Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa
File:                     323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa (raw, json)
Hash identifier:          1Hd5j2AGbrWb7H+rBWlScahOOrXy2oRM0BB5oADsXHk=
Subject key identifier:   64:00:D1:FF:FD:31:86:E4:9E:E2:64:7B:6A:8F:5F:EB:DF:3B:21:94
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       3DFE2185CDE45DEC2BEB6222E4FDA01A54DD5CE5
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa
Signing time:             Sun 05 Oct 2025 22:31:16 +0000
ROA not before:           Sun 05 Oct 2025 22:26:16 +0000
ROA not after:            Sun 04 Oct 2026 22:31:16 +0000
asID:                     969
IP address blocks:        2606:7140:500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 17:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fe:21:85:cd:e4:5d:ec:2b:eb:62:22:e4:fd:a0:1a:54:dd:5c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Oct  5 22:26:16 2025 GMT
            Not After : Oct  4 22:31:16 2026 GMT
        Subject: CN=6400D1FFFD3186E49EE2647B6A8F5FEBDF3B2194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:97:04:c4:33:dd:86:db:b8:77:f2:13:d2:
                    64:60:8c:b2:54:b0:5f:4b:5c:d8:90:b1:f9:2a:39:
                    cb:8e:58:7f:da:ee:a2:8d:74:a4:b0:01:25:07:52:
                    0c:66:fd:04:54:b5:65:8e:a4:b0:f8:28:f2:8d:0b:
                    e3:c8:bf:99:fd:ca:04:bd:ce:db:c0:ab:ce:df:8c:
                    c7:d9:df:a5:a1:cd:52:93:13:ff:e6:4e:c3:cd:c6:
                    28:14:53:6f:03:13:c2:f1:c9:40:39:d7:21:02:32:
                    e6:92:96:60:f3:34:b2:ea:39:9a:44:12:04:7a:2e:
                    c2:41:0a:55:6a:5a:1e:28:ea:64:0d:75:6c:6c:3c:
                    63:43:ce:02:aa:99:3b:0e:fe:63:9d:77:9b:7a:11:
                    d3:9d:cd:c0:25:41:72:a9:7a:5e:b4:46:2c:94:94:
                    f9:d9:1a:4b:2c:7b:20:16:ca:74:15:bf:a3:2d:e2:
                    f0:cc:e9:bc:42:e3:11:ee:7f:dc:e5:51:6b:d1:70:
                    39:41:73:2d:c5:b6:c5:16:fa:23:35:7b:23:03:b4:
                    6e:d1:a5:f9:9d:91:f7:35:81:d6:a1:9e:9f:18:96:
                    de:48:62:b6:06:88:50:db:65:04:a3:4d:96:63:15:
                    ed:c4:08:53:ea:56:3c:45:50:04:00:cc:fb:89:b3:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:00:D1:FF:FD:31:86:E4:9E:E2:64:7B:6A:8F:5F:EB:DF:3B:21:94
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7140:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:16:5a:28:0b:e9:c4:f5:1c:28:fc:db:0f:f0:f4:db:9c:9e:
         cd:32:81:a4:9b:4e:91:44:75:69:e6:e4:3b:03:62:95:8a:48:
         de:a1:3f:8d:d8:b5:95:dd:50:d4:61:cf:e6:07:b9:41:05:2f:
         05:a7:a6:88:61:b9:8b:0a:c2:40:d5:73:d0:2c:4d:4a:b0:82:
         e1:53:bb:db:ad:d8:4a:28:b9:9a:6d:4c:8f:ab:79:03:52:15:
         64:c1:7b:f4:11:47:0d:ce:0d:6e:17:27:81:40:71:97:06:1a:
         a7:5c:a1:ba:a9:9e:89:c7:7d:88:14:39:5c:a3:fd:8e:50:7a:
         10:a2:7e:06:5e:ca:db:58:89:34:2d:92:84:2e:ab:4c:f8:8e:
         cb:e9:e0:d7:4d:45:4c:50:f7:bf:f4:80:31:92:69:51:3a:80:
         41:dd:59:63:43:99:6e:0a:2e:f9:52:af:ce:95:01:ba:62:e7:
         2c:a8:68:7f:c6:29:f7:19:30:2b:2b:48:a0:88:34:f6:21:4e:
         2f:77:f6:29:56:86:1f:1b:00:b0:d9:c9:11:f9:78:27:94:bd:
         05:1f:c3:17:8a:49:e2:db:e6:eb:4a:82:c9:cc:c4:f5:4c:4a:
         f9:88:73:40:e7:9f:d3:8a:28:bb:6f:e9:cd:5d:29:ad:f5:20:
         b5:3c:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:29 2025 by rpki-client