Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS23961.roa
File:                     AS23961.roa (raw, json)
Hash identifier:          oFgv+Eky3575msiU/4rVkzowo8Tj8XanDRihOSQzlNo=
Subject key identifier:   8A:EF:0D:B2:D0:26:A8:20:09:0E:CD:20:9A:8D:C7:36:AA:9C:D3:23
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       45D2793CEE1202E15ADD44D26F336E1AD5858C40
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS23961.roa
Signing time:             Thu 11 Jun 2026 19:31:38 +0000
ROA not before:           Thu 11 Jun 2026 19:26:38 +0000
ROA not after:            Thu 10 Jun 2027 19:31:38 +0000
asID:                     23961
IP address blocks:        45.11.104.0/22 maxlen: 24
                          45.11.104.0/23 maxlen: 24
                          45.150.240.0/22 maxlen: 24
                          45.150.242.0/23 maxlen: 24
                          188.244.96.0/23 maxlen: 24
                          194.156.162.0/23 maxlen: 24
                          2a0b:4341:b02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d2:79:3c:ee:12:02:e1:5a:dd:44:d2:6f:33:6e:1a:d5:85:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Jun 11 19:26:38 2026 GMT
            Not After : Jun 10 19:31:38 2027 GMT
        Subject: CN=8AEF0DB2D026A820090ECD209A8DC736AA9CD323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9f:3d:84:82:28:d2:6c:1b:e4:21:49:5f:9a:
                    67:c2:99:0e:cd:2f:2c:41:a5:96:ea:09:c8:1d:19:
                    68:9e:d6:d7:2a:97:86:a4:a1:f2:97:af:f9:6b:bd:
                    7c:e9:cc:3f:08:56:ca:f9:d8:2b:79:51:d7:e5:c0:
                    cd:ad:03:8e:23:c5:91:ed:2d:67:26:1f:1e:f1:0d:
                    7d:48:ff:37:0f:c5:9f:c7:18:ac:a1:89:d5:3f:fd:
                    1d:f6:ce:62:bf:f4:91:ca:79:19:31:d4:9a:0d:67:
                    68:fd:c4:a9:3b:4c:47:6f:f1:fe:a1:e9:3e:39:d1:
                    70:8d:35:cd:ab:5a:9c:ff:a2:14:42:7d:37:9f:6f:
                    1c:d5:19:1a:6e:df:72:b2:18:6f:a2:2c:ea:e6:16:
                    22:09:9e:cb:38:6e:6d:8c:a3:20:62:73:5d:32:cb:
                    43:70:d0:68:13:3c:8b:2c:2f:32:09:3e:02:56:b2:
                    c5:96:a1:ca:0f:e7:9c:6d:b0:f3:f2:bd:48:1b:59:
                    d2:39:45:a6:2b:02:42:a9:1d:0b:37:5b:2f:75:cf:
                    2b:cd:c2:c4:10:2d:6e:16:5f:a7:0b:bd:1b:bd:48:
                    ee:82:22:25:c2:9c:cf:0d:51:af:d0:c9:fb:d3:75:
                    47:e4:47:19:44:28:76:56:bd:b6:e2:76:6b:62:b7:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EF:0D:B2:D0:26:A8:20:09:0E:CD:20:9A:8D:C7:36:AA:9C:D3:23
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS23961.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.104.0/22
                  45.150.240.0/22
                  188.244.96.0/23
                  194.156.162.0/23
                IPv6:
                  2a0b:4341:b02::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:bc:c4:d4:b6:2b:7b:a5:9f:b6:77:64:6c:3b:51:49:4f:8d:
         1c:22:2b:9b:e1:d2:f5:20:06:de:5e:8e:10:3c:32:27:4e:d6:
         05:13:fc:30:01:8b:2d:07:fa:97:99:ab:11:b0:09:56:69:ed:
         a0:fa:ba:e8:d9:58:ec:f9:16:ca:75:79:ff:5f:f0:ca:1d:58:
         c1:1c:e6:f5:d5:56:1e:f2:94:2d:17:8d:53:b9:dd:9f:73:ec:
         5d:26:0e:18:47:78:ad:53:9a:63:de:ed:43:77:43:a6:9a:fb:
         44:19:63:1a:7e:e5:60:da:3d:56:10:f6:8a:74:9d:e4:ba:33:
         01:61:ef:2a:bb:df:7d:b4:5e:a5:ec:21:90:b0:ca:bb:c9:5d:
         24:77:d6:61:fd:2b:db:dc:93:a4:28:02:53:85:1f:ea:e1:a1:
         08:46:7d:fa:f9:d7:aa:5f:a7:25:e9:76:7d:6d:cc:48:9c:7b:
         bb:ff:78:e0:3d:48:e4:91:07:cd:97:0c:74:78:48:60:d2:e6:
         7f:ed:14:23:77:78:b6:48:4c:8f:11:52:98:19:17:9f:66:a3:
         db:1b:fc:f3:1c:6c:07:20:4f:61:37:a4:91:ae:75:c6:07:76:
         76:ce:b3:3b:9e:40:13:ac:18:1b:d4:ff:de:09:ea:32:d6:f9:
         0f:30:04:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----