Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/36352e39372e35322e302f32322d3234203d3e20393137.roa
File:                     36352e39372e35322e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          eHQTLPnNvm5pCxlatjynTMAmiKQ36n7cMm3xx5QVwdY=
Subject key identifier:   71:BB:A1:57:69:87:30:63:33:29:06:9F:17:78:A7:CB:68:CF:AE:69
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       29AE39887F60D4DA656A426A751B8DA9FA7A2C7E
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35322e302f32322d3234203d3e20393137.roa
Signing time:             Sun 05 Oct 2025 22:31:12 +0000
ROA not before:           Sun 05 Oct 2025 22:26:12 +0000
ROA not after:            Sun 04 Oct 2026 22:31:12 +0000
asID:                     917
IP address blocks:        65.97.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ae:39:88:7f:60:d4:da:65:6a:42:6a:75:1b:8d:a9:fa:7a:2c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Oct  5 22:26:12 2025 GMT
            Not After : Oct  4 22:31:12 2026 GMT
        Subject: CN=71BBA157698730633329069F1778A7CB68CFAE69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:97:9f:cc:65:ee:69:f3:79:bd:13:16:c4:
                    e4:23:1e:a8:17:0c:63:7c:d7:67:46:ad:a5:26:7a:
                    34:1a:f5:e8:af:c4:6c:2f:00:89:44:91:f8:8a:7e:
                    d8:71:9f:83:bd:74:ba:b0:64:44:97:7a:84:cb:4e:
                    68:6a:f9:39:6a:fa:46:d5:5e:94:42:04:f9:27:f4:
                    b6:c2:8d:94:e4:f4:41:3b:6e:31:db:a8:0a:1d:2d:
                    6d:3a:8b:8f:a6:cf:5f:c0:a1:18:d0:5c:d3:12:90:
                    32:ee:2c:d8:e8:e9:85:f7:f0:86:52:a7:73:24:8e:
                    ae:51:3c:31:5e:ed:cf:d7:5f:9c:7e:b6:be:54:eb:
                    b6:e1:d4:36:66:b7:b6:fc:1c:dd:d2:1b:15:44:38:
                    61:aa:45:f5:8b:25:45:fe:e8:d5:3d:4a:9b:06:ba:
                    a2:5f:0a:ff:21:c3:2f:61:fa:dc:31:1a:24:02:3b:
                    18:1b:67:4b:4c:68:d6:61:ac:12:db:15:0e:0c:1b:
                    93:0e:35:a3:2f:a1:62:72:a9:27:5f:40:03:be:ee:
                    1e:79:a9:00:bf:9a:ad:c6:79:0f:06:e4:2d:d4:b9:
                    2e:ed:ff:1b:9c:f3:1c:24:97:6f:22:6a:72:86:a1:
                    5a:8d:b8:9b:2f:9e:d0:88:ad:b3:19:08:85:15:26:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BB:A1:57:69:87:30:63:33:29:06:9F:17:78:A7:CB:68:CF:AE:69
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35322e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.97.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:df:8e:a1:9c:68:46:a0:7b:db:90:8a:3e:3e:27:27:e0:c3:
         ba:12:c7:e1:0f:f2:e1:d0:a1:d0:84:b4:fc:8d:31:ae:d1:73:
         06:ca:62:51:c3:b3:e4:b7:a5:9e:ae:e0:ce:40:d6:85:3a:23:
         93:1e:77:62:0a:e6:96:c3:86:48:a0:de:40:29:65:c7:38:7a:
         2c:d5:48:f8:e8:38:f7:2d:16:ce:07:51:c8:7e:e8:6e:10:0e:
         1b:f8:be:db:7f:b0:3f:98:0f:e4:29:f7:42:11:97:dd:1e:19:
         41:22:3e:19:f3:7d:7f:aa:e4:80:f6:9a:98:c2:9f:30:2b:ec:
         68:eb:93:31:89:ba:67:2a:b1:6c:5d:59:94:1a:d1:d8:c7:8d:
         3f:da:f2:55:17:bf:2d:bd:f1:89:a7:bd:83:9e:8d:5c:71:1c:
         73:34:2d:7d:6f:a8:06:18:7d:9b:6a:cb:b7:89:8a:a9:ac:b9:
         21:f3:c1:66:ba:5e:1d:a7:7f:c3:a2:75:c5:37:b4:da:ce:2f:
         46:29:bf:c5:ca:96:ee:1c:0e:e6:d7:b1:9d:f2:b1:53:d0:77:
         e6:7c:a1:62:8a:53:45:f5:ec:53:87:b5:59:9b:92:41:e2:e3:
         1f:b4:f7:c8:20:04:0b:29:75:7a:52:35:83:b4:0c:56:1d:82:
         e0:95:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:57:01 2025 by rpki-client