Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/1/3139322e302e312e302f32342d3332203d3e203437323732.roa
File:                     3139322e302e312e302f32342d3332203d3e203437323732.roa (raw, json)
Hash identifier:          B+fcfdn2+Wn/FJUe7oLyaymKDy0/K51HZwaJ2xQWO54=
Subject key identifier:   1F:F4:E4:F1:BF:88:AB:0A:4B:13:FA:44:F4:CE:67:4A:3C:52:66:59
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       62BD69A704568CA802BB3C8D85B16104E4F712F8
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/3139322e302e312e302f32342d3332203d3e203437323732.roa
Signing time:             Sun 12 Jul 2026 06:45:22 +0000
ROA not before:           Sun 12 Jul 2026 06:40:22 +0000
ROA not after:            Sun 11 Jul 2027 06:45:22 +0000
asID:                     47272
IP address blocks:        192.0.1.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bd:69:a7:04:56:8c:a8:02:bb:3c:8d:85:b1:61:04:e4:f7:12:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Jul 12 06:40:22 2026 GMT
            Not After : Jul 11 06:45:22 2027 GMT
        Subject: CN=1FF4E4F1BF88AB0A4B13FA44F4CE674A3C526659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:da:59:c5:ae:a4:ee:56:16:18:5e:a8:69:f4:
                    95:ea:35:ba:7b:f0:f6:c9:a8:d1:47:b2:a2:b8:10:
                    88:ab:5e:c4:d2:99:4f:93:01:e3:3c:43:d3:b1:f5:
                    01:94:a1:bd:33:c4:c4:d7:08:f4:79:3a:3d:36:18:
                    b6:10:f8:3f:b2:99:56:03:2d:d0:4b:24:78:0b:62:
                    88:e5:da:fa:74:88:13:eb:d8:63:e3:04:4c:94:85:
                    39:4a:24:a7:ee:fd:d3:a4:ba:6a:91:62:05:79:82:
                    72:da:84:fd:ba:6a:14:5a:c0:02:5a:f4:68:3b:08:
                    59:2f:19:35:04:f1:05:a6:91:0e:ca:41:aa:fc:3f:
                    65:02:0e:8a:2c:d8:9b:14:a9:cc:b1:67:f7:e4:2d:
                    b0:72:1a:dc:79:2e:62:b2:bb:82:a1:e3:4a:e6:34:
                    29:0c:af:13:6d:86:da:90:dc:b6:1a:4b:10:3a:15:
                    82:31:e0:c4:77:60:47:3d:f7:2b:9b:fa:9f:1d:05:
                    fe:bc:c8:6e:c6:dc:ad:6d:65:30:b8:29:95:09:49:
                    40:33:d7:70:56:31:dd:e7:13:c5:7b:3b:ee:c8:7a:
                    04:47:5c:0f:29:1c:c2:c3:12:34:c4:fd:72:76:67:
                    0e:c6:65:e2:f7:d1:34:a1:3c:1c:8f:12:e8:98:0e:
                    45:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F4:E4:F1:BF:88:AB:0A:4B:13:FA:44:F4:CE:67:4A:3C:52:66:59
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/3139322e302e312e302f32342d3332203d3e203437323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:93:40:7c:39:34:40:cb:5b:c4:6c:3f:9f:fc:61:61:42:cb:
         ba:04:8e:83:44:6c:3d:2f:88:dd:c8:1e:4a:3b:24:43:c0:64:
         10:64:bd:fc:9b:db:1d:12:a4:f3:d5:42:f7:99:e8:3e:89:c7:
         11:aa:12:cd:90:2d:6c:09:ee:2f:6a:e0:40:ef:9a:00:6c:32:
         46:65:33:b4:38:ea:18:86:55:12:e9:43:02:60:5b:e2:fe:93:
         d3:9e:6e:7b:40:10:2e:5f:c6:cd:40:c1:cb:78:0e:df:6f:8f:
         3f:10:b6:0c:d2:3b:4b:5b:39:7b:da:7b:a3:ae:1f:ce:68:30:
         9f:62:c0:9c:56:eb:b0:8c:d7:a8:21:17:56:38:d9:e3:86:56:
         5d:c8:80:46:48:ee:cf:1c:d3:fc:6e:7c:81:b1:ae:e0:34:73:
         5e:6b:9c:5a:45:e1:8b:d2:5a:36:ee:05:1f:2e:7d:b8:c2:e0:
         17:46:d0:9a:87:20:2d:61:3d:03:a2:35:2c:4b:41:73:14:11:
         92:ab:3c:a0:b0:cf:37:ca:4d:b6:19:4e:92:4e:48:7a:ba:28:
         f1:70:31:46:c9:80:cb:c7:3a:cb:30:4d:b4:f0:01:e5:51:81:
         6e:ce:5d:16:41:15:3c:3a:c3:cb:09:4b:31:04:74:ed:99:65:
         47:10:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:56 2026 by rpki-client