Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa
File:                     323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa (raw, json)
Hash identifier:          v2gdYMzdLG6Hu6a7OtlVqnagpoH9nzcYihbAL/T6AuA=
Subject key identifier:   80:5D:E8:67:BD:D6:3F:4D:54:DF:D1:3D:90:D7:06:F6:5D:01:90:DB
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       0F670E30131E415AECF29D6A2D387BEBE2D8BFBC
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa
Signing time:             Sun 06 Sep 2026 22:47:53 +0000
ROA not before:           Sun 06 Sep 2026 22:42:53 +0000
ROA not after:            Sun 05 Sep 2027 22:47:53 +0000
asID:                     969
IP address blocks:        2606:7140:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 21:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:67:0e:30:13:1e:41:5a:ec:f2:9d:6a:2d:38:7b:eb:e2:d8:bf:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Sep  6 22:42:53 2026 GMT
            Not After : Sep  5 22:47:53 2027 GMT
        Subject: CN=805DE867BDD63F4D54DFD13D90D706F65D0190DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:22:cf:a1:97:ef:82:41:39:e7:5d:57:53:
                    1f:d0:52:2f:8a:fa:85:07:a6:68:8c:bc:c8:77:d1:
                    c2:cf:78:4c:29:07:c7:0b:d3:f1:34:ec:ab:e3:e9:
                    2d:1b:e3:76:c4:63:c6:fe:1a:5c:a6:21:32:af:f4:
                    9f:88:07:24:b1:6e:a8:45:f2:ec:73:6b:7a:27:4a:
                    d7:4e:0e:39:fd:8a:5e:a6:ae:f1:65:99:31:e9:02:
                    07:58:f9:ff:ab:f1:1d:13:00:79:9c:04:d5:f9:ec:
                    5f:59:05:d6:d6:b5:f6:1f:7f:66:5b:9a:37:f0:6d:
                    99:0e:26:5c:4e:0b:fa:f8:c7:07:f1:d1:42:31:01:
                    f2:18:5a:c2:06:d4:0b:35:d0:e0:aa:d8:88:93:72:
                    6e:83:fa:b3:9c:c5:cd:a6:fb:b6:1c:5b:cd:2c:96:
                    60:9e:e7:fb:39:35:70:d0:95:c8:8f:f5:20:fc:33:
                    34:77:c4:b9:78:d3:7e:f8:ef:de:2f:63:51:1b:2a:
                    7c:37:2e:8b:c2:5f:34:32:a7:c7:49:03:9d:7d:3d:
                    74:a4:d0:13:c7:27:da:d6:7d:df:fb:11:4d:3c:25:
                    13:9d:e0:a3:57:11:14:95:98:49:35:ec:22:ea:6a:
                    ae:ba:00:f5:01:0f:b7:ce:e4:ca:d2:50:e2:20:f7:
                    ee:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5D:E8:67:BD:D6:3F:4D:54:DF:D1:3D:90:D7:06:F6:5D:01:90:DB
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7140:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:0b:fc:5d:06:46:f9:22:c5:c2:77:87:63:36:d7:be:c9:20:
         40:ff:9c:f0:a1:f7:d4:a7:d0:41:9a:7a:d0:66:5d:ff:df:70:
         75:a6:63:66:95:1e:75:71:cd:5a:0d:0d:9a:7b:84:24:ae:6a:
         13:27:9c:5e:75:1e:95:b1:9d:67:bd:96:0c:e0:a4:17:d0:81:
         fa:f7:8e:de:62:03:94:8b:21:8a:f0:99:7b:61:79:e2:16:d0:
         af:21:b8:24:f1:b7:65:75:ed:ae:72:e4:7c:03:6b:25:c3:81:
         12:5d:3a:4f:13:dd:b6:02:b7:16:c7:82:95:20:56:95:5c:00:
         4b:13:5b:56:ff:af:11:e6:b8:5c:3c:7a:3c:1c:d3:1b:97:1f:
         44:f0:61:4b:4c:9d:49:b0:c5:cc:99:80:79:17:77:56:9e:97:
         a3:be:a4:e6:88:93:38:1a:1b:62:c4:0f:dc:07:11:67:3d:35:
         f3:3f:a0:00:61:22:d7:56:4a:b0:27:7d:bc:79:e6:86:b5:7d:
         bb:9b:27:c9:cc:b9:89:50:05:5e:b4:82:dd:c1:f6:1c:b0:37:
         ef:3f:e4:3b:16:f0:a6:d9:e6:36:1f:cb:a8:a3:b8:1b:15:06:
         3f:79:ab:a9:1f:d0:d1:98:2b:7e:ac:96:b6:86:b0:2a:a8:be:
         30:1e:31:fe
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIUD2cOMBMeQVrs8p1qLTh76+LYv7wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGM2YmU4ODJmM2ZiNjFjMmFhYWE0ZmFj
YmIzZmFkNzJmMDk2YmU3ZDIwHhcNMjYwOTA2MjI0MjUzWhcNMjcwOTA1MjI0NzUz
WjAzMTEwLwYDVQQDEyg4MDVERTg2N0JERDYzRjRENTRERkQxM0Q5MEQ3MDZGNjVE
MDE5MERCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdMiz6GX74JB
OeddV1Mf0FIvivqFB6ZojLzId9HCz3hMKQfHC9PxNOyr4+ktG+N2xGPG/hpcpiEy
r/SfiAcksW6oRfLsc2t6J0rXTg45/Ypepq7xZZkx6QIHWPn/q/EdEwB5nATV+exf
WQXW1rX2H39mW5o38G2ZDiZcTgv6+McH8dFCMQHyGFrCBtQLNdDgqtiIk3Jug/qz
nMXNpvu2HFvNLJZgnuf7OTVw0JXIj/Ug/DM0d8S5eNN++O/eL2NRGyp8Ny6Lwl80
MqfHSQOdfT10pNATxyfa1n3f+xFNPCUTneCjVxEUlZhJNewi6mquugD1AQ+3zuTK
0lDiIPfuXQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFIBd6Ge91j9NVN/RPZDXBvZd
AZDbMB8GA1UdIwQYMBaAFCeQTP4EFUfFbyC6Wxuze8M+ihPTMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8yNzkwNENGRTA0MTU0N0M1NkYyMEJBNUIxQkIzN0JDMzNFOEEx
M0QzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRjNmJlODgyZjNmYjYxYzJhYWFhNGZhY2JiM2ZhZDcy
ZjA5NmJlN2QyLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5j
Oi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8xLzMyMzYzMDM2M2EzNzMxMzQz
MDNhMzEzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzkzNjM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAJgZxQAEwDQYJKoZIhvcNAQELBQADggEBAIAL/F0GRvkixcJ3h2M2177JIED/
nPCh99Sn0EGaetBmXf/fcHWmY2aVHnVxzVoNDZp7hCSuahMnnF51HpWxnWe9lgzg
pBfQgfr3jt5iA5SLIYrwmXtheeIW0K8huCTxt2V17a5y5HwDayXDgRJdOk8T3bYC
txbHgpUgVpVcAEsTW1b/rxHmuFw8ejwc0xuXH0TwYUtMnUmwxcyZgHkXd1ael6O+
pOaIkzgaG2LED9wHEWc9NfM/oABhItdWSrAnfbx55oa1fbubJ8nMuYlQBV60gt3B
9hywN+8/5DsW8KbZ5jYfy6ijuBsVBj95q6kf0NGYK36slraGsCqovjAeMf4=
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:59:58 2026 by rpki-client