Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32332d3234203d3e20393137.roa
File:                     3139392e3131392e36342e302f32332d3234203d3e20393137.roa (raw, json)
Hash identifier:          T9MQtDq3knkmrvDiHKn1vUWS4mlq+yjnpyZQ8lJrtXo=
Subject key identifier:   5D:A0:82:FA:92:E4:88:B0:8B:7B:FB:EA:4F:63:96:C7:D4:CA:E4:F6
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       4A8CA9C83503E6618EFC0A3BADCCB279E45D9EA8
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32332d3234203d3e20393137.roa
Signing time:             Sun 05 Oct 2025 22:31:14 +0000
ROA not before:           Sun 05 Oct 2025 22:26:14 +0000
ROA not after:            Sun 04 Oct 2026 22:31:14 +0000
asID:                     917
IP address blocks:        199.119.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 17:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8c:a9:c8:35:03:e6:61:8e:fc:0a:3b:ad:cc:b2:79:e4:5d:9e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Oct  5 22:26:14 2025 GMT
            Not After : Oct  4 22:31:14 2026 GMT
        Subject: CN=5DA082FA92E488B08B7BFBEA4F6396C7D4CAE4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:87:f0:bd:ac:e7:29:2d:58:d8:ff:4b:57:
                    37:ff:5f:83:19:2a:28:77:0b:85:6c:06:db:03:dc:
                    29:f5:97:47:e6:4e:ad:5e:e8:6d:6b:84:78:8c:ef:
                    ab:61:d9:10:29:21:b2:e7:ff:0d:c3:cc:34:31:b0:
                    8e:12:fc:71:33:f2:2f:c7:b1:bb:08:40:4b:ed:69:
                    a0:e7:e9:ac:76:f6:0a:1a:d5:7f:16:ee:28:fd:02:
                    85:d3:28:c6:8f:d1:ca:cd:2a:b4:35:aa:cc:a2:1f:
                    26:b4:34:c6:fb:e6:77:58:1a:9b:0b:ec:88:28:4b:
                    b2:65:79:0d:43:f2:09:f9:a7:79:e1:e5:5a:68:ff:
                    6e:ab:db:22:e0:95:84:bf:a6:ec:33:22:b5:58:15:
                    30:60:d4:17:c7:90:4e:bf:91:49:9a:35:8e:f9:be:
                    bd:6d:1d:1b:f7:78:ee:31:13:af:6c:e2:2b:d4:8c:
                    e0:a0:87:31:e6:dd:35:c5:f6:1a:c2:e0:52:ba:16:
                    19:c3:f6:47:d4:58:dc:6d:2a:2d:69:c6:53:ad:84:
                    78:3a:e9:82:1e:01:dc:89:f9:2f:0f:e3:92:17:e6:
                    5f:24:fa:a3:29:e4:1f:6f:69:0f:99:c6:1a:4a:94:
                    6c:b8:07:28:8c:b1:26:06:ba:62:67:87:d0:79:cb:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A0:82:FA:92:E4:88:B0:8B:7B:FB:EA:4F:63:96:C7:D4:CA:E4:F6
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32332d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:ea:e9:e6:60:72:92:34:11:f8:42:a9:75:e2:ba:12:f1:b2:
         66:c7:bc:2e:4a:85:18:10:ed:51:35:79:d0:f2:c0:86:82:e4:
         8e:dd:de:5d:08:ba:f3:eb:81:36:65:34:08:fb:3a:f6:d6:ff:
         c1:34:36:e8:94:93:43:00:7c:3b:29:f6:05:b0:21:ea:e2:ee:
         35:e4:83:83:c7:fc:83:e2:4d:97:5a:42:a2:6c:18:4f:f3:37:
         2d:2b:9a:8b:23:1e:29:3c:13:94:92:21:62:aa:58:ea:7e:bc:
         fd:0c:0d:db:81:e1:66:09:8e:45:c9:ba:3f:d0:db:24:df:a9:
         bd:05:aa:bb:28:55:21:1a:04:32:55:a8:8a:bb:96:eb:41:81:
         7d:4e:ff:2d:92:ab:0e:8a:de:91:b7:46:86:ac:66:49:27:06:
         a0:ec:02:74:a4:47:05:9f:f0:b0:f6:21:b9:ce:d9:09:fb:51:
         8f:e3:27:f9:cb:31:2b:64:f0:7a:b9:56:63:f6:9f:9f:3d:2e:
         9f:bf:20:81:a0:39:dc:7c:7d:6a:a3:7a:ef:d1:3f:3a:9f:7f:
         97:54:a0:e9:41:87:57:53:6f:a0:81:81:02:7d:2f:74:49:3b:
         a2:03:55:54:ed:c7:93:89:4c:5d:d1:a6:43:58:67:cd:48:9f:
         8e:ea:ae:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:00:01 2025 by rpki-client