:0c:c2:da:8e:47:9d:08:76:c7:d4:92:07:2f:21:
         e5:9a:2c:b3:84:17:27:ed:56:45:0c:1d:01:e6:01:61:fc:bd:
         06:c7:07:8d:5c:d5:ce:a9:a3:0b:0e:5c:df:32:c3:76:f8:ba:
         0b:92:1b:2d:e7:23:38:a1:67:5c:ef:b3:ed:32:27:63:2e:d7:
         0f:7d:6e:ca:8b:b5:45:42:24:59:c8:66:2d:12:25:ad:c1:1d:
         10:d0:da:2b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUaS7UylYCfLqE309wXt0WiGe3yeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM3OTRFNkI4NDU0QzYwOUZCM0NDRUYwQTI2ODI5MzBB
NzFEMjhGMjAeFw0yNjA4MjUxNDEzMDNaFw0yNzA4MjQxNDE4MDNaMDMxMTAvBgNV
BAMTKDY3NzY0MjVDNzhFMDhERjg1OEQyNUZFNzlDNDY0QUNBOUNDRjdCODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtic2ltTixPT6Bn6Gia4NTdRFZ
4qOyzrypb5e5gTc5gZrN+gYk3dts9Yckn6VGzcDiXJWBob9NDhy4FxQ63OB5QhoQ
PNLtMgmMvQ0e3eu4RvsiZeVoeiPrizPdAyg91o3kmVNhygQL6w6ohU3BX/sYZGlz
M6yjblDJbISjCntjlS0ImAxFU2IpHB0y2Yf77JXAN1when3QTFgCesjuMuL0gpxb
YvWHc6pjcbqx9YiWvlhRnpsxsQrLxGNv1yq0dpJusFt8GZEbW47183TjVQk0igZc
tWbxq8WT6Md4xdkDZ5CCRPZINK1UL4BaNp0+XmB+qteGmHJSQfXG6o+jb1GJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUZ3ZCXHjgjfhY0l/nnEZKypzPe4YwHwYDVR0j
BBgwFoAU/HlOa4RUxgn7PM7womgpMKcdKPIwDgYDVR0PAQH/BAQDAgeAMHcGA1Ud
HwRwMG4wbKBqoGiGZnJzeW5jOi8va3JpbGwuZGlzcGFpc3kuc3lzdGVtcy9yZXBv
L2Rpc3BhaXN5ZW50ZXJwcmlzZXMvMS9GQzc5NEU2Qjg0NTRDNjA5RkIzQ0NFRjBB
MjY4MjkzMEE3MUQyOEYyLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvODFhNDQ1
NjY0NThlNDU3OGI2N2VlZDMwNTNmODIwZjUvMS9GQzc5NEU2Qjg0NTRDNjA5RkIz
Q0NFRjBBMjY4MjkzMEE3MUQyOEYyLmNlcjCBmwYIKwYBBQUHAQsEgY4wgYswgYgG
CCsGAQUFBzALhnxyc3luYzovL2tyaWxsLmRpc3BhaXN5LnN5c3RlbXMvcmVwby9k
aXNwYWlzeWVudGVycHJpc2VzLzEvMzI2MTMwNjIzYTM0NjUzMDM3M2E2MzYyMzkz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM5MzYzOTM4MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAq
C04HDLkwDQYJKoZIhvcNAQELBQADggEBAJblO6k2LfEsDZfEqZSxXDPiVgfDWAbp
LiUpuvTJ/J5yDjRIk4INHvoenK1XoIGMQ391+xVNl+ng62ygrxTufbfTCVh9AZAE
fhtjjdfAsf83Jsjc6CdjmPr1cExNH9HiSiAQ/1xKt8GdMUx5/YpMKEl9ROD8tQgd
pexAFr9oSWYgT/eRhejB6vKHAagtco1++dMD9RoCzOPiOv14QO8ImW6elDUWtvIM
wtqOR50IdsfUkgcvIeWaLLOEFyftVkUMHQHmAWH8vQbHB41c1c6powsOXN8yw3b4
uguSGy3nIzihZ1zvs+0yJ2Mu1w99bsqLtUVCJFnIZi0SJa3BHRDQ2is=
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:53:16 2026 by rpki-client