Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/2/AS57578.roa
File:                     AS57578.roa (raw, json)
Hash identifier:          vXU+ZsvL7VjgrmMngH5T78l2pHaQlwnnV+rbgldM5so=
Subject key identifier:   39:F4:40:3C:37:64:E8:1B:1F:D5:2E:0F:9F:19:EA:47:66:E7:07:EC
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       404F44496FC3AD4EF7150540009927B0D4D9A6BF
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS57578.roa
Signing time:             Wed 23 Sep 2026 21:48:05 +0000
ROA not before:           Wed 23 Sep 2026 21:43:05 +0000
ROA not after:            Wed 22 Sep 2027 21:48:05 +0000
asID:                     57578
IP address blocks:        45.131.68.0/22 maxlen: 24
                          45.142.246.0/24 maxlen: 24
                          185.209.84.0/23 maxlen: 24
                          2a0b:4342:1a20::/44 maxlen: 48
                          2a0b:4342:2000::/36 maxlen: 48
                          2a0b:4342:4000::/36 maxlen: 48
                          2a0e:5c40::/29 maxlen: 40
                          2a0e:5c43::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4f:44:49:6f:c3:ad:4e:f7:15:05:40:00:99:27:b0:d4:d9:a6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Sep 23 21:43:05 2026 GMT
            Not After : Sep 22 21:48:05 2027 GMT
        Subject: CN=39F4403C3764E81B1FD52E0F9F19EA4766E707EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:fa:5e:e8:df:86:a9:52:c8:31:b1:89:ef:
                    07:71:7b:c3:85:c4:d1:52:27:90:a0:ae:58:4e:68:
                    07:73:d3:db:f7:23:62:64:e8:23:40:7a:a4:0f:2d:
                    e1:ce:5f:17:73:d1:cc:ee:74:a3:f3:98:5e:1a:91:
                    60:68:10:8e:46:fb:3a:96:ee:1a:51:de:51:9d:3f:
                    59:71:66:49:30:08:d0:dc:bb:52:31:66:b6:4e:34:
                    ea:5e:3b:60:f9:07:99:d8:0d:2c:c2:fe:62:63:af:
                    95:f2:c0:9b:5e:a4:c1:c2:ba:d2:ed:da:9e:4b:06:
                    0e:74:5f:e5:11:a9:cd:04:ff:58:df:b2:1f:5b:dc:
                    de:93:2d:e4:9a:8c:0d:41:bd:57:49:8f:67:c0:31:
                    3b:2e:10:de:98:77:d2:fa:6c:34:ea:39:49:0b:6f:
                    1d:15:fa:bf:24:87:b7:72:4d:98:ef:31:4b:f4:d2:
                    28:33:ce:22:26:5c:26:ef:b3:01:e0:c8:29:38:67:
                    72:4e:e9:7a:09:20:c1:4a:a7:46:80:35:88:78:a4:
                    31:9d:54:9c:66:e7:49:20:e9:80:98:c0:be:7b:7c:
                    56:7d:81:fb:83:4c:d9:21:03:a1:07:b5:b5:44:b1:
                    05:27:0f:60:a9:3c:b3:f2:4d:af:56:f5:6d:9a:ba:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F4:40:3C:37:64:E8:1B:1F:D5:2E:0F:9F:19:EA:47:66:E7:07:EC
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS57578.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.68.0/22
                  45.142.246.0/24
                  185.209.84.0/23
                IPv6:
                  2a0b:4342:1a20::/44
                  2a0b:4342:2000::/36
                  2a0b:4342:4000::/36
                  2a0e:5c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:9b:27:f8:0b:df:61:25:aa:53:f5:e6:48:0b:42:22:e5:
         ee:1f:91:20:1b:e6:a1:bb:17:88:78:0e:df:2b:b8:c0:fb:1e:
         1e:9e:b4:fe:bc:f9:e3:0b:06:09:c9:ed:6c:95:1b:25:8f:82:
         79:a7:06:c7:f9:47:95:84:a4:9a:15:2d:3c:70:db:ee:2c:03:
         09:30:5f:10:b9:a1:e6:65:09:c3:60:ca:a1:5d:70:d3:6e:f8:
         5f:e8:28:bf:ef:19:9e:5e:3b:d6:56:32:61:7f:f3:a4:ea:fb:
         bd:29:42:1b:b9:72:86:28:de:dd:21:3e:dd:48:69:b5:fe:7a:
         87:93:f9:b1:a2:93:9b:43:ff:54:5e:cf:88:9a:74:9d:e8:c1:
         67:85:75:80:68:89:a9:a4:9c:a5:cd:97:a6:d7:82:70:11:5f:
         40:e8:de:0f:23:cc:6c:c0:5a:57:2d:05:11:d4:a5:39:f0:9e:
         d4:d4:f2:ab:96:83:f2:cc:60:10:4d:9f:9f:85:1c:2f:81:3d:
         ce:0f:3a:27:e4:67:ec:88:a4:33:78:32:71:39:bb:17:e8:5d:
         a4:3f:b1:4c:91:32:aa:da:a0:92:ac:66:99:33:d7:3f:d2:1c:
         93:1f:d2:43:22:59:a6:f0:0d:2d:65:2c:29:35:ed:13:cd:5b:
         2c:a3:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:50:28 2026 by rpki-client