Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS48883.roa
File:                     AS48883.roa (raw, json)
Hash identifier:          zEWMCl0l8xpUDCZ/0OQeXzvbFt7USIq3uIuNpoBVyuI=
Subject key identifier:   EF:4C:27:24:56:40:A6:18:A6:89:90:91:CC:9D:5A:FC:94:E6:A5:FF
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       4636EB90233A7B72511D0CA64D2D7D89F0D3A2C3
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS48883.roa
Signing time:             Wed 23 Sep 2026 21:48:06 +0000
ROA not before:           Wed 23 Sep 2026 21:43:06 +0000
ROA not after:            Wed 22 Sep 2027 21:48:06 +0000
asID:                     48883
IP address blocks:        2a0b:4340:1500::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:36:eb:90:23:3a:7b:72:51:1d:0c:a6:4d:2d:7d:89:f0:d3:a2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Sep 23 21:43:06 2026 GMT
            Not After : Sep 22 21:48:06 2027 GMT
        Subject: CN=EF4C27245640A618A6899091CC9D5AFC94E6A5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:e7:e2:a3:9b:c4:61:25:54:f3:d0:67:fa:
                    d8:80:37:e3:31:f6:0f:3e:de:67:54:a4:6a:75:e2:
                    30:56:c4:6d:cb:6b:ef:3d:70:5d:ef:df:32:8b:2c:
                    f9:05:b9:0b:ef:f6:74:34:ca:39:22:40:58:dd:52:
                    b3:ca:39:85:c0:10:e5:6e:af:04:43:c2:c4:0e:f9:
                    d2:8e:d0:b2:b6:95:b2:54:38:48:6b:1d:58:58:c7:
                    cb:ba:ec:f4:5a:61:df:ac:44:fd:d1:e2:20:55:91:
                    2c:f2:12:6f:db:6b:e3:ff:6e:b8:7c:46:df:60:56:
                    0f:04:a7:3b:d0:38:06:b5:8e:c5:44:dd:07:41:58:
                    cc:e5:1b:fa:c9:e5:26:a3:a1:c2:58:11:e8:25:ce:
                    d4:ef:24:df:57:91:55:2c:15:3c:1c:46:b9:44:3d:
                    b3:20:d9:f1:a2:28:3f:75:2b:d0:77:13:ee:59:e5:
                    1b:80:0c:5a:12:ef:4c:ae:40:2c:13:af:7e:b4:8a:
                    d1:da:df:27:93:aa:e6:e5:8f:5e:f3:6e:5a:94:ec:
                    c9:5f:e7:76:c0:0f:f8:35:05:2b:c5:f2:86:6d:65:
                    14:f2:5e:9d:c8:c7:a1:dd:7f:93:e4:b3:08:2e:6d:
                    29:4c:2a:a6:44:3a:2c:09:51:cd:f0:61:1d:59:fe:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:27:24:56:40:A6:18:A6:89:90:91:CC:9D:5A:FC:94:E6:A5:FF
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS48883.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:1500::/44

    Signature Algorithm: sha256WithRSAEncryption
         1b:eb:5e:4f:45:64:c3:e1:eb:0b:ee:1b:44:34:56:b0:ad:11:
         78:9f:65:da:1a:8b:7a:98:d3:6d:6b:32:54:80:aa:68:5f:d3:
         15:60:a6:a9:26:fd:83:d5:f7:5a:6e:d9:9f:3a:9e:78:f4:35:
         51:ac:2a:79:52:44:64:38:46:80:7e:b4:ce:b0:c9:9b:62:03:
         86:fb:76:51:a1:66:7c:a0:3e:9f:a6:bb:77:34:25:50:4e:63:
         c6:0c:7c:6e:3f:b5:15:67:49:4b:c5:18:98:3d:52:8a:52:b3:
         60:16:4e:83:96:c2:4a:e7:21:9d:62:90:6f:ac:58:8f:a1:2d:
         9b:05:37:d9:d7:3a:d3:2b:a0:d9:5e:5b:4e:b4:16:2c:46:31:
         a1:16:57:0b:a9:87:fc:2b:de:37:10:d4:d1:3c:b3:fb:d5:e6:
         3c:0c:20:97:e4:79:5a:9a:ee:55:27:ec:af:fa:a0:46:16:27:
         29:52:07:8a:dd:bd:bf:92:da:b1:de:92:3b:d0:e5:b4:b2:6b:
         10:86:f7:97:78:d6:ae:15:02:57:8c:f0:ae:5d:c3:fc:9e:c5:
         99:b6:53:c6:17:8c:23:fa:0d:36:6b:11:50:11:62:bb:d8:e1:
         ce:4f:aa:a3:ff:69:be:76:7c:b6:71:e0:a0:d8:bb:e5:48:55:
         85:49:46:ef
-----BEGIN CERTIFICATE-----
MIIEnjCCA4agAwIBAgIURjbrkCM6e3JRHQymTS19ifDTosMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yNjA5MjMyMTQzMDZaFw0yNzA5MjIyMTQ4MDZaMDMxMTAvBgNV
BAMTKEVGNEMyNzI0NTY0MEE2MThBNjg5OTA5MUNDOUQ1QUZDOTRFNkE1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6Ofio5vEYSVU89Bn+tiAN+Mx
9g8+3mdUpGp14jBWxG3La+89cF3v3zKLLPkFuQvv9nQ0yjkiQFjdUrPKOYXAEOVu
rwRDwsQO+dKO0LK2lbJUOEhrHVhYx8u67PRaYd+sRP3R4iBVkSzyEm/ba+P/brh8
Rt9gVg8EpzvQOAa1jsVE3QdBWMzlG/rJ5SajocJYEeglztTvJN9XkVUsFTwcRrlE
PbMg2fGiKD91K9B3E+5Z5RuADFoS70yuQCwTr360itHa3yeTqublj17zblqU7Mlf
53bAD/g1BSvF8oZtZRTyXp3Ix6Hdf5PkswgubSlMKqZEOiwJUc3wYR1Z/qCNAgMB
AAGjggGoMIIBpDAdBgNVHQ4EFgQU70wnJFZAphimiZCRzJ1a/JTmpf8wHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEsGCCsGAQUFBwELBD8wPTA7BggrBgEFBQcwC4YvcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVM0ODg4My5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoLQ0AVADAN
BgkqhkiG9w0BAQsFAAOCAQEAG+teT0Vkw+HrC+4bRDRWsK0ReJ9l2hqLepjTbWsy
VICqaF/TFWCmqSb9g9X3Wm7ZnzqeePQ1UawqeVJEZDhGgH60zrDJm2IDhvt2UaFm
fKA+n6a7dzQlUE5jxgx8bj+1FWdJS8UYmD1SilKzYBZOg5bCSuchnWKQb6xYj6Et
mwU32dc60yug2V5bTrQWLEYxoRZXC6mH/CveNxDU0Tyz+9XmPAwgl+R5WpruVSfs
r/qgRhYnKVIHit29v5Lasd6SO9DltLJrEIb3l3jWrhUCV4zwrl3D/J7FmbZTxheM
I/oNNmsRUBFiu9jhzk+qo/9pvnZ8tnHgoNi75UhVhUlG7w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:20 2026 by rpki-client