Route Origin Authorization

$ rpki-client -vvvf krill.47272.net/repo/HYEHOST/1/323630323a663936643a6666663a3a2f34382d3438203d3e20313333353034.roa
File:                     323630323a663936643a6666663a3a2f34382d3438203d3e20313333353034.roa (raw, json)
Hash identifier:          nlpBGgbwRK8KoGWjmehbadxxXQ2gvyjZgTBC7TSi88c=
Subject key identifier:   44:5A:70:C2:4E:BE:D0:AE:DB:74:CA:75:E4:7B:B0:9B:F1:19:17:04
Certificate issuer:       /CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
Certificate serial:       5668D5A6B22B52BEB84D72A848184A772BB9B9F1
Authority key identifier: 80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6666663a3a2f34382d3438203d3e20313333353034.roa
Signing time:             Tue 22 Sep 2026 08:52:18 +0000
ROA not before:           Tue 22 Sep 2026 08:47:18 +0000
ROA not after:            Tue 21 Sep 2027 08:52:18 +0000
asID:                     133504
IP address blocks:        2602:f96d:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl
                          rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/02c7706b-3baf-42cb-bdf7-782b036252b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 04:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:68:d5:a6:b2:2b:52:be:b8:4d:72:a8:48:18:4a:77:2b:b9:b9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb
        Validity
            Not Before: Sep 22 08:47:18 2026 GMT
            Not After : Sep 21 08:52:18 2027 GMT
        Subject: CN=445A70C24EBED0AEDB74CA75E47BB09BF1191704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d6:be:21:a1:e6:9c:e6:ca:60:c6:5c:4e:0a:
                    08:a5:3e:68:46:ff:f5:56:6d:9c:7b:0c:16:6e:1d:
                    86:63:d2:e4:84:98:56:26:07:35:43:79:79:2f:57:
                    b8:28:74:54:14:70:80:39:bd:c7:e4:8c:fa:6c:a0:
                    63:4e:57:6c:4d:64:03:3b:0e:1d:b5:98:81:89:a0:
                    51:9b:01:ee:e2:b1:3c:9e:6f:ac:9f:a0:42:0e:d3:
                    60:5f:4d:fe:99:93:11:e7:b2:78:92:f8:72:be:f3:
                    8c:f2:bb:6e:53:77:79:73:05:8b:a7:25:62:3b:7b:
                    0b:16:e1:a1:35:90:d5:a6:62:4e:58:59:ca:ab:66:
                    05:f0:04:15:95:48:da:73:a8:8a:e8:fd:c9:61:0e:
                    27:a6:1f:4e:61:a0:2a:91:81:b6:7f:a1:6a:8b:69:
                    90:f0:13:75:61:aa:64:7d:c5:63:5b:95:b1:d3:6a:
                    1f:5f:f8:f4:ee:09:c7:e9:d6:80:f3:bd:88:9a:de:
                    64:39:05:a5:c1:5d:dc:37:22:fe:75:d3:f7:17:0e:
                    f0:69:78:69:5f:c0:af:2b:ee:9d:70:72:79:bb:51:
                    a4:fe:fb:f9:67:9e:6e:01:18:2f:be:e7:88:b2:78:
                    b5:49:0b:4c:3b:42:3f:f0:a6:ca:06:03:f9:ad:8e:
                    bd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:5A:70:C2:4E:BE:D0:AE:DB:74:CA:75:E4:7B:B0:9B:F1:19:17:04
            X509v3 Authority Key Identifier:
                keyid:80:F5:02:2D:6A:89:F4:EA:57:AB:0F:61:31:D3:36:61:AA:C3:0B:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/1/80F5022D6A89F4EA57AB0F6131D33661AAC30BE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82dabad319283fb2422b4d00c0849b9a83c9644f888cbb.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/1/323630323a663936643a6666663a3a2f34382d3438203d3e20313333353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f96d:fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:e4:11:dc:7f:24:b8:2b:80:9a:57:ec:27:a5:2e:de:20:
         af:6d:ba:7a:0e:3d:ce:04:97:f2:54:8e:26:ee:e8:58:ed:1e:
         31:93:b3:60:8d:df:27:2e:d2:93:f1:c7:4b:dc:12:63:74:b1:
         83:47:ef:da:2b:0b:0a:b0:85:de:d2:2b:f2:bf:66:da:82:c3:
         d9:dc:ce:2b:f9:80:44:8d:1d:a0:eb:86:e4:d0:be:57:fc:e7:
         a8:04:bc:f3:6a:ff:f7:62:16:b4:ba:4b:4a:55:0e:52:a6:b5:
         bf:cd:54:b4:bb:13:6d:9e:76:48:e7:8a:cf:02:78:c5:cf:d0:
         f4:e5:71:cc:1a:11:1b:12:2a:b2:6e:19:6c:32:c0:fe:bd:3e:
         15:45:32:61:00:57:e1:40:42:a9:46:f2:f4:9e:6e:26:9f:d4:
         73:d0:10:2d:1f:83:a5:94:1f:dd:8f:7a:f8:50:21:ca:01:68:
         5a:2b:2d:cc:d0:f2:92:94:12:37:a1:03:b6:16:e0:41:ed:a4:
         96:7a:ce:73:07:ed:d9:03:0a:b2:cb:75:fc:99:2c:74:43:38:
         e0:d7:a0:c3:59:d6:65:b7:b4:ed:ed:0b:ed:78:02:fc:4f:92:
         9e:93:a6:94:7a:34:01:bc:44:4e:67:18:63:16:d8:d0:e2:42:
         b0:2d:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:11:52 2026 by rpki-client