Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS205618.roa
File:                     AS205618.roa (raw, json)
Hash identifier:          ji0+G18ncVetRIMJCm/W/BMGbYqP+46oHDAgOZLr2vc=
Subject key identifier:   32:4C:B0:B7:F1:5D:5F:D6:40:07:F8:DC:BE:29:75:FB:FA:BC:A1:35
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       50FF6C30181DF7C6B35CE3785D3729FD1F9F386A
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS205618.roa
Signing time:             Wed 23 Sep 2026 21:48:03 +0000
ROA not before:           Wed 23 Sep 2026 21:43:03 +0000
ROA not after:            Wed 22 Sep 2027 21:48:03 +0000
asID:                     205618
IP address blocks:        2a0b:4340:70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ff:6c:30:18:1d:f7:c6:b3:5c:e3:78:5d:37:29:fd:1f:9f:38:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Sep 23 21:43:03 2026 GMT
            Not After : Sep 22 21:48:03 2027 GMT
        Subject: CN=324CB0B7F15D5FD64007F8DCBE2975FBFABCA135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:79:0a:b8:ab:d4:18:da:61:5a:98:22:c9:
                    68:95:18:ec:ec:31:bf:e6:fa:da:15:14:e2:fa:ad:
                    bd:66:a3:04:1b:3e:cd:a4:b5:c4:1e:18:7c:0e:50:
                    de:1e:68:af:14:13:53:8b:4e:1e:20:ff:14:a0:21:
                    60:0e:6e:78:bc:e1:7a:0e:52:fb:00:14:a2:cd:80:
                    a7:e4:f2:f1:d0:98:fa:17:a4:79:4a:d7:46:73:ec:
                    88:a3:78:e0:8f:4a:57:ae:3c:95:11:d0:a6:a1:7e:
                    cc:3b:4d:95:21:38:3f:5c:64:f4:7b:eb:98:0b:a2:
                    89:75:16:ca:9c:34:05:0e:de:3a:0c:08:75:80:ea:
                    35:b8:5b:1b:95:ad:4d:1e:67:85:ce:19:6c:14:fd:
                    c2:8d:ea:7d:4d:e2:35:b0:26:e0:ec:a5:9d:be:d0:
                    95:fe:e7:1e:ce:f8:4e:84:3c:1f:e1:a9:10:e9:5d:
                    df:21:f6:ca:51:26:08:83:3b:c4:ed:23:e6:e8:75:
                    b5:26:89:87:4d:a6:25:67:fb:16:c2:14:7f:50:4c:
                    0b:fd:71:33:f7:ef:a0:36:61:f1:fe:a1:4d:05:d5:
                    1c:ef:b3:1b:50:26:77:73:ae:70:68:ea:a5:a1:de:
                    17:3f:07:4e:31:aa:65:aa:b7:bb:b8:da:52:fa:f1:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4C:B0:B7:F1:5D:5F:D6:40:07:F8:DC:BE:29:75:FB:FA:BC:A1:35
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:70::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:af:30:ef:fd:9d:fd:66:8a:79:3a:4d:1d:d4:f6:0d:97:aa:
         ec:3f:f5:50:e4:7a:fe:78:9f:e7:7d:fa:78:57:b7:fc:96:85:
         dd:2a:7e:a9:06:d6:96:fd:54:a9:b7:0d:57:8d:9f:7f:a5:f1:
         2d:8f:f7:36:47:f1:53:4c:5e:24:77:3f:e7:09:b4:19:6a:4e:
         5c:d0:bc:a9:ae:48:d8:40:bd:e7:27:79:ad:6f:3c:2c:0a:7e:
         8d:8f:a6:7a:76:91:55:13:3a:c8:96:05:fd:72:ce:dc:d0:ff:
         60:42:05:4e:6c:a7:f0:96:24:88:36:52:54:f9:92:a9:52:59:
         a9:99:b6:3d:33:18:5b:e9:ce:7b:a1:a4:e2:87:eb:2c:7e:c5:
         bd:11:01:77:56:ae:d6:e9:1b:9d:f7:98:d2:95:83:7e:18:0b:
         c1:a9:37:59:9c:5d:75:9c:c1:eb:56:ec:3e:51:ca:ce:e9:50:
         d6:24:4f:57:9c:81:11:5e:55:cb:e4:29:8f:b3:4c:15:d1:e4:
         0d:bc:40:7d:30:fe:c8:24:70:86:b5:e7:1e:f8:7d:0a:f9:2c:
         7b:9d:34:9e:cd:1b:59:77:af:c5:e1:3a:d6:70:cd:59:2d:39:
         a5:8e:11:2b:5f:af:43:73:61:6f:dc:19:85:1a:6a:20:7c:5a:
         8a:d5:d7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:32 2026 by rpki-client