Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/36342e3233342e3233322e302f32322d3234203d3e203537363935.roa
File:                     36342e3233342e3233322e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier:          pXlA6IujzueOQJ+ksY87811uI03OlxKTP8pfFhLik18=
Subject key identifier:   71:47:98:7C:CF:BB:89:4A:BF:D5:6F:43:A1:0D:39:C3:0A:5C:80:C7
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       6E6E2BF8A8824B654A3F865420842BB3F786FE9D
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/36342e3233342e3233322e302f32322d3234203d3e203537363935.roa
Signing time:             Sun 05 Oct 2025 22:31:12 +0000
ROA not before:           Sun 05 Oct 2025 22:26:12 +0000
ROA not after:            Sun 04 Oct 2026 22:31:12 +0000
asID:                     57695
IP address blocks:        64.234.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6e:2b:f8:a8:82:4b:65:4a:3f:86:54:20:84:2b:b3:f7:86:fe:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Oct  5 22:26:12 2025 GMT
            Not After : Oct  4 22:31:12 2026 GMT
        Subject: CN=7147987CCFBB894ABFD56F43A10D39C30A5C80C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:ba:a0:2f:41:2b:d9:95:bf:a6:5d:0e:22:
                    aa:7a:6b:be:3e:78:58:4d:b6:a7:31:8e:54:61:5f:
                    90:cc:ee:da:af:f4:81:1c:15:f5:64:57:99:86:0d:
                    52:89:91:83:ae:bf:00:68:4b:b5:34:0c:f0:b5:34:
                    72:ba:92:66:30:35:39:0d:73:7a:d9:88:94:d4:8a:
                    1a:f9:1d:28:a2:a1:11:c7:f5:af:01:81:f2:8a:bd:
                    86:11:03:93:40:1b:bb:2a:51:72:5a:67:f1:90:50:
                    b5:72:dd:04:3d:60:8d:1c:12:da:eb:17:48:db:de:
                    35:24:f4:00:2c:9c:a6:16:56:10:4f:4f:52:bd:e8:
                    42:e3:be:8e:7f:62:f5:6f:05:f3:c0:04:ec:65:bb:
                    b3:21:b9:ef:bb:0c:6e:cd:0e:a0:23:cf:78:8f:8b:
                    e6:59:e7:60:64:3a:a1:b3:6f:a3:7f:30:11:88:9c:
                    0e:e5:8b:bb:88:64:fe:8d:70:60:10:f2:c6:64:a8:
                    bd:4c:19:b2:16:ec:7f:c9:6c:92:18:75:0a:37:d0:
                    46:fe:ef:f5:6f:5e:62:47:c4:e2:3b:f8:f2:21:89:
                    48:86:d9:0c:ce:0a:36:15:79:cb:f6:0b:ef:fa:bb:
                    92:6f:af:85:b8:f6:79:ab:cb:d3:82:19:cc:fd:32:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:47:98:7C:CF:BB:89:4A:BF:D5:6F:43:A1:0D:39:C3:0A:5C:80:C7
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/36342e3233342e3233322e302f32322d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.234.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:c0:04:69:8d:9d:51:4a:36:1d:5c:58:6c:cd:3c:2b:58:
         fb:1f:ee:52:cf:7e:f4:be:d0:78:77:36:04:fe:ed:9e:b3:fb:
         2c:0c:9f:b0:0a:ab:9b:99:a1:ad:90:63:6d:c7:7e:e4:6a:30:
         62:f3:71:71:fd:d5:78:15:03:59:ac:6a:d1:53:bf:fc:31:f2:
         d0:a2:25:7d:b1:76:33:51:d4:81:23:3b:3a:2d:2e:b0:aa:01:
         6d:f6:b9:58:04:05:94:a9:41:a5:59:49:15:1b:2a:d0:15:19:
         d1:3e:46:ab:fa:77:73:ec:8c:f3:30:e6:f2:1a:99:e8:85:04:
         12:57:a7:9f:cd:50:40:b8:ed:a5:c6:e2:3f:72:3e:29:9a:42:
         33:60:2f:51:1e:ca:77:09:4e:af:b6:23:c5:20:61:01:13:39:
         60:83:98:56:8c:19:76:34:e6:d5:7e:21:b9:25:70:ab:41:62:
         96:67:55:1a:40:22:c1:30:30:36:f2:65:81:10:3e:c4:a8:c3:
         57:8d:a2:b3:92:12:9e:0d:e2:db:97:e0:3e:cc:15:c6:fd:1a:
         e6:20:27:52:f0:b1:62:75:85:fd:dc:c3:a0:aa:ad:83:d5:5f:
         40:36:f3:51:0e:1e:72:7a:af:92:bf:da:cb:64:76:42:59:65:
         cc:7b:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:32:34 2025 by rpki-client