Route Origin Authorization

$ rpki-client -vvvf krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a613031303a3a2f34342d3434203d3e20323135373630.roa
File:                     326130363a613030323a613031303a3a2f34342d3434203d3e20323135373630.roa (raw, json)
Hash identifier:          W6mfP769cnd1S8DpUoIljEYEBpd12ibsCAC3R1Re1k8=
Subject key identifier:   B7:FC:BA:23:8F:4A:EB:5C:0B:AA:EB:81:CA:5E:22:F8:7A:A3:9E:76
Certificate issuer:       /CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
Certificate serial:       65AACBFE563C4AA2DCF447C3DABD2A8AC4E67197
Authority key identifier: 82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
Subject info access:      rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a613031303a3a2f34342d3434203d3e20323135373630.roa
Signing time:             Wed 26 Aug 2026 02:44:22 +0000
ROA not before:           Wed 26 Aug 2026 02:39:22 +0000
ROA not after:            Wed 25 Aug 2027 02:44:22 +0000
asID:                     215760
IP address blocks:        2a06:a002:a010::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl
                          rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:aa:cb:fe:56:3c:4a:a2:dc:f4:47:c3:da:bd:2a:8a:c4:e6:71:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E655CAA25B8DDE79B40B323A234B26A41D4E33
        Validity
            Not Before: Aug 26 02:39:22 2026 GMT
            Not After : Aug 25 02:44:22 2027 GMT
        Subject: CN=B7FCBA238F4AEB5C0BAAEB81CA5E22F87AA39E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:09:99:1e:af:ea:0d:5a:6a:42:c1:4b:32:
                    ff:96:7f:dd:4d:61:73:14:7e:29:c1:06:ff:99:1e:
                    f3:d2:0d:59:6e:c5:40:ad:95:6c:77:68:e5:a1:a4:
                    f9:2f:a7:32:83:23:29:ef:6a:5f:5f:c8:2c:c4:17:
                    34:6f:24:fb:4a:52:e9:db:5a:ce:62:90:fe:0c:fc:
                    47:0b:8a:b4:35:84:66:42:ac:48:91:87:6e:ea:e1:
                    57:88:b8:a7:68:2e:50:55:ca:b0:52:9a:3f:dc:a6:
                    82:68:39:27:4d:ba:d8:43:9a:fc:22:5b:f3:bf:64:
                    f9:6d:8f:0b:66:09:a9:de:0e:07:a5:ab:2c:9f:e1:
                    1d:19:5f:15:9f:60:7d:b0:f2:71:2d:49:f0:e5:64:
                    9c:d0:d4:12:0d:01:4e:26:a9:bc:ec:79:66:db:f6:
                    7f:a2:89:d9:32:ea:45:1c:dc:0d:a9:c4:8d:25:42:
                    4c:b2:58:2d:54:22:27:f1:0a:ef:0f:c7:af:7c:dc:
                    2d:c5:ee:ad:8f:6f:3a:55:a0:15:d2:83:a4:51:f8:
                    97:8f:d2:80:34:3a:1a:c3:d0:4b:7a:3d:c6:b8:13:
                    76:c8:21:f1:17:cd:a5:a3:e4:69:94:09:4e:41:9f:
                    d1:ea:10:fa:b4:c3:ba:53:cb:eb:3b:3f:40:af:d0:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FC:BA:23:8F:4A:EB:5C:0B:AA:EB:81:CA:5E:22:F8:7A:A3:9E:76
            X509v3 Authority Key Identifier:
                keyid:82:E6:55:CA:A2:5B:8D:DE:79:B4:0B:32:3A:23:4B:26:A4:1D:4E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/82E655CAA25B8DDE79B40B323A234B26A41D4E33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/82E655CAA25B8DDE79B40B323A234B26A41D4E33.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.dispaisy.systems/repo/dispaisyenterprises/3/326130363a613030323a613031303a3a2f34342d3434203d3e20323135373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a002:a010::/44

    Signature Algorithm: sha256WithRSAEncryption
         aa:e8:47:25:3a:a3:9c:d9:05:d2:c5:78:19:1e:e2:f1:a3:90:
         c5:4d:7a:66:bb:31:c8:00:f5:d5:29:bc:3c:91:45:cd:b3:26:
         61:01:10:29:4d:9b:e2:5f:b9:7d:00:5b:dc:7c:44:aa:d8:2b:
         0e:fa:7d:e0:74:2f:0f:f8:dd:d5:56:2f:e4:d8:c4:ad:ca:80:
         5d:df:8f:ae:3e:5d:69:e4:9d:05:6e:9a:0a:59:24:8a:3e:14:
         6b:c7:a9:97:d8:24:e5:61:9a:0b:e0:61:da:77:47:51:74:7b:
         17:9f:ae:25:47:e7:98:a9:9c:26:b1:a0:10:a7:db:bb:b9:16:
         6a:8b:71:03:9a:d1:75:c8:d0:2e:d2:fd:a1:74:c0:7f:ec:ae:
         60:76:2e:82:4d:4f:05:d7:c5:65:e6:46:c2:0f:bd:76:2a:ad:
         06:ba:ea:57:71:65:27:15:cb:50:9d:93:3b:31:b0:d1:77:14:
         8a:9b:62:24:e5:35:2a:a6:0c:6e:02:ea:aa:e1:33:5b:7c:e2:
         6b:f1:32:79:89:39:8e:74:98:07:a0:82:57:fe:5a:72:ca:1f:
         12:0d:b1:a1:0c:72:d4:d3:ad:28:8a:d2:84:fb:cb:52:6b:24:
         14:ab:3a:dd:cc:7b:60:07:0b:90:9a:b6:f8:1d:20:fe:36:b7:
         20:e1:f3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:27 2026 by rpki-client