Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
File:                     3230392e3230392e35362e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          iGHhYE5mYSFGxyahfArje0lc0otG49ZT4EVYEpKO+yE=
Subject key identifier:   89:C9:E0:57:83:3E:6A:89:81:B1:0C:7D:05:5E:C6:1E:96:F3:4E:B9
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       6055E669B0C75597CD4BACFFC86A1D23F6CE418F
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
Signing time:             Sun 06 Sep 2026 22:47:51 +0000
ROA not before:           Sun 06 Sep 2026 22:42:51 +0000
ROA not after:            Sun 05 Sep 2027 22:47:51 +0000
asID:                     917
IP address blocks:        209.209.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:55:e6:69:b0:c7:55:97:cd:4b:ac:ff:c8:6a:1d:23:f6:ce:41:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Sep  6 22:42:51 2026 GMT
            Not After : Sep  5 22:47:51 2027 GMT
        Subject: CN=89C9E057833E6A8981B10C7D055EC61E96F34EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:78:da:75:eb:ee:78:17:74:fd:66:7e:96:
                    f0:c6:40:5b:b9:39:8a:38:c9:e2:f3:c3:bd:99:bc:
                    63:12:2b:77:33:e0:78:0b:88:d5:7e:68:97:2c:0f:
                    4f:16:10:f6:09:e6:86:86:06:34:6b:c3:e4:c6:b8:
                    17:98:3a:d5:7b:82:6d:20:03:0d:05:d7:92:90:43:
                    5e:bc:ac:a6:3e:f8:8c:e6:5a:23:ac:00:3d:a6:10:
                    56:4c:33:d9:72:e6:91:5a:df:8d:08:0c:89:6a:ce:
                    ed:bc:23:fa:74:37:fe:8a:dd:c6:79:a1:3b:ea:39:
                    df:57:9c:7e:8c:be:0c:8d:af:a0:6c:b8:f7:c1:3a:
                    d4:04:3b:bc:ab:a7:ff:2a:04:d4:49:69:38:66:32:
                    3f:e0:c8:5c:2f:72:e3:11:71:80:c8:45:0a:31:23:
                    00:b7:43:b7:ee:35:63:d3:4e:cd:9e:04:e5:ac:9c:
                    2b:95:f9:31:24:b7:86:93:7f:0b:d5:27:51:b8:f7:
                    e0:5c:29:b5:e3:00:1b:34:44:07:38:17:7e:19:ce:
                    9f:0c:ae:1c:1d:e6:d1:d9:4d:7c:6a:e4:a4:43:33:
                    9a:dd:f1:a5:c8:9f:17:ed:7f:eb:dc:b8:e1:6d:df:
                    28:ad:0d:d8:08:ff:2e:57:ed:0a:3c:0e:d8:08:7f:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C9:E0:57:83:3E:6A:89:81:B1:0C:7D:05:5E:C6:1E:96:F3:4E:B9
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:67:4a:99:6e:18:6b:69:eb:cb:3b:3d:62:10:e1:b6:6b:94:
         ea:ee:20:17:9b:58:78:ec:fd:dc:46:d9:8c:ce:1c:8e:1b:ec:
         b5:b9:e7:f2:43:d7:4b:e1:9e:0e:3f:73:e0:32:0d:07:aa:52:
         3a:10:18:8a:6e:d6:89:8b:a1:09:f5:f3:00:76:fe:45:29:29:
         af:ce:a4:f4:27:05:b5:59:e4:8e:83:b0:a1:11:f6:cc:d4:f4:
         fd:9d:1b:d5:96:8f:40:82:6d:90:e6:66:09:85:c9:fa:0d:4c:
         9b:ca:aa:9c:cd:76:f6:48:eb:f7:d4:56:4d:43:05:da:a3:2f:
         3b:cf:05:68:65:b6:87:4f:5e:f4:5e:18:a8:05:7e:38:84:ef:
         4e:4a:54:f4:83:15:cb:5b:88:fd:f5:a4:0f:af:24:d1:9f:70:
         0b:72:1d:28:61:fc:86:80:f8:af:1e:c2:71:88:10:7b:55:14:
         0e:b1:1f:73:cc:7a:21:9e:f7:45:c0:72:89:67:15:29:ab:78:
         6f:f2:c0:12:40:b1:ce:38:6e:61:ab:70:f7:90:f2:9b:dc:11:
         ac:1a:2f:53:bd:8a:6d:4d:7c:f0:d9:30:0c:2a:4d:5c:7a:18:
         0b:49:9e:59:b9:ef:f0:d4:60:60:49:7d:d9:e1:07:04:60:fd:
         11:e8:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:10:05 2026 by rpki-client