Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e20393137.roa
File:                     323630363a373134303a666230303a3a2f34302d3438203d3e20393137.roa (raw, json)
Hash identifier:          4sfKOBlYW9mNDvyPHpVyqsCxCpsey5iubey0d+anPmI=
Subject key identifier:   EE:13:95:0A:C5:43:91:36:8C:B2:48:34:92:F8:96:31:1A:37:5E:54
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       55A970A77986CFFD7326AA81802ADC3375B7E9ED
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e20393137.roa
Signing time:             Mon 26 Jan 2026 12:31:31 +0000
ROA not before:           Mon 26 Jan 2026 12:26:31 +0000
ROA not after:            Mon 25 Jan 2027 12:31:31 +0000
asID:                     917
IP address blocks:        2606:7140:fb00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 03:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a9:70:a7:79:86:cf:fd:73:26:aa:81:80:2a:dc:33:75:b7:e9:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Jan 26 12:26:31 2026 GMT
            Not After : Jan 25 12:31:31 2027 GMT
        Subject: CN=EE13950AC54391368CB2483492F896311A375E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:00:19:8c:dd:41:63:2f:06:83:53:b7:75:
                    81:76:0c:fd:1f:2a:7f:b0:76:fb:44:a3:d5:56:a6:
                    3c:68:2d:d1:75:cc:e5:f0:40:3e:da:70:3a:01:72:
                    bd:76:0e:18:ee:c6:4d:d8:82:2b:fb:93:9d:63:3c:
                    ea:10:70:f7:d1:9c:00:ab:35:47:63:f4:21:75:b5:
                    f3:92:9c:8a:fe:02:db:07:8d:3c:d7:e0:6c:91:ec:
                    26:11:8b:1e:f1:15:c1:7d:ce:e2:65:77:fa:6f:47:
                    8b:1e:8d:85:d0:3a:48:ab:82:ce:c1:54:c2:34:51:
                    f2:8e:ce:98:55:e4:fa:ab:10:00:2f:4e:34:ad:5b:
                    92:f9:3e:09:9e:cb:0a:79:a2:83:b1:9e:87:f2:ee:
                    a3:a1:91:ba:37:c9:bc:12:72:f1:07:a7:e7:85:25:
                    7c:14:75:4c:18:5c:fe:3d:da:7c:ce:50:be:0f:4c:
                    10:8d:0f:20:bd:4a:ce:0f:3c:39:95:55:c2:db:00:
                    04:d0:35:6c:36:ea:f4:0a:30:29:74:3d:9c:ab:e0:
                    5f:38:b8:5c:75:a1:13:b7:af:ef:65:e5:3e:36:b4:
                    5a:f8:22:75:68:03:92:30:9b:2c:32:f5:d1:c7:4a:
                    a2:73:b5:c5:a4:73:20:a7:89:3a:9b:21:2f:a6:92:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:13:95:0A:C5:43:91:36:8C:B2:48:34:92:F8:96:31:1A:37:5E:54
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7140:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:14:f0:b2:0d:20:59:d1:9b:8f:7e:24:36:c2:e3:a1:2a:20:
         8e:26:85:0c:0d:7d:96:3e:16:11:51:fd:fc:1b:46:1f:75:82:
         06:a1:82:b2:97:bf:f1:04:47:4b:10:67:4d:cd:d6:ba:c7:68:
         49:33:09:24:f9:88:5e:44:71:8a:65:1a:39:3b:78:89:15:be:
         be:ae:a8:18:ad:75:c6:b3:68:4d:2e:c3:17:f0:d0:16:39:ba:
         f5:05:c0:08:4f:2a:4d:59:ad:c8:43:45:06:3f:d7:c2:f9:0b:
         c2:c3:59:13:91:93:f1:69:4d:3d:85:ec:fa:08:a8:14:6e:c3:
         c7:d9:66:02:e0:17:b4:f6:77:a6:77:a4:98:b1:3c:32:83:7a:
         df:a8:ce:c4:6c:8e:06:99:cf:4e:f8:78:6d:c4:bc:55:8d:d2:
         fe:25:c1:95:0b:36:33:0a:5b:8d:d4:28:36:85:62:f5:92:7c:
         53:38:24:4a:7f:6b:dc:12:61:61:05:78:6b:20:a1:4a:80:c2:
         9b:71:1e:90:b0:d9:7f:0e:fb:fc:52:91:19:e2:6a:ad:de:e5:
         ce:a6:4b:f7:ab:4a:66:e6:2a:cb:0d:0e:57:51:96:99:0c:76:
         e7:8e:8a:cf:a0:0f:72:f4:5d:d8:70:6f:5a:68:32:72:df:35:
         57:7c:01:28
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIUValwp3mGz/1zJqqBgCrcM3W36e0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGM2YmU4ODJmM2ZiNjFjMmFhYWE0ZmFj
YmIzZmFkNzJmMDk2YmU3ZDIwHhcNMjYwMTI2MTIyNjMxWhcNMjcwMTI1MTIzMTMx
WjAzMTEwLwYDVQQDEyhFRTEzOTUwQUM1NDM5MTM2OENCMjQ4MzQ5MkY4OTYzMTFB
Mzc1RTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq8AGYzdQWMv
BoNTt3WBdgz9Hyp/sHb7RKPVVqY8aC3Rdczl8EA+2nA6AXK9dg4Y7sZN2IIr+5Od
YzzqEHD30ZwAqzVHY/QhdbXzkpyK/gLbB4081+BskewmEYse8RXBfc7iZXf6b0eL
Ho2F0DpIq4LOwVTCNFHyjs6YVeT6qxAAL040rVuS+T4JnssKeaKDsZ6H8u6joZG6
N8m8EnLxB6fnhSV8FHVMGFz+Pdp8zlC+D0wQjQ8gvUrODzw5lVXC2wAE0DVsNur0
CjApdD2cq+BfOLhcdaETt6/vZeU+NrRa+CJ1aAOSMJssMvXRx0qic7XFpHMgp4k6
myEvppLB+QIDAQABo4ICajCCAmYwHQYDVR0OBBYEFO4TlQrFQ5E2jLJINJL4ljEa
N15UMB8GA1UdIwQYMBaAFCeQTP4EFUfFbyC6Wxuze8M+ihPTMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8yNzkwNENGRTA0MTU0N0M1NkYyMEJBNUIxQkIzN0JDMzNFOEEx
M0QzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRjNmJlODgyZjNmYjYxYzJhYWFhNGZhY2JiM2ZhZDcy
ZjA5NmJlN2QyLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5j
Oi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8xLzMyMzYzMDM2M2EzNzMxMzQz
MDNhNjY2MjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzOTMxMzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBnFA+zANBgkqhkiG9w0BAQsFAAOCAQEAqRTwsg0gWdGbj34kNsLjoSog
jiaFDA19lj4WEVH9/BtGH3WCBqGCspe/8QRHSxBnTc3WusdoSTMJJPmIXkRximUa
OTt4iRW+vq6oGK11xrNoTS7DF/DQFjm69QXACE8qTVmtyENFBj/XwvkLwsNZE5GT
8WlNPYXs+gioFG7Dx9lmAuAXtPZ3pnekmLE8MoN636jOxGyOBpnPTvh4bcS8VY3S
/iXBlQs2MwpbjdQoNoVi9ZJ8UzgkSn9r3BJhYQV4ayChSoDCm3EekLDZfw77/FKR
GeJqrd7lzqZL96tKZuYqyw0OV1GWmQx2546Kz6APcvRd2HBvWmgyct81V3wBKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:43 2026 by rpki-client