Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa
File:                     3230392e3230392e35362e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier:          DWOTdazcXByfRbomjJmsvZMHHFNxqLvS/+W4acj6jgE=
Subject key identifier:   97:AE:F9:A1:6A:92:20:98:52:45:14:36:A7:14:6F:6E:06:75:8C:45
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       528BF6A0E34806EC1862644C56D699EBFC1D22F4
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa
Signing time:             Sun 06 Sep 2026 22:47:52 +0000
ROA not before:           Sun 06 Sep 2026 22:42:52 +0000
ROA not after:            Sun 05 Sep 2027 22:47:52 +0000
asID:                     57695
IP address blocks:        209.209.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8b:f6:a0:e3:48:06:ec:18:62:64:4c:56:d6:99:eb:fc:1d:22:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Sep  6 22:42:52 2026 GMT
            Not After : Sep  5 22:47:52 2027 GMT
        Subject: CN=97AEF9A16A92209852451436A7146F6E06758C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:88:e8:5b:54:a4:3c:1f:b2:d3:34:b4:6f:
                    c8:e5:a1:a6:8d:61:be:c4:bc:da:a2:9d:48:16:6a:
                    b8:99:41:70:cd:32:3d:63:2f:84:a1:ef:9b:e8:a3:
                    10:98:a2:ab:2f:17:d0:e1:66:91:7a:34:d7:41:d6:
                    98:f9:ae:0a:16:66:c5:11:72:78:af:52:56:7f:f3:
                    16:fd:93:a2:76:b0:36:34:3c:5e:79:5a:c3:6a:9d:
                    54:84:fb:81:1a:c0:12:9a:8f:96:e2:a0:55:0f:67:
                    59:6c:98:af:8d:19:66:99:4f:ef:74:fe:75:b1:44:
                    29:8a:e8:e4:56:ed:50:09:3e:5a:87:b7:01:52:ef:
                    9b:c5:6b:2a:f4:4f:34:90:41:f5:fa:00:55:30:81:
                    8b:80:27:bd:13:4c:6f:bf:b5:1c:f9:44:c2:fb:a2:
                    28:53:83:e3:cd:48:12:b1:d3:9f:68:b4:14:5c:60:
                    ff:cd:c4:e8:ae:03:10:86:83:eb:e9:3f:fd:99:e0:
                    cc:51:e3:88:8e:e8:df:55:bc:89:4a:f3:33:f6:4d:
                    b1:de:19:97:7a:0c:ed:f9:34:ed:10:52:d8:6b:17:
                    e2:c9:cb:0c:58:44:0c:70:3a:c4:7c:31:40:a3:9e:
                    c5:f2:09:42:c4:29:17:1b:ee:7a:df:6b:b2:38:b1:
                    c1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AE:F9:A1:6A:92:20:98:52:45:14:36:A7:14:6F:6E:06:75:8C:45
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:42:88:07:26:b5:e6:7a:dc:d3:5d:e8:97:f3:22:eb:b6:80:
         d9:a7:9d:69:ad:61:f3:a3:ae:09:a8:be:fc:36:8e:7a:b5:1c:
         42:69:12:5d:2b:ce:c6:ed:55:f7:d8:7c:07:a5:4e:f0:61:93:
         51:39:18:72:f3:4f:0e:60:d9:cf:e8:9b:57:30:5a:8c:29:06:
         8b:32:35:fe:bc:b5:81:02:a1:21:57:31:af:c8:26:e0:14:c1:
         7c:79:50:65:4d:3c:99:72:4a:a2:3d:73:29:77:7a:c3:e6:b4:
         9b:0e:20:2f:c0:6d:7b:54:d2:d5:c7:52:ae:f2:f1:0f:72:f2:
         37:06:dc:4b:c0:a0:4d:bc:e0:72:c2:79:0f:55:e9:19:81:97:
         3e:b0:24:af:bb:0e:89:27:d4:03:5b:5a:82:76:00:ac:c3:5d:
         41:48:e5:25:f2:a8:41:5c:d4:b3:c5:d0:11:2f:82:10:81:f6:
         45:df:72:f5:1c:65:bf:09:fa:7c:cb:ff:2e:8d:ad:c4:40:0f:
         d1:be:4b:cc:c9:77:cd:67:f2:1e:76:f1:95:b7:27:15:0b:18:
         18:e7:05:8f:01:73:5e:52:1e:71:df:5c:06:7c:56:93:83:e1:
         eb:9e:0a:e5:b7:7d:86:a7:09:9a:4a:fd:5e:4f:75:0d:d1:e3:
         90:cc:8e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:23:13 2026 by rpki-client