Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa
File:                     326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa (raw, json)
Hash identifier:          6OQU7JjLms06bddF2Y3Xaq6b7uLJcfBWdYGBiBBtpjo=
Subject key identifier:   30:9D:10:D5:20:56:5C:2C:99:2D:FB:A7:3F:55:34:8C:1B:5B:23:4F
Certificate issuer:       /CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
Certificate serial:       532975D869D3C404BF9617A17C7CDA8CEC3DB1F7
Authority key identifier: 82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa
Signing time:             Tue 25 Aug 2026 14:18:04 +0000
ROA not before:           Tue 25 Aug 2026 14:13:04 +0000
ROA not after:            Tue 24 Aug 2027 14:18:04 +0000
asID:                     204085
IP address blocks:        2a06:a002:a002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:29:75:d8:69:d3:c4:04:bf:96:17:a1:7c:7c:da:8c:ec:3d:b1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
        Validity
            Not Before: Aug 25 14:13:04 2026 GMT
            Not After : Aug 24 14:18:04 2027 GMT
        Subject: CN=309D10D520565C2C992DFBA73F55348C1B5B234F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:97:2d:c2:f9:b2:c0:a1:aa:6f:a9:fe:f7:
                    ab:f0:de:4b:c8:ca:32:05:7c:9c:cb:74:1f:0a:d1:
                    3b:e4:c2:bc:eb:c1:8f:31:9e:f5:9b:73:c8:d4:8f:
                    17:7c:a8:0f:a2:aa:0e:10:84:f8:54:be:d7:3c:1e:
                    20:c5:ee:d3:c0:58:5b:67:7d:04:10:a4:fd:dc:9f:
                    8a:c2:d7:d4:1c:6b:62:15:e1:06:74:a9:e5:fc:06:
                    7d:79:1a:5e:37:ab:37:e1:3f:8c:76:b4:be:91:b1:
                    cd:63:6f:fb:d0:24:91:dc:03:13:77:5a:59:3b:b9:
                    27:28:42:0f:d8:2c:2f:5e:b4:8d:44:21:c0:f4:a8:
                    21:b1:e0:73:09:63:70:11:44:58:bd:01:36:78:f4:
                    60:a9:ff:71:da:32:ea:a6:c8:d2:3b:e0:73:16:50:
                    8d:53:2c:9b:39:82:33:dd:0d:ec:f1:a2:96:41:41:
                    8e:11:f3:e9:99:b1:11:7d:3a:a1:e7:0e:96:2b:42:
                    a0:0d:63:ba:4d:67:1c:be:ce:66:14:4b:24:69:8c:
                    74:46:71:85:d8:8b:64:8f:ec:a6:75:08:40:01:82:
                    d0:54:e7:00:7a:27:85:e9:ca:1a:06:6f:16:89:b5:
                    03:75:72:8f:ae:7c:c7:9d:64:5e:bc:3c:97:d7:af:
                    b7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9D:10:D5:20:56:5C:2C:99:2D:FB:A7:3F:55:34:8C:1B:5B:23:4F
            X509v3 Authority Key Identifier:
                keyid:82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a613030323a3a2f34382d3438203d3e20323034303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:a002::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:b2:58:ba:51:e5:e3:5f:1f:91:47:05:93:48:b0:0e:95:
         88:b1:42:ae:6e:f2:f0:3c:60:11:dd:d6:a1:23:93:f1:56:c7:
         71:9e:88:47:c5:af:be:6c:f6:28:d5:c3:2c:38:a2:90:a1:d0:
         a4:40:bf:4b:9c:a2:58:de:35:b1:a0:60:18:03:40:1b:3c:68:
         49:82:95:80:4a:26:5e:34:80:41:6f:24:ce:89:f7:b1:9f:a3:
         fa:e5:13:cc:59:af:e3:e1:77:7f:93:23:88:f8:cc:29:67:eb:
         fb:a2:46:de:34:ea:3d:2d:89:5d:3f:ac:56:c0:3f:58:8a:a5:
         7b:1f:14:a1:78:0b:57:f9:64:b2:e0:56:a3:ef:46:5d:31:79:
         14:d0:70:18:8c:b6:1d:dd:25:e0:42:2e:31:2a:5b:1b:e2:8a:
         0b:64:6b:1d:8b:2c:09:fc:a7:5e:6b:88:74:d3:d5:e3:fc:7c:
         b9:f3:cf:df:d5:c2:74:9a:0c:38:0d:8e:d6:b3:8f:1c:8f:ff:
         b1:5e:11:16:92:17:bf:c8:bc:f8:bf:28:01:dd:c1:80:18:15:
         ba:1b:70:e9:90:c3:11:ea:4b:67:2d:e4:43:90:4a:a6:40:c9:
         b8:3d:78:9b:72:25:af:49:6a:35:71:a4:37:50:93:cf:ee:25:
         5a:94:2f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:30 2026 by rpki-client