Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a3a2f33322d3332203d3e20323135373630.roa
File:                     326130363a613030323a3a2f33322d3332203d3e20323135373630.roa (raw, json)
Hash identifier:          3q2Vv2ynU6R7YC9XPCw8C3t9eNCX7UwawLrlitnJYt8=
Subject key identifier:   F6:79:67:0D:58:BD:86:A0:94:6F:1A:79:E9:72:75:0C:A3:F0:08:C5
Certificate issuer:       /CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
Certificate serial:       74A73B01CD94238DAC0D7653BC8CB74587444033
Authority key identifier: 82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a3a2f33322d3332203d3e20323135373630.roa
Signing time:             Wed 26 Aug 2026 02:45:03 +0000
ROA not before:           Wed 26 Aug 2026 02:40:03 +0000
ROA not after:            Wed 25 Aug 2027 02:45:03 +0000
asID:                     215760
IP address blocks:        2a06:a002::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a7:3b:01:cd:94:23:8d:ac:0d:76:53:bc:8c:b7:45:87:44:40:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
        Validity
            Not Before: Aug 26 02:40:03 2026 GMT
            Not After : Aug 25 02:45:03 2027 GMT
        Subject: CN=F679670D58BD86A0946F1A79E972750CA3F008C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:6d:87:ba:f6:ae:79:6a:f0:bc:8c:6b:0f:
                    2a:f2:80:06:4e:19:19:37:40:13:05:61:81:64:1e:
                    04:d5:df:f8:aa:f0:47:31:3d:3c:0d:0f:5c:33:c6:
                    c9:a9:cb:fb:27:29:04:e0:4a:28:f9:05:b4:e1:7e:
                    fb:17:2b:03:23:74:99:9e:f9:42:60:00:0e:af:11:
                    29:2f:de:b6:51:6b:25:d1:b5:78:02:2b:ef:cb:a8:
                    8a:2e:a4:48:66:d8:72:f6:de:5e:31:3f:a5:dd:4a:
                    46:7d:84:f6:d5:41:e3:97:24:fc:e6:20:3f:2d:f4:
                    59:b6:ce:68:38:c7:32:0a:54:15:41:99:4c:25:8b:
                    ab:1c:38:e9:8d:8f:57:b9:09:30:5b:0d:d6:08:4b:
                    55:3d:f3:ba:33:03:99:c7:8f:28:49:dd:12:8b:08:
                    35:1e:b9:17:fa:8a:1e:c7:11:5c:fb:be:8e:3f:95:
                    ff:6d:86:b3:4b:5f:0e:32:10:26:97:88:8a:12:28:
                    96:f9:fb:9c:5b:32:98:df:e6:b1:14:8e:10:76:3a:
                    06:57:7a:13:2c:87:79:c5:36:03:3c:74:76:82:c9:
                    6a:14:54:ae:07:34:59:3d:1d:03:c4:1b:46:e9:68:
                    87:0a:5c:05:39:5e:65:65:82:ab:a0:3a:77:af:cc:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:79:67:0D:58:BD:86:A0:94:6F:1A:79:E9:72:75:0C:A3:F0:08:C5
            X509v3 Authority Key Identifier:
                keyid:82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a3a2f33322d3332203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:cc:65:87:16:33:be:c1:3f:b2:ae:c0:7b:5c:2d:7a:25:
         2f:90:cc:99:75:16:68:86:39:13:06:6e:9b:a2:23:32:fc:27:
