Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
File:                     3230392e3230392e35362e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          S/9VcumlCNs7WVa1vhOdwRrt/Y2VOBDJEacYd1oNu1s=
Subject key identifier:   23:5E:11:7C:CC:5D:30:D3:1E:C2:7E:4C:9B:A5:E5:D5:98:47:18:F3
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       0DC5CA8DA001C4699329A71520897BBD25A342F9
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
Signing time:             Sun 03 Dec 2023 21:38:16 +0000
ROA not before:           Sun 03 Dec 2023 21:33:16 +0000
ROA not after:            Sun 01 Dec 2024 21:38:16 +0000
asID:                     917
IP address blocks:        209.209.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 01:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c5:ca:8d:a0:01:c4:69:93:29:a7:15:20:89:7b:bd:25:a3:42:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Dec  3 21:33:16 2023 GMT
            Not After : Dec  1 21:38:16 2024 GMT
        Subject: CN=235E117CCC5D30D31EC27E4C9BA5E5D5984718F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:39:8b:5e:9f:78:b1:31:d9:50:8f:9a:7a:
                    2b:38:1b:d7:fc:65:4b:b1:ed:92:1b:8c:5a:ee:0a:
                    1f:d8:4a:c5:4a:e0:66:a3:0c:73:27:f1:21:70:46:
                    d1:82:2e:46:9a:a0:91:e1:2b:bc:e9:78:6c:1c:b7:
                    28:a8:93:a6:7b:6a:11:cc:78:da:c7:0f:f3:14:6d:
                    4b:ad:dd:ab:2c:95:1f:c9:f8:2f:d6:bc:63:0c:20:
                    09:06:07:57:b4:b2:2d:99:d6:47:48:a4:39:26:a2:
                    34:da:0e:b6:4f:60:7f:c5:69:15:4e:ee:c1:c7:a2:
                    14:57:5c:4a:2e:6f:09:c7:1d:84:5a:6c:52:9a:18:
                    f3:16:56:0b:80:6a:d3:c8:ac:57:bd:68:5a:0a:df:
                    21:b1:d3:bd:05:24:5e:84:a1:cd:d5:ea:3e:16:69:
                    82:a6:97:10:ee:5f:34:90:f7:38:5c:7a:fa:a5:73:
                    c2:e7:bc:6d:9a:c2:dd:a2:96:47:0a:e4:d3:dc:7a:
                    a0:ed:11:2b:c9:d8:67:cd:cc:14:1d:c5:f0:da:87:
                    bc:0d:31:95:c2:1b:d5:91:8a:46:42:96:81:19:ef:
                    b8:3e:a2:70:95:ab:7a:b3:51:ac:8e:6e:94:80:55:
                    08:f9:dd:51:ea:00:2e:63:63:61:ac:b3:22:2f:cc:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:11:7C:CC:5D:30:D3:1E:C2:7E:4C:9B:A5:E5:D5:98:47:18:F3
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:c2:3f:b8:3f:c2:48:36:f0:dc:dd:75:f9:64:2d:66:ef:
         59:8f:e3:bc:af:3d:09:11:93:66:23:e2:24:23:10:8c:1f:ee:
         ba:2b:b1:55:d2:89:35:66:2c:90:fc:90:7d:02:34:3e:cf:3c:
         45:a7:6f:76:ed:72:d2:fb:f7:e9:84:a9:07:9d:d3:9a:a0:e7:
         56:ea:c4:fb:eb:0b:ac:c5:52:b4:f7:04:aa:59:f9:01:e6:de:
         43:fc:87:93:4a:19:8a:57:22:2f:08:46:7b:d4:b2:3a:e0:71:
         5c:e5:b3:b5:76:94:cb:af:6a:2d:1a:0c:a6:c8:86:13:3b:63:
         dc:21:20:6a:e1:2a:e1:38:17:25:26:fe:60:d1:9e:bc:ab:07:
         b4:fc:b2:d4:04:fc:77:f3:e6:f1:d8:4e:3f:fb:fd:8a:dd:7f:
         e2:38:06:5e:b6:3c:a4:90:76:ed:db:b0:45:35:5d:6d:d8:63:
         18:dc:6a:65:48:12:c6:20:ca:78:c0:53:d9:fb:16:44:26:2f:
         27:98:8b:2c:21:e5:58:50:fd:d5:98:2a:48:85:b0:45:e3:27:
         47:12:00:4b:bc:7e:fe:99:f6:18:22:bf:1b:a8:f2:bb:ab:ca:
         03:99:5a:c7:69:70:46:17:dd:49:00:7c:46:ca:a5:3d:ed:9f:
         f4:01:f9:7b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUDcXKjaABxGmTKacVIIl7vSWjQvkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGM2YmU4ODJmM2ZiNjFjMmFhYWE0ZmFj
YmIzZmFkNzJmMDk2YmU3ZDIwHhcNMjMxMjAzMjEzMzE2WhcNMjQxMjAxMjEzODE2
WjAzMTEwLwYDVQQDEygyMzVFMTE3Q0NDNUQzMEQzMUVDMjdFNEM5QkE1RTVENTk4
NDcxOEYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDA5i16feLEx
2VCPmnorOBvX/GVLse2SG4xa7gof2ErFSuBmowxzJ/EhcEbRgi5GmqCR4Su86Xhs
HLcoqJOme2oRzHjaxw/zFG1Lrd2rLJUfyfgv1rxjDCAJBgdXtLItmdZHSKQ5JqI0
2g62T2B/xWkVTu7Bx6IUV1xKLm8Jxx2EWmxSmhjzFlYLgGrTyKxXvWhaCt8hsdO9
BSRehKHN1eo+FmmCppcQ7l80kPc4XHr6pXPC57xtmsLdopZHCuTT3Hqg7RErydhn
zcwUHcXw2oe8DTGVwhvVkYpGQpaBGe+4PqJwlat6s1Gsjm6UgFUI+d1R6gAuY2Nh
rLMiL8xY2QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCNeEXzMXTDTHsJ+TJul5dWY
RxjzMB8GA1UdIwQYMBaAFCeQTP4EFUfFbyC6Wxuze8M+ihPTMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8yNzkwNENGRTA0MTU0N0M1NkYyMEJBNUIxQkIzN0JDMzNFOEEx
M0QzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRjNmJlODgyZjNmYjYxYzJhYWFhNGZhY2JiM2ZhZDcy
ZjA5NmJlN2QyLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5j
Oi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8xLzMyMzAzOTJlMzIzMDM5MmUz
NTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzkzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dE4
MA0GCSqGSIb3DQEBCwUAA4IBAQCtnMI/uD/CSDbw3N11+WQtZu9Zj+O8rz0JEZNm
I+IkIxCMH+66K7FV0ok1ZiyQ/JB9AjQ+zzxFp2927XLS+/fphKkHndOaoOdW6sT7
6wusxVK09wSqWfkB5t5D/IeTShmKVyIvCEZ71LI64HFc5bO1dpTLr2otGgymyIYT
O2PcISBq4SrhOBclJv5g0Z68qwe0/LLUBPx38+bx2E4/+/2K3X/iOAZetjykkHbt
27BFNV1t2GMY3GplSBLGIMp4wFPZ+xZEJi8nmIssIeVYUP3VmCpIhbBF4ydHEgBL
vH7+mfYYIr8bqPK7q8oDmVrHaXBGF91JAHxGyqU97Z/0Afl7
-----END CERTIFICATE-----
Generated at Wed Jun 26 01:37:35 2024 by rpki-client on console-fra.rpki-client.org