Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
File:                     3230392e3230392e35362e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          z9MQ6MKYGVRCbWA22p9vt274mtdkX1ipZ9RcebjXk3g=
Subject key identifier:   C2:96:B0:2B:15:09:28:7A:D7:44:A8:1C:22:C0:76:05:12:20:97:79
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       13EDF4215367125B94222B9E96A5EE838E5638C2
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
Signing time:             Sun 03 Nov 2024 22:30:24 +0000
ROA not before:           Sun 03 Nov 2024 22:25:24 +0000
ROA not after:            Sun 02 Nov 2025 22:30:24 +0000
asID:                     917
IP address blocks:        209.209.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 22:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ed:f4:21:53:67:12:5b:94:22:2b:9e:96:a5:ee:83:8e:56:38:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:24 2024 GMT
            Not After : Nov  2 22:30:24 2025 GMT
        Subject: CN=C296B02B1509287AD744A81C22C0760512209779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:c5:f1:0d:e6:c6:06:bc:79:79:87:95:f4:
                    a9:48:ef:68:0f:03:86:ca:08:78:1f:25:42:b9:54:
                    80:db:67:25:ff:18:d2:e7:66:5d:dd:2c:ca:8c:ac:
                    7f:fa:2d:5e:68:02:18:18:49:ed:5c:d1:3c:49:ec:
                    46:c3:82:65:f1:32:27:ca:b5:5a:c8:d0:9f:e1:e4:
                    14:88:18:f9:0a:4d:97:8c:4d:18:20:f4:17:2c:43:
                    2a:4b:d3:c8:67:d2:21:5e:f7:27:59:38:17:00:6b:
                    76:9a:6a:e1:1a:15:74:cc:63:f6:4c:f2:8d:78:18:
                    50:3f:74:e9:1f:27:47:6e:45:fc:a1:9f:7d:78:b4:
                    20:70:6f:25:c7:5b:74:f1:0f:42:18:fc:c2:23:fa:
                    dd:fb:84:47:88:3f:a2:1c:f2:37:22:9a:5b:3a:8e:
                    63:20:9c:eb:1d:e3:76:c5:07:f2:da:39:cf:30:73:
                    1a:67:cf:81:41:1b:3c:65:20:ea:fe:c0:ea:ce:63:
                    d0:1b:2b:4e:0e:91:fd:b1:71:03:64:72:16:b7:0d:
                    44:83:18:2d:91:65:94:16:e1:d2:95:63:0d:f0:e9:
                    c6:1a:ae:f8:86:1e:43:e5:ec:73:f0:a3:29:ab:58:
                    b1:95:56:4d:09:39:51:4c:03:4e:df:70:d0:2d:a9:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:96:B0:2B:15:09:28:7A:D7:44:A8:1C:22:C0:76:05:12:20:97:79
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3230392e3230392e35362e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:cb:21:8d:7c:06:5c:c3:15:53:93:cc:e3:e1:17:7b:fb:b2:
         ce:41:e6:fe:93:96:82:41:58:7e:8f:ab:d3:dc:c4:b9:35:ab:
         ac:44:e4:0f:06:9f:6c:c6:c7:a1:33:c8:5a:10:89:6c:bd:e9:
         8d:67:49:cb:0f:9e:90:5a:7f:22:75:0a:44:fe:61:4f:d5:f5:
         56:14:bf:93:a2:53:ea:74:2e:64:f4:fe:40:8a:54:fe:ea:1c:
         cb:e4:5d:56:1b:7d:5d:66:b2:11:c5:44:c7:13:6b:6c:3a:e5:
         10:61:30:ac:ae:5d:56:55:65:9f:64:f7:60:1e:c0:9b:7b:41:
         30:67:13:40:2c:e3:a3:7f:1e:d6:85:31:0f:99:25:89:da:65:
         66:2f:29:c4:1b:d1:83:03:dc:97:3c:77:33:9a:64:c4:3c:06:
         e4:08:12:a9:13:62:3d:76:a9:a9:6f:30:1f:c5:ed:d6:7c:5b:
         82:c6:19:f2:0d:a2:38:37:62:c4:a8:c9:d5:63:eb:0b:ab:83:
         1c:78:21:21:12:ad:bb:15:36:77:73:4b:de:24:fd:a7:78:cc:
         ee:dc:e8:02:00:03:64:2b:2f:73:19:d3:2c:51:7e:19:f7:02:
         20:a1:fa:b1:b7:48:ae:e9:bb:e4:ed:28:6e:68:9b:75:6a:56:
         b2:62:1b:33
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUE+30IVNnEluUIiuelqXug45WOMIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGM2YmU4ODJmM2ZiNjFjMmFhYWE0ZmFj
YmIzZmFkNzJmMDk2YmU3ZDIwHhcNMjQxMTAzMjIyNTI0WhcNMjUxMTAyMjIzMDI0
WjAzMTEwLwYDVQQDEyhDMjk2QjAyQjE1MDkyODdBRDc0NEE4MUMyMkMwNzYwNTEy
MjA5Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l7F8Q3mxga8
eXmHlfSpSO9oDwOGygh4HyVCuVSA22cl/xjS52Zd3SzKjKx/+i1eaAIYGEntXNE8
SexGw4Jl8TInyrVayNCf4eQUiBj5Ck2XjE0YIPQXLEMqS9PIZ9IhXvcnWTgXAGt2
mmrhGhV0zGP2TPKNeBhQP3TpHydHbkX8oZ99eLQgcG8lx1t08Q9CGPzCI/rd+4RH
iD+iHPI3IppbOo5jIJzrHeN2xQfy2jnPMHMaZ8+BQRs8ZSDq/sDqzmPQGytODpH9
sXEDZHIWtw1EgxgtkWWUFuHSlWMN8OnGGq74hh5D5exz8KMpq1ixlVZNCTlRTANO
33DQLanFuQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMKWsCsVCSh610SoHCLAdgUS
IJd5MB8GA1UdIwQYMBaAFCeQTP4EFUfFbyC6Wxuze8M+ihPTMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8yNzkwNENGRTA0MTU0N0M1NkYyMEJBNUIxQkIzN0JDMzNFOEEx
M0QzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRjNmJlODgyZjNmYjYxYzJhYWFhNGZhY2JiM2ZhZDcy
ZjA5NmJlN2QyLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5j
Oi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8xLzMyMzAzOTJlMzIzMDM5MmUz
NTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzkzMTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dE4
MA0GCSqGSIb3DQEBCwUAA4IBAQCWyyGNfAZcwxVTk8zj4Rd7+7LOQeb+k5aCQVh+
j6vT3MS5NausROQPBp9sxsehM8haEIlsvemNZ0nLD56QWn8idQpE/mFP1fVWFL+T
olPqdC5k9P5AilT+6hzL5F1WG31dZrIRxUTHE2tsOuUQYTCsrl1WVWWfZPdgHsCb
e0EwZxNALOOjfx7WhTEPmSWJ2mVmLynEG9GDA9yXPHczmmTEPAbkCBKpE2I9dqmp
bzAfxe3WfFuCxhnyDaI4N2LEqMnVY+sLq4MceCEhEq27FTZ3c0veJP2neMzu3OgC
AANkKy9zGdMsUX4Z9wIgofqxt0iu6bvk7ShuaJt1alayYhsz
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:15 2025 by rpki-client