Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa
File:                     3230392e3230392e35362e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier:          db987zS7XCHGReRW2dVKA72n7JrmJUvdhepgXWY39as=
Subject key identifier:   DB:4E:83:32:2A:76:38:FF:89:DD:FE:D0:B0:AC:94:7E:30:28:A8:4E
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       4407F63B5F0A25202E54FB91DEA5B30CB6073E74
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa
Signing time:             Sun 03 Nov 2024 22:30:23 +0000
ROA not before:           Sun 03 Nov 2024 22:25:23 +0000
ROA not after:            Sun 02 Nov 2025 22:30:23 +0000
asID:                     57695
IP address blocks:        209.209.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:07:f6:3b:5f:0a:25:20:2e:54:fb:91:de:a5:b3:0c:b6:07:3e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:23 2024 GMT
            Not After : Nov  2 22:30:23 2025 GMT
        Subject: CN=DB4E83322A7638FF89DDFED0B0AC947E3028A84E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:3b:7c:05:41:7d:e5:a1:d4:89:d4:52:82:
                    59:fe:05:a6:ca:a6:39:db:d2:27:7a:15:b0:96:40:
                    72:7e:0e:1b:68:77:80:0e:07:9a:b2:b8:24:79:c2:
                    26:f7:bc:03:cc:28:25:00:ae:1f:47:88:5b:2f:01:
                    aa:9b:6a:20:bc:df:09:25:f6:71:4a:42:c7:f3:b5:
                    e4:20:b1:2c:4f:3e:d9:7f:05:ec:d0:73:79:93:17:
                    95:e3:e2:e8:b3:e9:ec:20:03:94:3e:3a:b6:e6:9f:
                    c1:1f:85:91:bc:eb:d7:be:f9:97:b7:a1:2b:ca:d7:
                    d3:ad:8c:5d:cd:d3:43:16:41:bb:2e:a8:f4:8b:8d:
                    10:9b:54:61:75:df:d4:f0:8e:de:36:3a:2f:b7:e4:
                    2e:b2:78:b1:e5:80:59:c3:d7:7d:b2:3e:7e:65:da:
                    7f:33:4d:ba:e8:d1:8a:4c:90:03:57:e6:ae:55:80:
                    ac:f0:5b:44:59:44:1e:29:7d:de:6b:3e:80:d7:d9:
                    a7:f7:38:b9:2c:67:d1:2c:39:2e:47:fb:13:7e:b0:
                    7e:2e:fc:49:56:59:d2:70:c8:10:5e:09:0f:f0:3f:
                    c9:fa:b6:76:8b:2e:67:2a:1f:6a:32:49:9c:53:42:
                    59:46:1d:99:88:5d:bd:bd:37:12:32:18:bf:39:1d:
                    37:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4E:83:32:2A:76:38:FF:89:DD:FE:D0:B0:AC:94:7E:30:28:A8:4E
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:81:ac:26:bf:a8:30:01:9a:ec:51:8c:f8:93:83:a2:88:9e:
         34:1b:06:fd:f0:0d:c2:04:dd:89:20:63:f6:13:ad:96:58:0f:
         45:91:5a:52:cf:9a:42:a2:28:8f:bc:35:11:d7:86:1b:89:c1:
         7a:1d:4e:d8:07:53:f1:20:ff:30:c0:8d:68:81:6b:ee:a6:28:
         21:00:c3:eb:dd:36:f8:b5:54:bf:31:ce:41:ba:47:ab:50:76:
         6b:75:21:8c:8c:91:b6:30:71:13:29:c2:7a:50:6c:e1:33:6a:
         98:42:a5:17:a4:5b:cb:c4:5a:bc:69:5d:b6:04:01:c2:03:1a:
         5d:8d:42:51:31:3d:91:62:cd:96:5d:47:b2:66:fb:90:c5:7f:
         a4:0e:e1:67:ee:f0:21:5b:a6:a1:4f:70:ad:b6:e4:43:54:56:
         1f:6a:3d:61:c1:84:4b:8d:c6:17:61:9e:77:dd:83:e5:e7:0c:
         d5:7d:7b:11:63:a0:0f:00:fc:74:43:f0:36:c9:b0:bf:91:29:
         b0:19:69:31:f0:ae:ce:2e:e1:8f:cf:8a:79:28:5a:7a:b8:09:
         65:5c:c5:47:13:13:8f:7e:be:68:4c:33:99:dd:72:78:df:d9:
         26:7d:03:2e:7c:8b:67:f7:d9:68:78:4d:14:6c:43:88:08:a1:
         cc:da:9d:03
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIURAf2O18KJSAuVPuR3qWzDLYHPnQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGM2YmU4ODJmM2ZiNjFjMmFhYWE0ZmFj
YmIzZmFkNzJmMDk2YmU3ZDIwHhcNMjQxMTAzMjIyNTIzWhcNMjUxMTAyMjIzMDIz
WjAzMTEwLwYDVQQDEyhEQjRFODMzMjJBNzYzOEZGODlEREZFRDBCMEFDOTQ3RTMw
MjhBODRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrE7fAVBfeWh
1InUUoJZ/gWmyqY529InehWwlkByfg4baHeADgeasrgkecIm97wDzCglAK4fR4hb
LwGqm2ogvN8JJfZxSkLH87XkILEsTz7ZfwXs0HN5kxeV4+Los+nsIAOUPjq25p/B
H4WRvOvXvvmXt6ErytfTrYxdzdNDFkG7Lqj0i40Qm1Rhdd/U8I7eNjovt+Qusnix
5YBZw9d9sj5+Zdp/M0266NGKTJADV+auVYCs8FtEWUQeKX3eaz6A19mn9zi5LGfR
LDkuR/sTfrB+LvxJVlnScMgQXgkP8D/J+rZ2iy5nKh9qMkmcU0JZRh2ZiF29vTcS
Mhi/OR03ZwIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFNtOgzIqdjj/id3+0LCslH4w
KKhOMB8GA1UdIwQYMBaAFCeQTP4EFUfFbyC6Wxuze8M+ihPTMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8yNzkwNENGRTA0MTU0N0M1NkYyMEJBNUIxQkIzN0JDMzNFOEEx
M0QzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRjNmJlODgyZjNmYjYxYzJhYWFhNGZhY2JiM2ZhZDcy
ZjA5NmJlN2QyLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5j
Oi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8xLzMyMzAzOTJlMzIzMDM5MmUz
NTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNzM2MzkzNS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AtHRODANBgkqhkiG9w0BAQsFAAOCAQEAq4GsJr+oMAGa7FGM+JODooieNBsG/fAN
wgTdiSBj9hOtllgPRZFaUs+aQqIoj7w1EdeGG4nBeh1O2AdT8SD/MMCNaIFr7qYo
IQDD6902+LVUvzHOQbpHq1B2a3UhjIyRtjBxEynCelBs4TNqmEKlF6Rby8RavGld
tgQBwgMaXY1CUTE9kWLNll1Hsmb7kMV/pA7hZ+7wIVumoU9wrbbkQ1RWH2o9YcGE
S43GF2Ged92D5ecM1X17EWOgDwD8dEPwNsmwv5EpsBlpMfCuzi7hj8+KeShaergJ
ZVzFRxMTj36+aEwzmd1yeN/ZJn0DLnyLZ/fZaHhNFGxDiAihzNqdAw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:20:42 2025 by rpki-client