Route Origin Authorization

$ rpki-client -vvvf rsync.rp.ki/repo/misakaio/1/36352e39372e35322e302f32322d3234203d3e20393137.roa
File:                     36352e39372e35322e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          rpzisst4rUNMD9rLqjMd1zLXxaOzprIe1SQJSvwRXno=
Subject key identifier:   3A:A6:6C:BC:D5:4A:B1:AB:C1:30:C5:54:AC:EA:64:6A:F6:D0:69:08
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       2897257FC84C0F09ADDBE2D967402E7B41E57DDD
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35322e302f32322d3234203d3e20393137.roa
Signing time:             Sun 06 Sep 2026 22:47:50 +0000
ROA not before:           Sun 06 Sep 2026 22:42:50 +0000
ROA not after:            Sun 05 Sep 2027 22:47:50 +0000
asID:                     917
IP address blocks:        65.97.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:97:25:7f:c8:4c:0f:09:ad:db:e2:d9:67:40:2e:7b:41:e5:7d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Sep  6 22:42:50 2026 GMT
            Not After : Sep  5 22:47:50 2027 GMT
        Subject: CN=3AA66CBCD54AB1ABC130C554ACEA646AF6D06908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:af:e5:d4:3e:75:2f:f0:a5:b0:2f:9b:a1:
                    75:93:b0:ce:07:9d:a3:a1:a5:75:a8:40:74:fb:0a:
                    d5:4b:b8:66:b1:1a:c1:ab:a6:24:a4:a4:13:f4:76:
                    fa:0b:da:da:78:bf:c4:f1:e9:e9:1d:18:45:0b:e7:
                    f8:be:cc:51:37:f0:0a:a3:74:4d:c2:80:4a:30:00:
                    62:de:ce:16:c6:a2:5c:16:54:df:9e:0e:df:e7:d1:
                    95:7b:b5:f5:b8:47:d7:04:25:73:80:ae:e3:70:f9:
                    7d:f8:c4:34:9a:a2:5e:9c:30:38:99:fb:ae:85:e6:
                    93:c5:fa:8f:2e:5c:6f:c4:e0:25:6c:a2:ea:55:c9:
                    16:5d:ba:00:f9:34:18:02:b6:cd:e0:90:d1:9f:bd:
                    4d:90:3e:88:90:66:5e:12:32:50:29:f0:d4:f0:95:
                    d4:b4:9a:c6:f4:ce:e9:48:da:f9:0c:b3:e8:ad:e5:
                    31:3b:de:6f:2c:39:5c:91:36:07:95:7b:e7:56:c1:
                    d6:bf:26:01:e3:ff:5b:71:d6:33:ed:37:34:99:0b:
                    b5:26:fe:ef:04:e7:72:c1:fe:e7:18:9e:6b:cf:56:
                    ad:d8:44:05:80:2a:03:e3:26:fa:31:d4:45:99:d6:
                    f7:7b:89:c5:ad:dc:74:8c:e0:8b:cf:12:2f:d6:a7:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A6:6C:BC:D5:4A:B1:AB:C1:30:C5:54:AC:EA:64:6A:F6:D0:69:08
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35322e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.97.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:fa:ee:eb:94:10:69:38:2f:54:c1:c8:35:00:c6:1c:7c:23:
         d8:e5:7a:2c:ad:a9:7b:ed:4d:8f:cb:9e:70:4d:7b:97:1c:68:
         c6:c4:b7:25:25:dd:35:a5:b6:cf:17:6e:eb:f9:84:43:65:42:
         1d:33:eb:6e:de:1d:b7:41:64:c4:77:0e:60:60:78:e0:2c:21:
         f0:3f:b8:bc:7e:d1:c1:e4:e0:a2:f2:6b:00:47:79:83:32:f1:
         50:5c:51:de:51:bb:c3:6b:de:eb:49:31:c2:ec:83:52:ed:59:
         e1:bf:60:26:9a:d5:7d:ed:0f:4a:60:d0:78:fd:82:8d:bb:26:
         50:8a:a9:ad:4d:91:9a:6a:fc:c2:14:92:60:f8:34:70:38:8a:
         b0:fa:1b:2b:34:43:9f:65:b2:4e:96:36:8d:e3:26:67:87:09:
         b2:de:76:e4:13:89:9c:1b:b1:b3:0f:bc:06:bb:05:ba:09:81:
         cc:5a:64:60:02:df:f9:29:8b:0e:d5:2f:de:80:50:b5:dd:39:
         d0:06:38:24:83:68:3d:b8:1c:6a:1e:07:79:5c:69:ec:8f:ad:
         cf:86:e7:f2:51:71:4c:60:db:27:1c:25:0f:95:00:f6:59:5c:
         3c:1e:ab:cf:9b:fd:90:61:19:60:40:49:f7:a6:c5:2d:0f:7c:
         53:36:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:17:38 2026 by rpki-client