Route Origin Authorization

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS207083.roa
File:                     AS207083.roa (raw, json)
Hash identifier:          7Gm6m4ONyieF4uw4Lk5GMAnDD6vMho2cQwh2h8ArkXY=
Subject key identifier:   FA:D8:D4:7E:28:21:02:0F:BB:2E:31:49:F3:B8:F0:93:C7:81:A5:D8
Certificate issuer:       /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
Certificate serial:       3355E71459F3E266FBA0FA5CCB21C4AD705A067A
Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa
Signing time:             Sun 12 Oct 2025 08:44:03 +0000
ROA not before:           Sun 12 Oct 2025 08:39:03 +0000
ROA not after:            Sun 11 Oct 2026 08:44:03 +0000
asID:                     207083
IP address blocks:        2a09:54c6:a000::/48 maxlen: 48
                          2a09:54c6:a700::/48 maxlen: 48
                          2a0f:6283:1102::/48 maxlen: 48
                          2a0f:6284:4213::/48 maxlen: 48
                          2a0f:6284:4219::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:55:e7:14:59:f3:e2:66:fb:a0:fa:5c:cb:21:c4:ad:70:5a:06:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7
        Validity
            Not Before: Oct 12 08:39:03 2025 GMT
            Not After : Oct 11 08:44:03 2026 GMT
        Subject: CN=FAD8D47E2821020FBB2E3149F3B8F093C781A5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5b:73:f3:5f:88:c7:d5:63:52:53:fc:12:9a:
                    c2:c9:c4:ab:a3:5a:4f:4c:80:04:00:3c:4a:a0:ce:
                    9c:d0:55:34:f1:7d:f9:70:ab:d8:11:86:f8:da:18:
                    43:a8:ec:0c:a2:d3:9d:de:d0:9e:54:03:80:49:ba:
                    17:44:52:50:bd:34:76:bc:d9:92:2a:8f:a3:e5:ef:
                    10:d8:b6:a6:d7:de:da:1e:6f:a3:30:9f:6c:84:b6:
                    58:1e:20:ce:14:5f:83:da:b6:c7:bd:61:8c:65:e3:
                    e1:9c:46:64:f5:2f:00:15:b6:03:e0:dc:76:3b:25:
                    7c:bc:0f:26:67:d9:02:42:9e:5a:ff:6d:87:87:2c:
                    4b:ad:ea:9d:c4:e1:f4:da:04:d4:2c:ad:d1:eb:ed:
                    22:fa:75:7b:45:8e:54:dd:c8:93:37:e1:d9:0b:cf:
                    18:9c:af:14:1c:0d:8d:39:48:ee:ad:6e:89:15:87:
                    1d:05:60:f3:5a:d7:ae:81:8a:8a:b9:27:b9:95:d9:
                    d8:03:72:66:87:26:d3:15:af:6a:98:cf:46:7e:75:
                    7c:60:69:38:cb:97:a6:75:b0:4d:d5:1d:67:1a:c0:
                    02:23:a4:fe:6e:a4:b7:5c:54:90:10:34:64:27:19:
                    0e:23:30:27:c3:60:8c:4e:1e:2c:04:e1:84:8c:af:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D8:D4:7E:28:21:02:0F:BB:2E:31:49:F3:B8:F0:93:C7:81:A5:D8
            X509v3 Authority Key Identifier:
                keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS207083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:a000::/48
                  2a09:54c6:a700::/48
                  2a0f:6283:1102::/48
                  2a0f:6284:4213::/48
                  2a0f:6284:4219::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:02:a7:0b:89:e7:b9:84:33:50:86:dc:8d:21:61:c7:86:70:
         53:99:f5:fe:52:6b:a5:72:42:fd:f8:49:94:63:b1:90:87:2f:
         7b:e8:a1:ea:4b:bb:3f:a7:d4:93:1a:2e:fe:a2:60:b1:97:0e:
         d4:d1:95:1a:26:35:a5:34:25:ae:51:37:12:26:7c:b1:71:c4:
         bb:cf:bf:50:72:9e:07:7a:a4:be:97:53:7a:88:1d:9d:ea:1f:
         63:7f:1b:00:27:03:36:7d:39:99:e7:82:c2:29:4b:44:b2:fd:
         ba:c2:42:b3:ab:a0:5d:8c:b1:d5:bd:51:1f:47:ae:e8:12:d5:
         a7:01:34:eb:ab:3e:7b:56:45:62:27:78:da:6b:24:7a:05:12:
         d3:d9:bb:5f:04:25:3f:7a:6a:38:90:a8:ab:63:2d:ff:d0:3e:
         b8:1b:7b:6c:5a:dc:81:c3:e6:aa:d5:85:9e:c2:ac:4f:96:1c:
         c7:f7:1b:84:69:25:f3:e7:af:be:79:54:ec:34:7a:44:48:9b:
         ef:6e:80:53:f4:c0:08:3c:62:b6:97:b8:c6:57:3a:44:5c:72:
         29:bb:e6:14:96:18:d1:94:ad:d2:35:c1:e0:5e:37:c2:e4:92:
         c7:74:44:4b:88:8a:6d:20:9b:57:b1:0e:04:f0:ac:e5:d7:8a:
         36:81:8a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:44:41 2025 by rpki-client