Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e20393137.roa
File:                     3137302e33392e3232342e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          H5QTZyKQ/l376qoQlemMYZ/7YyfWeh9SumFIgys7/Os=
Subject key identifier:   49:91:37:FB:85:1D:EE:0E:04:D7:E3:23:D9:17:01:A8:F0:F6:71:84
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       795EA3BF7B8904D8898B30AE660FB1D01C5ECCE5
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e20393137.roa
Signing time:             Sun 05 Oct 2025 22:31:13 +0000
ROA not before:           Sun 05 Oct 2025 22:26:13 +0000
ROA not after:            Sun 04 Oct 2026 22:31:13 +0000
asID:                     917
IP address blocks:        170.39.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 17:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5e:a3:bf:7b:89:04:d8:89:8b:30:ae:66:0f:b1:d0:1c:5e:cc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Oct  5 22:26:13 2025 GMT
            Not After : Oct  4 22:31:13 2026 GMT
        Subject: CN=499137FB851DEE0E04D7E323D91701A8F0F67184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:30:34:a4:5f:e5:94:6a:53:fe:ee:2c:c3:
                    1b:1c:c9:e5:15:1d:37:2a:37:d0:96:f7:15:b8:55:
                    18:92:16:41:26:51:f5:28:7b:d8:f3:4a:1b:a6:05:
                    b2:42:e5:a4:e8:11:a7:6f:33:3e:9d:36:12:c1:ef:
                    00:29:b3:78:61:b6:f1:eb:30:42:94:e3:c1:41:96:
                    55:66:e2:1c:99:85:c1:ca:21:7c:42:f1:21:55:fc:
                    dd:ee:58:47:71:fe:7a:60:fa:f8:37:13:2e:aa:e9:
                    a1:2b:cc:68:60:0e:6b:62:d1:dd:5e:88:f4:96:85:
                    18:b8:74:de:bb:8c:11:aa:47:77:53:69:60:73:16:
                    16:49:5a:91:dd:dc:88:46:e1:dd:f3:f2:24:2d:5e:
                    d0:73:cc:2f:f2:ac:fa:37:f4:56:37:4f:62:d1:2b:
                    65:85:6e:65:18:84:79:cc:6e:a3:0a:9d:f5:6a:f7:
                    2b:4a:db:0e:65:69:fd:1c:bf:5f:10:b7:95:44:91:
                    3b:4a:22:4f:ae:50:9e:2d:9f:9c:50:65:ac:5c:bc:
                    cc:9b:91:cf:30:29:48:d2:b4:e8:d4:3b:97:3a:94:
                    d7:9e:ef:8e:0c:4c:ff:07:b2:ce:01:63:d4:0f:ca:
                    9d:e6:3c:a0:53:e7:3c:06:57:cf:32:d4:92:4f:24:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:91:37:FB:85:1D:EE:0E:04:D7:E3:23:D9:17:01:A8:F0:F6:71:84
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:36:f7:03:5f:9a:f5:4f:ef:b5:a7:9b:f1:de:31:b6:ba:70:
         65:d6:71:2b:21:1e:e0:21:b3:55:11:33:ea:5b:b7:1b:84:b8:
         cd:28:ea:aa:0a:6a:33:a2:88:04:8b:9b:92:4a:ad:d3:18:4a:
         67:a3:f0:88:7e:0e:62:a0:c1:8a:98:90:1d:72:40:fa:60:f4:
         e1:ad:7b:10:c8:51:18:a0:58:7a:e1:1a:17:7e:02:86:e3:e6:
         23:a8:36:95:27:b2:a5:be:b1:9f:42:b4:6c:80:07:3c:1a:45:
         fc:0f:3d:20:c9:81:1e:ce:0e:4a:07:28:8a:99:1c:16:ef:77:
         84:33:c5:ea:55:ee:7b:b0:fb:98:13:39:f4:29:a0:79:d4:dd:
         3b:50:85:f0:4a:e5:b1:91:46:80:b0:ee:3a:99:44:c6:99:2a:
         73:c0:18:98:a0:e5:0c:1e:6f:de:f4:3d:ec:dc:60:ca:97:24:
         b2:68:f9:00:c9:c7:7e:59:66:ec:e4:f4:88:0a:84:75:d1:5d:
         f6:a7:68:aa:97:da:a4:61:2a:f9:23:3b:ae:73:a9:53:d8:64:
         ca:eb:f0:fc:01:e2:e3:b4:31:d1:f9:79:c5:c8:1f:51:af:4e:
         59:cf:5f:c5:1b:84:92:84:b6:0d:08:29:3b:aa:49:29:94:4c:
         09:b3:b0:fc
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeV6jv3uJBNiJizCuZg+x0BxezOUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGM2YmU4ODJmM2ZiNjFjMmFhYWE0ZmFj
YmIzZmFkNzJmMDk2YmU3ZDIwHhcNMjUxMDA1MjIyNjEzWhcNMjYxMDA0MjIzMTEz
WjAzMTEwLwYDVQQDEyg0OTkxMzdGQjg1MURFRTBFMDREN0UzMjNEOTE3MDFBOEYw
RjY3MTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU8wNKRf5ZRq
U/7uLMMbHMnlFR03KjfQlvcVuFUYkhZBJlH1KHvY80obpgWyQuWk6BGnbzM+nTYS
we8AKbN4Ybbx6zBClOPBQZZVZuIcmYXByiF8QvEhVfzd7lhHcf56YPr4NxMuqumh
K8xoYA5rYtHdXoj0loUYuHTeu4wRqkd3U2lgcxYWSVqR3dyIRuHd8/IkLV7Qc8wv
8qz6N/RWN09i0StlhW5lGIR5zG6jCp31avcrStsOZWn9HL9fELeVRJE7SiJPrlCe
LZ+cUGWsXLzMm5HPMClI0rTo1DuXOpTXnu+ODEz/B7LOAWPUD8qd5jygU+c8BlfP
MtSSTyTQUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEmRN/uFHe4OBNfjI9kXAajw
9nGEMB8GA1UdIwQYMBaAFCeQTP4EFUfFbyC6Wxuze8M+ihPTMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8yNzkwNENGRTA0MTU0N0M1NkYyMEJBNUIxQkIzN0JDMzNFOEEx
M0QzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRjNmJlODgyZjNmYjYxYzJhYWFhNGZhY2JiM2ZhZDcy
ZjA5NmJlN2QyLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5j
Oi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8xLzMxMzczMDJlMzMzOTJlMzIz
MjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzkzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqifg
MA0GCSqGSIb3DQEBCwUAA4IBAQACNvcDX5r1T++1p5vx3jG2unBl1nErIR7gIbNV
ETPqW7cbhLjNKOqqCmozoogEi5uSSq3TGEpno/CIfg5ioMGKmJAdckD6YPThrXsQ
yFEYoFh64RoXfgKG4+YjqDaVJ7KlvrGfQrRsgAc8GkX8Dz0gyYEezg5KByiKmRwW
73eEM8XqVe57sPuYEzn0KaB51N07UIXwSuWxkUaAsO46mUTGmSpzwBiYoOUMHm/e
9D3s3GDKlySyaPkAycd+WWbs5PSICoR10V32p2iql9qkYSr5Izuuc6lT2GTK6/D8
AeLjtDHR+XnFyB9Rr05Zz1/FG4SShLYNCCk7qkkplEwJs7D8
-----END CERTIFICATE-----
Generated at Tue Oct 21 07:02:08 2025 by rpki-client