Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e20393137.roa
File:                     3137302e33392e3232342e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          mJj+BNJCxwnz0bPahdTXL14yKGS9wYXItq+/j76mXTc=
Subject key identifier:   73:73:B5:F2:D2:B9:2B:8F:89:C0:69:09:1A:6A:66:BC:B2:A3:89:CA
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       5338849FDA403EB194939F9ACE54FF382018A7D2
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e20393137.roa
Signing time:             Sun 03 Nov 2024 22:30:22 +0000
ROA not before:           Sun 03 Nov 2024 22:25:22 +0000
ROA not after:            Sun 02 Nov 2025 22:30:22 +0000
asID:                     917
IP address blocks:        170.39.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:38:84:9f:da:40:3e:b1:94:93:9f:9a:ce:54:ff:38:20:18:a7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:22 2024 GMT
            Not After : Nov  2 22:30:22 2025 GMT
        Subject: CN=7373B5F2D2B92B8F89C069091A6A66BCB2A389CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:74:45:56:7f:0b:47:cf:32:aa:df:14:3b:
                    a0:1f:79:fd:f3:0d:75:c7:aa:69:2a:c4:a5:4e:4c:
                    60:30:5e:88:94:d7:c1:96:95:c3:ba:d0:c0:57:91:
                    79:f6:4e:27:e8:01:94:1d:be:32:e1:3a:d9:8e:46:
                    11:f4:7b:a4:1c:ce:ea:31:59:9d:88:10:ae:95:3e:
                    3a:26:36:43:e8:b0:e4:ae:02:8c:2b:1d:49:78:0e:
                    be:13:90:62:80:be:9c:b8:d4:7c:98:44:47:d5:13:
                    fb:f2:42:16:75:de:3b:9e:50:5a:15:c0:79:26:4b:
                    71:8c:61:c6:43:a1:97:8a:57:ba:8f:1a:20:0d:56:
                    c3:ec:70:ea:4f:59:7f:5d:56:6b:89:0a:1d:cb:9d:
                    9d:fc:fa:33:df:65:60:d6:49:5d:96:1f:86:d7:5a:
                    55:99:e5:40:24:32:9c:f6:c1:23:22:ba:f1:de:dd:
                    9b:50:e4:71:cb:00:ef:08:2a:60:74:f8:89:e9:df:
                    2b:ef:79:fc:3e:45:fe:c6:d8:de:2b:97:6f:95:8f:
                    ca:87:6b:63:67:5d:29:a2:7b:29:61:c4:91:5e:af:
                    0b:d3:cd:03:17:e4:d5:e9:0e:dd:64:6d:39:4e:bc:
                    a8:53:f4:6b:bd:01:6a:f1:a0:87:89:1e:16:c1:ce:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:B5:F2:D2:B9:2B:8F:89:C0:69:09:1A:6A:66:BC:B2:A3:89:CA
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3137302e33392e3232342e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:be:5f:be:35:9b:46:8a:36:64:0b:d2:9c:fb:a2:03:fe:cb:
         73:41:ef:07:25:48:79:75:c5:71:c3:e4:12:df:cd:b4:c2:ba:
         6a:cb:5d:b5:40:68:06:2b:6d:10:a2:94:26:52:e7:c2:1c:c1:
         d6:29:ad:94:36:c6:ba:8d:f3:ce:94:5a:56:b6:88:da:81:f8:
         ef:3b:9c:49:d1:0a:b6:23:6d:34:bd:58:02:74:54:81:55:e8:
         86:4c:ef:e7:42:2a:79:34:7f:1f:16:54:77:98:85:b1:56:2b:
         ea:27:08:77:1e:fa:cc:9a:2c:48:c2:5d:e1:27:81:12:0a:1b:
         ab:e1:b8:5c:a4:0c:ca:4c:62:c6:16:a7:9d:08:43:eb:57:fb:
         c1:ba:30:27:1d:ba:10:85:14:22:65:10:03:71:65:24:52:ad:
         f1:ca:a5:42:bb:c1:8b:2b:69:79:38:43:f1:39:44:a0:83:7d:
         f4:fc:59:f0:99:11:79:05:f8:23:98:b8:cf:95:89:f8:ed:2d:
         4b:24:55:f0:df:5e:55:c4:04:9f:5e:8a:c5:01:b8:2f:c4:4c:
         7f:a3:79:a5:5e:1a:3f:f8:d3:db:e3:6d:91:50:7a:a3:64:48:
         14:d4:4a:55:fb:a0:4b:ac:11:7c:13:01:45:69:0d:1d:13:f5:
         e6:db:68:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:39 2025 by rpki-client