Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e203537363935.roa
File:                     3137302e33392e3232342e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier:          JHwlQxkxXww6Ju68TW8Z9Vrvg8bsMqVcYtb8OwAxm0g=
Subject key identifier:   BD:73:2E:AE:D7:90:E8:CB:AF:04:10:7D:A4:D4:33:03:0B:4C:12:AF
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       395A36B0E4D41C996AC41033C80B027EE77CB078
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e203537363935.roa
Signing time:             Sun 05 Oct 2025 22:31:15 +0000
ROA not before:           Sun 05 Oct 2025 22:26:15 +0000
ROA not after:            Sun 04 Oct 2026 22:31:15 +0000
asID:                     57695
IP address blocks:        170.39.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5a:36:b0:e4:d4:1c:99:6a:c4:10:33:c8:0b:02:7e:e7:7c:b0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Oct  5 22:26:15 2025 GMT
            Not After : Oct  4 22:31:15 2026 GMT
        Subject: CN=BD732EAED790E8CBAF04107DA4D433030B4C12AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:03:94:ec:c2:f0:60:8b:77:25:81:86:fd:fd:
                    6b:ed:b4:7c:b9:01:27:73:1a:34:f3:c1:79:0f:3b:
                    e7:16:22:3d:a9:d5:f6:37:ea:97:9a:36:32:48:5a:
                    f2:24:b5:0a:b0:0b:66:de:e3:31:f0:d0:69:70:de:
                    19:d6:b8:bd:22:d9:81:fd:9a:a1:6b:dd:43:93:99:
                    44:1f:65:65:ef:ed:2e:34:58:c1:a6:c9:e0:5c:c5:
                    bf:1c:90:3c:e1:cc:85:54:b3:f8:15:84:4f:ef:50:
                    b9:02:66:22:d0:ba:20:0b:54:cc:0d:32:20:8e:3b:
                    80:9a:93:72:7e:fd:6f:b4:bf:44:36:3d:97:4c:25:
                    f7:4c:cd:7d:f7:53:9d:f2:6b:fa:5f:3e:43:44:fb:
                    50:3a:9e:d5:f6:49:ae:4e:a4:a8:3f:46:b3:88:1e:
                    60:d1:1b:37:85:19:ac:da:d8:c2:73:82:31:f1:61:
                    38:e1:c2:c8:a6:ef:df:c6:b7:87:3b:ff:69:c2:23:
                    55:25:80:d4:36:38:f0:de:da:aa:8c:66:08:10:5b:
                    09:bc:0a:48:8b:77:ee:c3:37:cc:df:04:8e:3b:13:
                    df:ad:a4:5f:4c:fc:0c:1c:67:c6:13:3a:e3:bb:41:
                    77:c6:82:71:f3:36:d9:bb:d0:1d:b2:26:38:af:4f:
                    32:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:73:2E:AE:D7:90:E8:CB:AF:04:10:7D:A4:D4:33:03:0B:4C:12:AF
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:9f:23:08:60:60:72:ce:f6:ce:88:34:b5:c5:ba:f8:7c:ba:
         1e:d4:d9:1a:8d:20:30:16:8c:29:dc:1a:f2:07:51:50:e3:85:
         d5:5f:52:13:d9:57:d1:e2:85:d7:79:e0:c7:e3:f0:2b:45:50:
         36:eb:55:23:19:b4:31:05:b1:87:11:33:3f:46:d9:21:e3:9c:
         17:2d:1f:69:df:2f:63:ec:60:e7:42:3c:22:76:65:eb:f6:f2:
         05:00:58:26:d1:c2:03:37:92:23:59:0c:d1:16:92:f5:43:55:
         e6:77:a6:60:09:77:82:d3:c0:28:9a:bc:f5:42:40:93:ef:56:
         7f:fb:f0:27:51:b6:82:da:65:59:43:65:d6:a3:fd:d8:ad:c9:
         57:6d:61:df:fb:c3:27:b0:3d:6a:45:cb:b1:9f:2f:54:88:80:
         58:02:f2:bd:36:06:a5:89:e4:07:79:11:ea:b7:93:59:f5:22:
         ed:50:65:1c:d3:8f:23:c8:6a:ad:96:5f:5f:19:a3:a2:5c:88:
         4e:ee:b8:89:e9:ef:fe:91:47:07:2e:31:e6:32:8e:51:77:ea:
         63:2a:7b:9c:1d:09:63:6b:c0:9a:89:c8:ba:fa:25:87:13:8e:
         b8:f0:79:47:9e:f7:31:4c:f4:b7:ed:26:4e:56:a0:d8:17:64:
         f2:74:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:39 2025 by rpki-client