Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS200536.roa
File:                     AS200536.roa (raw, json)
Hash identifier:          dT5dK/gxtZyYyVq7J8U3T53MagEucJcHKi2iuST3it0=
Subject key identifier:   BD:09:EA:F7:A5:DE:12:F4:1B:28:C0:20:AB:12:F6:DF:53:8E:99:01
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       5B9779BA549304E9B8B3B4122B89157E48AA56A4
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS200536.roa
Signing time:             Mon 13 Jul 2026 10:45:46 +0000
ROA not before:           Mon 13 Jul 2026 10:40:46 +0000
ROA not after:            Mon 12 Jul 2027 10:45:46 +0000
asID:                     200536
IP address blocks:        2a0f:6280:1400::/40 maxlen: 48
                          2a0f:6284:4c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:97:79:ba:54:93:04:e9:b8:b3:b4:12:2b:89:15:7e:48:aa:56:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Jul 13 10:40:46 2026 GMT
            Not After : Jul 12 10:45:46 2027 GMT
        Subject: CN=BD09EAF7A5DE12F41B28C020AB12F6DF538E9901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:45:b6:85:46:5b:87:0f:90:eb:52:df:c3:
                    39:57:20:af:59:8a:4c:af:c1:67:3d:d1:b7:9d:6c:
                    b6:fe:5d:5a:ab:e6:9b:d5:82:dd:ff:a2:ce:89:0f:
                    3d:dc:30:d5:59:ce:2e:00:0e:af:2b:b1:60:fd:4b:
                    c9:00:d6:1d:05:2f:49:88:d8:ad:81:3e:35:0c:e4:
                    db:54:65:d5:c9:2d:26:c9:c1:73:97:94:3d:2b:5d:
                    45:e7:09:be:ac:34:67:c4:e6:64:e2:29:e5:6b:0a:
                    75:cd:b7:85:eb:60:50:cf:be:c7:a7:67:e7:bb:61:
                    02:aa:a9:78:03:74:3e:7b:a3:a1:30:12:5f:b3:4e:
                    0d:bb:55:b3:db:96:be:09:08:73:c3:13:90:ec:4a:
                    2e:ff:72:1d:4a:33:06:bc:b9:0f:66:a1:60:d4:44:
                    76:52:a3:2a:b6:48:11:d8:35:79:ee:03:1b:96:94:
                    18:7b:42:4a:88:b4:b8:07:8b:56:fb:d7:25:14:71:
                    32:8b:e9:fd:a5:42:e8:49:8d:10:cf:10:85:58:22:
                    64:35:e0:6c:48:14:eb:85:e2:cf:62:4a:18:f0:75:
                    fb:8d:e0:66:47:06:c2:68:20:b6:40:1b:df:49:ee:
                    35:ac:08:a7:52:c1:be:52:d1:7d:09:54:b3:45:9e:
                    b4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:09:EA:F7:A5:DE:12:F4:1B:28:C0:20:AB:12:F6:DF:53:8E:99:01
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS200536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6280:1400::/40
                  2a0f:6284:4c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:d3:47:0c:29:f4:57:f1:61:4e:ce:f3:a0:d4:26:b2:3a:55:
         f0:f2:51:76:6d:01:e0:6d:07:9f:bf:d1:3d:57:b3:79:88:30:
         d0:3d:cd:f3:b0:75:b8:79:5f:c1:08:3a:56:c3:a0:d0:ca:5e:
         5f:d5:8f:06:6d:5b:56:22:49:4e:79:a7:89:22:23:d6:8c:af:
         47:c3:2e:ba:0d:47:74:2e:e5:d2:d3:58:1e:d3:55:07:a9:26:
         1c:9e:70:58:97:63:30:da:f1:bc:79:52:45:53:60:52:8b:e6:
         68:82:23:bb:2e:e5:2f:8a:6d:a5:18:36:fe:a9:ae:ae:9a:63:
         c0:35:41:df:f2:08:5d:45:7e:50:32:94:0b:a0:39:b3:86:51:
         50:b9:6f:c3:df:eb:cf:5a:66:9a:45:7c:13:ff:16:31:b5:0a:
         8c:c7:a3:ad:e6:e8:64:05:24:e3:44:f0:86:0b:dd:d9:9d:a8:
         3a:7c:db:d5:4e:6c:8b:91:f1:ab:37:ec:fe:00:0e:bb:8d:d9:
         0a:57:be:66:4d:32:a1:ab:83:0d:24:8e:58:f5:43:75:1c:77:
         df:33:e5:ce:d1:a6:84:35:e5:8c:8c:d2:2d:3a:32:63:3c:10:
         9a:74:50:6e:a2:47:dc:ca:c1:d1:91:02:72:53:21:9a:90:29:
         d1:cc:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:15:28 2026 by rpki-client