Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/36342e3233342e3233322e302f32322d3234203d3e20393137.roa
File:                     36342e3233342e3233322e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          Lq1xrxZ/13gLYvOMLvN+WkQml8ixh8tk0xQ7TgbqchQ=
Subject key identifier:   5B:C6:09:BF:38:16:4D:BF:52:96:22:8D:C3:84:C5:62:D0:FD:E7:C8
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       12F8D92757BBCD9390CFDC22BBD27420E2699DB6
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/36342e3233342e3233322e302f32322d3234203d3e20393137.roa
Signing time:             Sun 05 Oct 2025 22:31:13 +0000
ROA not before:           Sun 05 Oct 2025 22:26:13 +0000
ROA not after:            Sun 04 Oct 2026 22:31:13 +0000
asID:                     917
IP address blocks:        64.234.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f8:d9:27:57:bb:cd:93:90:cf:dc:22:bb:d2:74:20:e2:69:9d:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Oct  5 22:26:13 2025 GMT
            Not After : Oct  4 22:31:13 2026 GMT
        Subject: CN=5BC609BF38164DBF5296228DC384C562D0FDE7C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f3:80:84:19:f5:dd:3f:e3:4c:1c:e9:d0:bb:
                    aa:2d:a6:0a:3f:2e:f8:c0:05:c6:3f:ac:47:01:ee:
                    b5:58:4d:8d:3d:81:89:33:b2:d4:65:32:81:9d:64:
                    f9:f0:50:b6:16:e4:3d:17:cb:b4:af:98:53:76:96:
                    d7:c7:22:27:b9:39:e1:2e:3a:01:67:7b:d0:30:d6:
                    61:8e:62:35:f1:d9:1c:64:52:c2:f9:e0:c8:50:15:
                    ae:55:ae:40:53:a3:db:8d:79:b4:00:5a:d5:81:6d:
                    ea:40:e2:9c:e2:c0:1b:bb:93:71:30:97:71:5b:c1:
                    1f:1e:8d:fe:87:dc:f9:78:bf:34:42:a9:8a:90:df:
                    56:5b:f6:14:7b:c4:4f:57:a3:af:88:f5:c3:1f:2e:
                    8a:51:f5:07:e7:03:ca:ac:8e:d1:c4:48:73:a1:13:
                    5a:24:62:65:22:20:52:72:08:b8:f8:b9:ae:11:5a:
                    a1:4e:1a:da:25:cf:70:86:72:be:3b:2d:01:f7:59:
                    6a:35:03:dc:a5:17:d5:ac:f8:a5:c5:f9:d3:5e:c9:
                    fe:84:ce:81:77:c3:6c:1b:e4:b9:04:4e:e1:38:44:
                    0c:cd:84:ce:84:5b:fc:69:97:19:65:04:36:80:32:
                    dc:a3:87:d0:a8:71:55:c2:47:c2:dc:cf:2e:6c:9f:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C6:09:BF:38:16:4D:BF:52:96:22:8D:C3:84:C5:62:D0:FD:E7:C8
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/36342e3233342e3233322e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.234.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:01:1a:7b:43:83:81:4c:eb:84:4f:65:cd:0d:bc:a7:a4:4d:
         93:f9:8d:e8:54:ea:74:bb:0f:3c:8d:57:69:e1:e0:1d:ee:c0:
         51:80:51:05:5b:8b:c5:17:81:7b:df:e6:f3:db:e9:80:a5:ed:
         68:13:61:6d:78:83:d2:03:c3:c1:58:70:4f:c9:f1:db:e1:1b:
         cd:95:1c:26:f9:ce:a8:f7:a1:82:e5:e9:6f:54:73:1d:5c:b2:
         88:7b:6f:37:be:44:16:da:9e:86:ee:05:ee:a8:a5:e9:2f:34:
         7e:e7:ca:55:f7:97:85:a4:bb:9c:61:ca:22:b6:55:d2:ec:70:
         f1:f1:74:c6:0c:58:16:2a:2e:ea:b0:7d:d1:c6:da:8b:72:22:
         d0:49:36:f8:7e:72:93:3f:fe:8c:36:da:eb:17:28:4b:86:4e:
         d5:d1:d8:49:c4:4b:3f:a7:75:5f:64:71:2b:2f:0f:c9:0f:00:
         e8:1f:be:2f:36:fb:c4:27:a4:2f:db:f0:b6:3c:cc:bc:e5:87:
         80:95:b8:71:50:e5:14:b7:e3:8c:f1:e2:58:4e:18:a2:4f:19:
         f2:13:a5:5a:92:51:04:46:45:6c:b1:b4:ff:91:77:eb:dd:98:
         91:f3:21:16:9f:10:9a:55:45:a0:bc:a3:65:ab:45:5b:39:6c:
         59:56:df:db
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUEvjZJ1e7zZOQz9wiu9J0IOJpnbYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGM2YmU4ODJmM2ZiNjFjMmFhYWE0ZmFj
YmIzZmFkNzJmMDk2YmU3ZDIwHhcNMjUxMDA1MjIyNjEzWhcNMjYxMDA0MjIzMTEz
WjAzMTEwLwYDVQQDEyg1QkM2MDlCRjM4MTY0REJGNTI5NjIyOERDMzg0QzU2MkQw
RkRFN0M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fOAhBn13T/j
TBzp0LuqLaYKPy74wAXGP6xHAe61WE2NPYGJM7LUZTKBnWT58FC2FuQ9F8u0r5hT
dpbXxyInuTnhLjoBZ3vQMNZhjmI18dkcZFLC+eDIUBWuVa5AU6PbjXm0AFrVgW3q
QOKc4sAbu5NxMJdxW8EfHo3+h9z5eL80QqmKkN9WW/YUe8RPV6OviPXDHy6KUfUH
5wPKrI7RxEhzoRNaJGJlIiBScgi4+LmuEVqhThraJc9whnK+Oy0B91lqNQPcpRfV
rPilxfnTXsn+hM6Bd8NsG+S5BE7hOEQMzYTOhFv8aZcZZQQ2gDLco4fQqHFVwkfC
3M8ubJ9TQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFvGCb84Fk2/UpYijcOExWLQ
/efIMB8GA1UdIwQYMBaAFCeQTP4EFUfFbyC6Wxuze8M+ihPTMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8yNzkwNENGRTA0MTU0N0M1NkYyMEJBNUIxQkIzN0JDMzNFOEEx
M0QzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRjNmJlODgyZjNmYjYxYzJhYWFhNGZhY2JiM2ZhZDcy
ZjA5NmJlN2QyLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5j
Oi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8xLzM2MzQyZTMyMzMzNDJlMzIz
MzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzkzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQOro
MA0GCSqGSIb3DQEBCwUAA4IBAQC1ARp7Q4OBTOuET2XNDbynpE2T+Y3oVOp0uw88
jVdp4eAd7sBRgFEFW4vFF4F73+bz2+mApe1oE2FteIPSA8PBWHBPyfHb4RvNlRwm
+c6o96GC5elvVHMdXLKIe283vkQW2p6G7gXuqKXpLzR+58pV95eFpLucYcoitlXS
7HDx8XTGDFgWKi7qsH3RxtqLciLQSTb4fnKTP/6MNtrrFyhLhk7V0dhJxEs/p3Vf
ZHErLw/JDwDoH74vNvvEJ6Qv2/C2PMy85YeAlbhxUOUUt+OM8eJYThiiTxnyE6Va
klEERkVssbT/kXfr3ZiR8yEWnxCaVUWgvKNlq0VbOWxZVt/b
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:10:00 2025 by rpki-client