Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa
File:                     323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa (raw, json)
Hash identifier:          Gxrv9uPJNs9sk8EZJXLkdUsxjzPb1GVfdNpYf9EebuA=
Subject key identifier:   B1:31:4F:73:8D:62:28:3D:EC:DC:37:92:E2:04:DB:86:9E:E5:75:E2
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       087AD8DB82984D57BDCD4125E8583542E5D15108
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa
Signing time:             Sun 06 Sep 2026 22:47:50 +0000
ROA not before:           Sun 06 Sep 2026 22:42:50 +0000
ROA not after:            Sun 05 Sep 2027 22:47:50 +0000
asID:                     969
IP address blocks:        2606:7140:500::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7a:d8:db:82:98:4d:57:bd:cd:41:25:e8:58:35:42:e5:d1:51:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Sep  6 22:42:50 2026 GMT
            Not After : Sep  5 22:47:50 2027 GMT
        Subject: CN=B1314F738D62283DECDC3792E204DB869EE575E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1a:3d:e8:6a:9a:00:fc:33:cc:35:c8:a4:6b:
                    92:21:bf:94:6e:7d:3b:d9:6e:8a:1f:ae:73:8c:23:
                    9e:4e:d3:44:a9:e6:0e:1a:72:8b:62:f7:90:59:37:
                    9a:f8:7e:85:80:fa:11:91:d6:b9:d1:3f:c5:0f:a2:
                    35:44:35:d0:b0:9f:9d:59:f5:be:90:06:79:57:7b:
                    9c:8c:62:62:c9:75:56:bc:68:7e:e1:71:8d:c5:26:
                    e3:c7:7d:e6:0c:08:4b:63:2d:c7:18:8b:d1:e1:51:
                    55:0f:74:c7:a2:54:6c:ad:d8:39:9e:b4:a3:e2:2b:
                    fd:b7:2e:9a:80:90:76:49:45:cf:b9:94:f0:c6:f1:
                    8a:b7:94:50:db:1d:37:8a:cc:b4:80:f2:a4:f1:c1:
                    10:98:5d:ce:1c:1b:4a:d2:45:5b:6b:78:9f:c8:7d:
                    f2:c2:19:84:d9:5f:56:f5:62:23:92:59:78:c9:79:
                    15:3d:b1:3d:c7:7a:d3:c6:9a:f9:99:1e:d6:0c:7d:
                    20:4d:0a:30:3c:3d:06:4e:4b:61:4c:cd:f7:82:b2:
                    ea:45:8c:13:16:ac:81:b7:fb:b0:fe:cf:dc:99:0d:
                    85:cf:1a:f2:d5:81:25:f8:3e:8f:b8:53:78:b9:c0:
                    89:75:67:fe:fa:0b:8e:0f:09:82:ee:2c:22:95:47:
                    3b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:31:4F:73:8D:62:28:3D:EC:DC:37:92:E2:04:DB:86:9E:E5:75:E2
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7140:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:2a:42:66:5b:29:30:32:27:b3:28:f9:5c:9b:dc:9b:e5:
         f1:e5:f3:8a:8a:2e:4e:09:c3:08:ea:36:14:b5:fa:f8:db:bd:
         0d:65:f0:a3:8d:dd:f1:7b:ad:70:e6:4e:6d:5b:fe:2b:8d:36:
         3f:95:20:5b:12:3e:c7:0b:df:e4:c4:7c:44:3b:a8:9f:3a:e1:
         e0:6f:03:7f:3c:04:51:38:3f:97:e4:0d:a0:1c:13:62:56:53:
         ec:b2:91:b6:32:33:e7:67:b2:8c:ee:5d:9c:09:84:16:59:76:
         79:7f:c9:a7:a0:f9:5c:4b:96:d0:85:7b:a7:28:f8:6a:97:1d:
         31:b5:10:ea:9b:6e:46:dd:9e:27:72:00:28:b5:d6:6e:e9:e0:
         2a:ff:42:36:8b:50:e3:e9:ad:73:08:bf:37:c4:0f:00:c1:c4:
         64:37:53:f3:2f:6d:b3:b8:13:5d:27:56:b6:d2:df:e5:12:62:
         7f:7f:0f:d3:18:2a:ee:fb:ab:ea:7a:5e:22:d1:9c:0c:31:d0:
         e4:15:f5:e0:6b:8e:3b:11:f3:b5:79:ff:5c:15:fd:a3:ed:8f:
         50:38:68:b3:11:c0:42:b2:7a:ee:48:b3:d6:67:1d:b8:19:46:
         13:e1:f7:89:26:12:36:2d:8b:77:56:11:34:62:eb:40:b3:52:
         f0:60:e0:55
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIUCHrY24KYTVe9zUEl6Fg1QuXRUQgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGM2YmU4ODJmM2ZiNjFjMmFhYWE0ZmFj
YmIzZmFkNzJmMDk2YmU3ZDIwHhcNMjYwOTA2MjI0MjUwWhcNMjcwOTA1MjI0NzUw
WjAzMTEwLwYDVQQDEyhCMTMxNEY3MzhENjIyODNERUNEQzM3OTJFMjA0REI4NjlF
RTU3NUUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxo96GqaAPwz
zDXIpGuSIb+Ubn072W6KH65zjCOeTtNEqeYOGnKLYveQWTea+H6FgPoRkda50T/F
D6I1RDXQsJ+dWfW+kAZ5V3ucjGJiyXVWvGh+4XGNxSbjx33mDAhLYy3HGIvR4VFV
D3THolRsrdg5nrSj4iv9ty6agJB2SUXPuZTwxvGKt5RQ2x03isy0gPKk8cEQmF3O
HBtK0kVba3ifyH3ywhmE2V9W9WIjkll4yXkVPbE9x3rTxpr5mR7WDH0gTQowPD0G
TkthTM33grLqRYwTFqyBt/uw/s/cmQ2Fzxry1YEl+D6PuFN4ucCJdWf++guODwmC
7iwilUc7WwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFLExT3ONYig97Nw3kuIE24ae
5XXiMB8GA1UdIwQYMBaAFCeQTP4EFUfFbyC6Wxuze8M+ihPTMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8yNzkwNENGRTA0MTU0N0M1NkYyMEJBNUIxQkIzN0JDMzNFOEEx
M0QzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRjNmJlODgyZjNmYjYxYzJhYWFhNGZhY2JiM2ZhZDcy
ZjA5NmJlN2QyLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5j
Oi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8xLzMyMzYzMDM2M2EzNzMxMzQz
MDNhMzUzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzkzNjM5LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAI
AwYAJgZxQAUwDQYJKoZIhvcNAQELBQADggEBACWOKkJmWykwMiezKPlcm9yb5fHl
84qKLk4JwwjqNhS1+vjbvQ1l8KON3fF7rXDmTm1b/iuNNj+VIFsSPscL3+TEfEQ7
qJ864eBvA388BFE4P5fkDaAcE2JWU+yykbYyM+dnsozuXZwJhBZZdnl/yaeg+VxL
ltCFe6co+GqXHTG1EOqbbkbdnidyACi11m7p4Cr/QjaLUOPprXMIvzfEDwDBxGQ3
U/MvbbO4E10nVrbS3+USYn9/D9MYKu77q+p6XiLRnAwx0OQV9eBrjjsR87V5/1wV
/aPtj1A4aLMRwEKyeu5Is9ZnHbgZRhPh94kmEjYti3dWETRi60CzUvBg4FU=
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:22:46 2026 by rpki-client