Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
File:                     3230392e3230392e35362e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          /ofaw6vQyVmFblDJQ5WZ3inf8Y8jDnc/VUiVH+L06U4=
Subject key identifier:   37:CE:C8:E6:9B:87:D4:AC:5F:58:D7:B2:A9:E1:77:88:F3:F7:BD:3F
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       61A608F6BF9064E0F20F91ADA94BCCE943CB59FB
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
Signing time:             Sun 05 Oct 2025 22:31:12 +0000
ROA not before:           Sun 05 Oct 2025 22:26:12 +0000
ROA not after:            Sun 04 Oct 2026 22:31:12 +0000
asID:                     917
IP address blocks:        209.209.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 11:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a6:08:f6:bf:90:64:e0:f2:0f:91:ad:a9:4b:cc:e9:43:cb:59:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Oct  5 22:26:12 2025 GMT
            Not After : Oct  4 22:31:12 2026 GMT
        Subject: CN=37CEC8E69B87D4AC5F58D7B2A9E17788F3F7BD3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:35:c9:97:7d:87:7c:40:c5:d2:de:ac:db:
                    4f:69:07:9e:dd:4e:92:2b:ca:b5:9a:40:cc:04:75:
                    5e:2f:2f:05:ed:4c:d4:9f:3b:6c:98:d2:09:6b:eb:
                    e2:48:9f:d8:02:eb:30:3a:8a:09:f9:6f:c8:44:0d:
                    e6:9a:60:fa:b0:62:68:23:af:64:50:e6:cb:3a:67:
                    86:3e:92:0d:af:2b:5a:a9:06:2c:b4:78:55:22:71:
                    fc:95:9f:1c:6c:32:57:3e:73:30:72:77:24:fa:b9:
                    27:04:2b:f8:96:12:f3:31:9a:2b:76:35:3e:d4:dc:
                    7c:a6:07:aa:75:75:76:71:5d:1c:3e:66:59:84:f0:
                    fc:92:ed:b5:16:eb:dd:db:d5:bf:e3:c6:31:8f:14:
                    94:9c:d7:98:75:ae:8e:1d:32:8f:fb:df:0f:88:d3:
                    ba:50:ba:b7:f2:0a:70:eb:8c:f4:b1:9e:8c:cb:7e:
                    d6:a6:35:7e:9c:ed:ef:13:3a:47:1e:51:f2:8b:e7:
                    05:68:cc:41:63:a5:5a:9b:33:65:31:ed:7b:c8:24:
                    ec:9b:4b:81:23:00:d4:2a:0b:ed:3c:e6:e2:6d:3e:
                    f8:3c:aa:b3:81:05:28:46:1f:f8:d4:12:f7:32:dc:
                    69:44:f5:b1:17:05:94:a6:02:46:ea:3d:71:5f:ab:
                    28:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CE:C8:E6:9B:87:D4:AC:5F:58:D7:B2:A9:E1:77:88:F3:F7:BD:3F
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:45:04:cc:d5:a9:62:63:8c:bd:b9:17:36:16:bc:8d:61:b8:
         0c:d9:2d:c0:90:35:fd:5c:cd:f1:b0:cb:2e:ac:84:c0:cc:e8:
         3c:17:3e:bc:b8:da:c8:ba:f8:e2:d1:6a:f8:2d:2b:5a:2b:68:
         3d:fa:36:c0:ca:bf:91:bf:57:2a:47:27:e0:df:e0:db:2f:9b:
         36:43:f5:64:8b:fb:47:0b:2d:3a:d9:bd:0b:f8:b6:60:0e:f3:
         0a:d4:ca:73:a7:86:12:96:ae:af:64:0d:43:91:8c:53:99:3f:
         c0:e8:1d:f8:94:2a:30:eb:5f:44:f1:76:ab:e1:b6:f0:49:65:
         c4:15:06:0f:e7:0a:56:00:da:34:a8:cf:27:90:06:9a:79:3e:
         d3:8f:e9:3f:98:a6:27:1a:1f:50:57:7f:3f:c7:75:17:c2:44:
         3e:2c:87:e7:b9:7c:2b:33:a2:10:0b:bf:e6:fa:0c:d1:49:ab:
         38:bb:39:c1:7a:d2:b1:15:97:5e:84:31:23:8e:fe:48:9c:d3:
         ed:d7:3c:82:56:b9:0f:fe:46:f5:05:95:11:78:9a:3c:c4:74:
         d3:96:59:15:ff:d1:ae:2c:91:e4:f2:11:b9:ce:76:f6:64:9a:
         3a:ff:c1:18:cc:a9:35:51:60:5f:d3:6f:08:e0:90:6f:77:7c:
         a7:ec:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:28:16 2025 by rpki-client