         c7:0c:73:79:b7:60:89:3c:18:45:fe:37:6c:12:63:7f:e3:86:
         33:54:fd:7e:24:2d:28:99:c2:e5:0f:54:c6:b9:7b:e0:70:fd:
         ef:c2:fa:8d:aa:90:e7:ee:14:44:ab:e4:65:e7:2e:03:4c:56:
         82:68:d2:82:23:60:63:b2:09:23:51:1b:d3:59:fe:3d:84:40:
         74:72:96:6c:9f:e0:5d:43:79:00:84:6e:97:73:24:74:db:bd:
         6b:0d:ef:71:b9:cb:bd:1b:a1:a5:a2:f4:c1:12:ec:04:0c:f1:
         e2:39:23:d4:4d:f5:40:fd:70:25:a5:ea:b4:f1:de:b7:df:6e:
         33:ae:a5:c0:35:c9:7d:f8:d8:9a:d3:a8:24:9c:92:8f:ec:6c:
         85:b1:4d:b5:22:ac:40:3f:04:7a:b8:d1:bb:32:b0:f0:3d:49:
         f8:4e:90:15:df:78:5c:4b:8a:73:75:9c:31:da:b8:42:4f:f7:
         fa:b9:35:66:c2:ba:a6:3a:ac:a0:d7:e9:0b:0d:83:eb:2e:2b:
         fd:1e:8d:7e:85:7e:4a:c8:b2:3e:7d:0d:b2:21:80:ee:4c:a3:
         12:67:fe:32
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUdKc7Ac2UI42sDXZTvIy3RYdEQDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJFNjU1Q0FBMjVCOERERTc5QjQwQjMyM0EyMzRCMjZB
NDFENEUzMzAeFw0yNjA4MjYwMjQwMDNaFw0yNzA4MjUwMjQ1MDNaMDMxMTAvBgNV
BAMTKEY2Nzk2NzBENThCRDg2QTA5NDZGMUE3OUU5NzI3NTBDQTNGMDA4QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DW2HuvaueWrwvIxrDyrygAZO
GRk3QBMFYYFkHgTV3/iq8EcxPTwND1wzxsmpy/snKQTgSij5BbThfvsXKwMjdJme
+UJgAA6vESkv3rZRayXRtXgCK+/LqIoupEhm2HL23l4xP6XdSkZ9hPbVQeOXJPzm
ID8t9Fm2zmg4xzIKVBVBmUwli6scOOmNj1e5CTBbDdYIS1U987ozA5nHjyhJ3RKL
CDUeuRf6ih7HEVz7vo4/lf9thrNLXw4yECaXiIoSKJb5+5xbMpjf5rEUjhB2OgZX
ehMsh3nFNgM8dHaCyWoUVK4HNFk9HQPEG0bpaIcKXAU5XmVlgqugOnevzNv7AgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQU9nlnDVi9hqCUbxp56XJ1DKPwCMUwHwYDVR0j
BBgwFoAUguZVyqJbjd55tAsyOiNLJqQdTjMwDgYDVR0PAQH/BAQDAgeAMHcGA1Ud
HwRwMG4wbKBqoGiGZnJzeW5jOi8va3JpbGwuZGlzcGFpc3kuc3lzdGVtcy9yZXBv
L2Rpc3BhaXN5ZW50ZXJwcmlzZXMvMy84MkU2NTVDQUEyNUI4RERFNzlCNDBCMzIz
QTIzNEIyNkE0MUQ0RTMzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUF
BzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhh
ZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84MkU2NTVDQUEyNUI4RERFNzlC
NDBCMzIzQTIzNEIyNkE0MUQ0RTMzLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAG
CCsGAQUFBzALhnRyc3luYzovL2tyaWxsLmRpc3BhaXN5LnN5c3RlbXMvcmVwby9k
aXNwYWlzeWVudGVycHJpc2VzLzMvMzI2MTMwMzYzYTYxMzAzMDMyM2EzYTJmMzMz
MjJkMzMzMjIwM2QzZTIwMzIzMTM1MzczNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgagAjANBgkq
hkiG9w0BAQsFAAOCAQEAQ+LMZYcWM77BP7KuwHtcLXolL5DMmXUWaIY5EwZum6Ij
MvwnxwxzebdgiTwYRf43bBJjf+OGM1T9fiQtKJnC5Q9Uxrl74HD978L6jaqQ5+4U
RKvkZecuA0xWgmjSgiNgY7IJI1Eb01n+PYRAdHKWbJ/gXUN5AIRul3MkdNu9aw3v
cbnLvRuhpaL0wRLsBAzx4jkj1E31QP1wJaXqtPHet99uM66lwDXJffjYmtOoJJyS
j+xshbFNtSKsQD8EerjRuzKw8D1J+E6QFd94XEuKc3WcMdq4Qk/3+rk1ZsK6pjqs
oNfpCw2D6y4r/R6NfoV+SsiyPn0NsiGA7kyjEmf+Mg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:54:26 2026 by rpki-client