Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a363030303a3a2f33362d3336203d3e20323139323438.roa
File:                     326130363a613030323a363030303a3a2f33362d3336203d3e20323139323438.roa (raw, json)
Hash identifier:          Gntk2ZURzQUoT1ZvCJnM6dYFSBOof07YM8ExZ956ZAE=
Subject key identifier:   38:93:17:35:D6:6E:D0:D5:2A:04:AA:75:95:22:FC:80:FA:F3:C7:C5
Certificate issuer:       /CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
Certificate serial:       214A46561A0333C627F752F77EA93C51B0A8C12C
Authority key identifier: 82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a363030303a3a2f33362d3336203d3e20323139323438.roa
Signing time:             Tue 25 Aug 2026 14:18:04 +0000
ROA not before:           Tue 25 Aug 2026 14:13:04 +0000
ROA not after:            Tue 24 Aug 2027 14:18:04 +0000
asID:                     219248
IP address blocks:        2a06:a002:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4a:46:56:1a:03:33:c6:27:f7:52:f7:7e:a9:3c:51:b0:a8:c1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
        Validity
            Not Before: Aug 25 14:13:04 2026 GMT
            Not After : Aug 24 14:18:04 2027 GMT
        Subject: CN=38931735D66ED0D52A04AA759522FC80FAF3C7C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:fa:b8:e6:43:55:7c:e4:c5:10:ae:db:43:
                    ea:83:8d:a0:bc:dd:24:b4:e2:da:8a:27:bd:8a:27:
                    2d:25:13:a4:b8:58:3f:67:c0:5b:13:ff:d7:de:7d:
                    b0:e8:bc:fe:12:0b:06:ed:24:59:cb:c3:84:7b:b7:
                    8b:6a:19:27:4c:e0:89:21:df:39:2f:68:5e:32:69:
                    03:45:da:5a:61:2d:07:01:99:e2:f9:4f:32:cd:40:
                    2d:20:89:b7:4c:cb:7b:9e:6b:2b:0a:53:e3:30:9a:
                    07:10:6d:14:82:bf:54:5a:56:e9:30:7e:76:bb:02:
                    16:09:2b:36:15:51:fb:de:4e:2b:55:14:65:04:f2:
                    f2:5b:a4:84:36:a0:72:37:30:f8:5e:c7:30:19:93:
                    8b:84:5b:14:b1:7e:a6:12:fb:d2:f2:7e:e1:37:41:
                    a5:8b:09:e9:de:84:a3:bc:d6:2e:76:13:f3:fc:31:
                    f0:d3:01:63:b4:74:28:96:90:eb:c0:a1:97:f2:20:
                    64:6f:d9:91:fd:16:ef:fa:fe:9e:85:53:a4:76:87:
                    3d:6b:b1:dc:8b:ce:31:b8:78:36:09:8b:59:d6:a5:
                    f3:66:b2:6c:0d:3e:87:ef:9a:db:16:63:4d:cb:4a:
                    ff:99:68:cc:95:bb:42:e2:19:e3:bd:38:96:9d:10:
                    16:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:93:17:35:D6:6E:D0:D5:2A:04:AA:75:95:22:FC:80:FA:F3:C7:C5
            X509v3 Authority Key Identifier:
                keyid:82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a363030303a3a2f33362d3336203d3e20323139323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:b4:7c:1d:3a:ba:e4:31:12:0e:6f:46:42:6d:16:9f:90:91:
         cf:78:eb:5a:05:cd:23:ae:42:90:5b:d1:b1:30:67:36:39:35:
         fa:dd:1d:48:11:84:d6:2a:39:4c:8a:7a:1c:fd:7e:b8:ea:f1:
         78:14:7c:bc:5e:02:5f:b5:61:2f:5c:42:c8:2d:b0:d5:65:82:
         bf:ad:3c:f3:7f:e3:88:0c:1b:49:22:62:64:5b:8d:01:85:ae:
         14:61:4b:c1:f1:a6:27:4b:d7:c7:88:87:31:f7:f0:c0:70:52:
         45:9d:52:b7:a6:93:08:43:bd:2d:96:66:11:07:61:cc:56:b4:
         0a:ff:f3:e2:cd:75:ca:2f:0f:00:3a:44:fe:e0:eb:08:78:6c:
         5f:34:ad:a2:13:45:df:a9:96:b1:aa:c6:53:5d:89:6a:b7:b7:
         bc:63:59:ca:8b:b9:11:1b:fe:cf:fd:bd:19:66:72:b6:05:e8:
         b8:fa:8d:f4:1e:c3:51:c9:d6:da:24:7d:81:71:e5:e7:b6:fb:
         70:16:2e:bd:62:e8:0e:27:8c:cb:1d:58:5c:03:19:fa:28:8c:
         f8:3e:fe:69:1e:11:99:f1:02:98:5e:e7:ad:8a:d0:d2:34:77:
         19:47:42:e0:f0:82:5e:6e:c6:61:bb:59:aa:b8:7c:5f:16:aa:
         aa:c5:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:25:30 2026 by rpki-client