Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393639.roa
File:                     32332e3134332e3137362e302f32342d3234203d3e20393639.roa (raw, json)
Hash identifier:          1Ip6TP8+gvzA6OxRT18D8jUyeSLix5gfi4asVetbPfA=
Subject key identifier:   F5:E4:56:42:8F:CB:69:03:E7:1B:29:88:A5:0F:A0:EB:93:61:96:5B
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       5B4F04031968B4241B5F4AA8E1ACA3F38BD3C5DA
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393639.roa
Signing time:             Sun 06 Sep 2026 22:47:49 +0000
ROA not before:           Sun 06 Sep 2026 22:42:49 +0000
ROA not after:            Sun 05 Sep 2027 22:47:49 +0000
asID:                     969
IP address blocks:        23.143.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4f:04:03:19:68:b4:24:1b:5f:4a:a8:e1:ac:a3:f3:8b:d3:c5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Sep  6 22:42:49 2026 GMT
            Not After : Sep  5 22:47:49 2027 GMT
        Subject: CN=F5E456428FCB6903E71B2988A50FA0EB9361965B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:b5:b0:cb:0e:41:53:3b:9a:90:f0:6d:36:
                    d6:78:59:fe:59:47:e8:0b:9c:ec:07:31:d4:6b:f1:
                    d3:a1:aa:66:61:f3:e7:26:28:dd:af:9e:ae:bb:07:
                    9b:27:6b:51:6f:66:8c:0e:82:63:cc:c5:2a:d9:50:
                    3d:c9:bf:91:ff:b9:8c:ca:a1:1c:37:e0:87:20:6b:
                    3e:fa:58:67:ff:b0:0d:df:6f:33:e6:64:1e:24:d1:
                    08:4d:57:37:33:ee:15:60:79:57:25:a6:96:cf:81:
                    73:c6:38:ac:62:99:d6:7d:24:1b:2d:a2:2b:e0:42:
                    eb:97:f1:c6:d9:9e:9a:4d:6b:b5:6c:d7:bc:28:3d:
                    e2:2c:b8:23:0a:d8:e7:55:f1:66:07:87:2a:0c:73:
                    bf:bb:c7:3a:7b:fb:74:ba:c5:7b:da:a8:5f:3b:7b:
                    3f:4b:20:95:7e:ee:70:8f:94:50:0f:79:aa:88:1d:
                    7a:b1:c8:cd:96:72:3e:96:bb:5d:c7:1f:48:73:d5:
                    2c:12:2b:84:62:7a:79:3f:64:76:8c:62:b6:6d:75:
                    e8:66:3d:0e:13:4d:5e:60:92:f4:cd:36:f4:64:f0:
                    1c:7a:db:0d:a1:a9:d7:5b:bb:09:73:c1:b8:fc:14:
                    54:b9:66:12:9b:80:fb:65:ce:04:57:61:07:a0:7e:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E4:56:42:8F:CB:69:03:E7:1B:29:88:A5:0F:A0:EB:93:61:96:5B
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:41:23:f3:04:58:2a:5f:20:c6:19:a2:98:4d:b6:4a:55:27:
         11:3f:6d:00:fc:bb:0c:f4:55:63:29:b7:bb:da:9e:63:1a:ef:
         78:d6:23:88:63:c4:53:60:e8:bb:b3:74:02:37:57:5a:42:6a:
         da:87:fa:35:5f:09:89:c4:2b:58:9c:6d:9d:86:c5:83:c6:ac:
         3b:e4:e6:6e:b8:57:b5:2c:e0:31:9f:f5:56:3d:96:46:f5:08:
         8b:0c:86:c0:0a:9c:81:bd:48:73:71:54:53:82:ed:fc:76:c4:
         60:18:0c:22:41:1d:56:77:2d:94:80:37:ef:c4:6a:69:e2:9f:
         44:6e:de:05:43:5a:15:33:f5:a1:75:03:3a:2a:fa:61:47:61:
         30:c6:d6:24:2b:52:25:d7:73:00:08:ba:82:da:bd:b6:9d:82:
         d9:fd:6e:69:ba:21:5a:58:b2:54:49:a5:da:d9:4f:c0:10:f2:
         32:d6:e5:13:e9:27:1b:20:8c:23:70:b8:08:8a:c6:85:f5:b2:
         fd:71:95:a7:22:87:49:2b:fe:74:64:d5:a7:da:28:8c:5d:4c:
         65:2c:c9:cc:90:ad:4f:35:21:2a:54:7a:3f:b1:02:3e:cd:3f:
         88:9c:21:87:4b:8b:3e:eb:27:9e:0f:7f:95:7a:f3:ac:9e:77:
         9e:22:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:16 2026 by rpki-client