Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/1/36342e3233342e3233322e302f32322d3234203d3e203537363935.roa
File:                     36342e3233342e3233322e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier:          7LR9/TUhzF7nl3iUdfInB6xZdyZaYpmn/jAgq8f8flI=
Subject key identifier:   89:60:78:A3:97:11:BA:F1:32:34:D6:7B:42:F3:05:69:1C:7F:77:9B
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       35B1EE7A40A7FD4B3811A93BD540A9F33A89D2FA
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/36342e3233342e3233322e302f32322d3234203d3e203537363935.roa
Signing time:             Sun 06 Sep 2026 22:47:53 +0000
ROA not before:           Sun 06 Sep 2026 22:42:53 +0000
ROA not after:            Sun 05 Sep 2027 22:47:53 +0000
asID:                     57695
IP address blocks:        64.234.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b1:ee:7a:40:a7:fd:4b:38:11:a9:3b:d5:40:a9:f3:3a:89:d2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Sep  6 22:42:53 2026 GMT
            Not After : Sep  5 22:47:53 2027 GMT
        Subject: CN=896078A39711BAF13234D67B42F305691C7F779B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:15:63:fd:66:e9:a3:6c:28:58:f6:7b:2b:
                    b6:1b:f0:7a:38:8e:cd:3b:65:8d:49:0c:c3:b3:a9:
                    a1:48:4b:a0:95:ff:a6:8e:df:ce:64:5d:a4:72:6c:
                    8d:9c:aa:25:06:f8:60:c6:44:d1:1e:60:89:70:af:
                    e0:2d:64:0b:12:20:f2:39:90:46:b2:b1:9f:79:6f:
                    3b:5f:48:8d:d2:28:29:ca:e1:e9:34:4a:b3:dd:5d:
                    5c:a3:96:52:72:54:1b:40:2a:e7:5b:48:e5:cb:28:
                    b6:fe:46:7e:cb:69:e3:9a:3a:90:92:af:9b:0c:6f:
                    cd:3b:fa:3d:1c:45:eb:af:0f:ee:7c:1f:a5:b0:93:
                    f7:2e:40:aa:d8:e6:c5:6d:83:6c:b0:71:e2:d3:13:
                    bd:e6:a0:5a:91:fb:5f:c0:a2:1e:de:65:b7:e4:12:
                    8d:81:5f:a1:ac:c9:ec:62:00:03:17:89:f4:0a:09:
                    34:81:18:7e:1e:2d:17:cb:b7:2f:c2:87:ad:37:fe:
                    70:b3:13:dc:81:56:e2:bd:4d:8a:1d:06:2e:72:7e:
                    c1:9f:45:80:78:ff:3c:70:b1:2c:98:4d:63:19:9d:
                    d9:09:f9:96:6f:76:e1:37:78:bc:34:9e:dc:3b:d7:
                    ed:d6:97:e4:9c:00:89:52:84:ce:f9:c4:0e:aa:98:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:60:78:A3:97:11:BA:F1:32:34:D6:7B:42:F3:05:69:1C:7F:77:9B
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/36342e3233342e3233322e302f32322d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.234.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:70:d0:90:14:2e:90:dc:32:22:5b:80:fd:12:6c:44:26:
         db:07:76:20:01:b0:85:3c:2f:d7:79:c2:79:16:5e:06:3d:f3:
         0e:30:1d:75:e6:98:14:9f:9c:c3:c0:38:68:7b:8b:42:11:00:
         b7:cf:e0:64:ee:d3:a7:17:3b:b8:8a:21:90:f4:e0:1c:87:aa:
         c4:b1:37:fe:f6:49:bc:b5:fb:1a:13:d3:6d:87:68:1b:65:cd:
         0f:5d:f6:f9:74:da:70:1c:50:91:b3:cb:85:80:33:5b:56:12:
         b8:4f:df:71:b9:c1:80:92:d7:97:11:f7:45:42:8c:50:7d:ac:
         21:74:fa:92:9c:b5:24:54:5a:d6:51:60:ad:58:22:fd:a7:60:
         3d:64:61:dc:29:c2:67:b1:90:47:6c:3e:1c:59:ed:2c:f5:15:
         34:85:b0:0e:34:4a:1b:f0:9b:df:7a:6b:54:79:94:77:f3:f8:
         21:09:51:5c:bf:79:7b:6d:ea:11:54:2f:a2:e8:5f:4d:9d:bc:
         50:d0:6a:3d:62:de:47:90:c5:f6:48:9e:31:b0:47:8d:37:b8:
         de:0b:80:2d:58:72:9e:d5:5a:be:19:e9:05:db:cb:12:9f:0e:
         f7:4d:6d:83:11:10:93:ae:61:f9:88:4b:c6:ec:2c:5f:1e:a5:
         59:6f:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:15:32 2026 by rpki-client