Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393639.roa
File:                     32332e3134332e3137362e302f32342d3234203d3e20393639.roa (raw, json)
Hash identifier:          mfofURlyg3ixjGjXIvrSM6A1KqtxaY5UE0AWePnseRQ=
Subject key identifier:   20:FE:BF:A1:2D:54:36:B8:F6:CB:95:DA:BE:EA:91:E1:0F:59:91:3C
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       1BD390EF9F36242A0708605B7221B4A897A3E173
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393639.roa
Signing time:             Sun 05 Oct 2025 22:31:14 +0000
ROA not before:           Sun 05 Oct 2025 22:26:14 +0000
ROA not after:            Sun 04 Oct 2026 22:31:14 +0000
asID:                     969
IP address blocks:        23.143.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d3:90:ef:9f:36:24:2a:07:08:60:5b:72:21:b4:a8:97:a3:e1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Oct  5 22:26:14 2025 GMT
            Not After : Oct  4 22:31:14 2026 GMT
        Subject: CN=20FEBFA12D5436B8F6CB95DABEEA91E10F59913C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:2b:1d:7d:69:a1:9f:44:38:1f:71:80:29:
                    ec:8e:18:ae:67:11:48:4b:30:ff:60:11:bd:09:94:
                    0d:fc:d8:fc:ae:d9:91:73:ee:1c:b4:88:c8:bb:70:
                    f5:3a:83:65:38:e1:4b:13:49:52:c0:3b:3c:0e:ec:
                    57:aa:80:9c:4f:4d:6b:89:bf:3d:53:6e:58:21:11:
                    1d:bb:2a:63:f0:74:ca:e8:eb:f0:a1:28:1e:61:89:
                    55:74:17:99:1d:6a:61:f0:98:b8:0e:b0:05:51:f4:
                    eb:56:20:b3:30:4d:32:b2:cf:ce:87:2d:f8:9d:74:
                    ed:f2:ea:1c:f1:99:15:41:13:8d:8a:6b:93:bc:99:
                    ff:86:1b:6e:d4:57:a8:92:38:71:58:18:0e:73:67:
                    5a:19:6e:41:e3:b4:d2:c9:4d:f3:d4:d4:1c:89:41:
                    d3:ad:cd:11:09:53:5b:e5:98:f8:21:ea:30:ae:99:
                    7e:2b:71:9f:f7:59:9d:47:69:20:8e:35:4a:17:e6:
                    74:40:eb:8e:71:1a:93:b4:16:4f:52:86:0e:50:7a:
                    ad:d6:a7:ce:95:6e:5d:a3:49:ca:cb:dd:24:bf:fb:
                    eb:e4:c8:82:e4:03:55:fe:2c:5a:8e:ae:f1:89:ab:
                    5b:d1:ea:6a:8d:7f:8a:68:c0:9d:7f:56:d3:6b:ac:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FE:BF:A1:2D:54:36:B8:F6:CB:95:DA:BE:EA:91:E1:0F:59:91:3C
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:66:43:fb:c0:1e:d8:ea:5e:65:ef:ac:d8:96:04:01:cd:
         28:d5:45:20:3a:06:75:df:a6:4b:7b:04:7a:b6:fa:36:a0:a9:
         10:83:0b:43:10:c4:d2:c2:11:16:81:fc:19:26:a9:3c:b9:c4:
         f5:5b:58:86:33:c2:16:2f:5d:ac:5d:6f:b4:72:2e:9b:01:43:
         f1:c5:c2:80:93:fb:a2:c8:24:4a:05:32:ff:41:1a:c8:3f:c7:
         0d:64:73:c8:18:14:60:e8:6a:72:b5:ae:b7:6b:96:77:54:03:
         42:fd:16:53:b9:8d:f9:9c:73:91:e6:4c:f6:6e:2c:0f:a7:9f:
         fb:5d:75:90:f0:a6:80:8d:b7:cd:4b:21:d4:e1:b3:6c:9a:65:
         92:b6:8b:a9:7f:2c:c4:77:10:6e:31:79:4e:8c:37:4f:78:e8:
         44:62:76:c3:d1:b7:91:8b:42:c3:36:d9:c0:2c:16:d5:9c:4a:
         b6:3e:fe:06:30:a5:a7:0c:e3:f7:a9:7c:40:d5:f0:a7:d8:dd:
         6c:fd:79:50:5e:fb:ea:9b:5d:d3:e5:20:0e:47:81:1d:8e:d2:
         b2:cb:42:f6:01:1a:60:dc:bb:55:55:7c:9b:cd:ee:1b:cc:f5:
         d4:eb:f9:15:50:e8:db:dc:97:4e:f6:98:c4:5f:89:99:4c:3e:
         2e:d9:4f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:07:39 2025 by rpki-client