Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e203530303639.roa
File:                     323630363a373134303a666230303a3a2f34302d3438203d3e203530303639.roa (raw, json)
Hash identifier:          Yg0ms4SoYeUQnnF/wo/4f3SA5Q0fqxyuVqbX9RbvZ0I=
Subject key identifier:   50:7E:F9:48:4E:C0:87:C4:D4:76:C8:9A:7C:4A:E8:7D:D9:4A:7A:AB
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       5B97B9C8A0D07495236DA67CDE4519FCD535DCA9
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e203530303639.roa
Signing time:             Mon 24 Feb 2025 12:30:45 +0000
ROA not before:           Mon 24 Feb 2025 12:25:45 +0000
ROA not after:            Mon 23 Feb 2026 12:30:45 +0000
asID:                     50069
IP address blocks:        2606:7140:fb00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:97:b9:c8:a0:d0:74:95:23:6d:a6:7c:de:45:19:fc:d5:35:dc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Feb 24 12:25:45 2025 GMT
            Not After : Feb 23 12:30:45 2026 GMT
        Subject: CN=507EF9484EC087C4D476C89A7C4AE87DD94A7AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:b6:b6:24:09:91:fd:68:e9:7f:ac:fb:b2:
                    4c:c0:03:91:e1:c9:60:3e:43:33:b8:a1:50:20:80:
                    73:c1:fd:31:48:9e:70:cf:bb:92:fa:00:a4:a5:83:
                    f8:1f:93:16:fc:cf:86:c9:c1:5f:5e:f1:33:a5:7e:
                    43:47:30:c7:2b:fa:22:59:6d:6e:df:43:95:c2:ca:
                    6a:4d:00:30:c2:d5:8f:67:b1:0e:b0:23:ba:40:97:
                    aa:81:4b:11:02:08:0f:ce:06:05:21:91:90:55:ea:
                    b1:55:14:dd:a1:97:ba:85:85:66:d2:8e:13:ca:33:
                    0d:0d:a9:e9:2c:27:e3:c0:d2:cf:03:ed:52:d4:37:
                    8c:e2:13:c1:ae:f9:02:be:47:0f:e4:c2:73:24:a0:
                    7d:66:a2:60:a6:89:11:60:75:d8:27:b8:59:e3:c0:
                    0e:60:61:ad:1b:9d:f9:2e:fa:d5:8e:f4:91:aa:95:
                    e5:82:b0:5e:c8:7a:53:c5:db:f0:6b:b0:7e:77:b3:
                    ba:7c:46:a7:79:a2:d1:ab:bc:bb:14:0f:3b:57:f0:
                    d7:ff:b1:0a:d5:88:1a:d5:38:c1:d5:e3:04:b4:c5:
                    0f:bb:c2:74:00:e6:28:78:60:cc:33:08:98:07:03:
                    86:7f:e5:62:b2:35:e3:8b:49:b1:a0:61:41:3b:82:
                    5d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7E:F9:48:4E:C0:87:C4:D4:76:C8:9A:7C:4A:E8:7D:D9:4A:7A:AB
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e203530303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7140:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:35:86:7f:9d:e2:f2:02:c4:ad:ed:e0:db:41:f4:7c:22:41:
         a8:07:57:56:c1:fb:a0:49:c9:87:6e:61:af:1c:93:8c:19:84:
         50:9a:50:b4:2b:aa:d1:6d:3a:5c:bc:44:de:47:d2:73:c2:bc:
         2e:d8:e2:17:72:57:6b:95:8c:2b:37:5e:30:0b:b2:5f:07:d6:
         76:ed:20:29:a3:16:17:84:47:fb:13:94:57:ff:ec:66:be:b0:
         75:51:f4:34:a5:a9:63:ca:1f:3c:5b:66:c2:46:15:24:f3:66:
         a9:6c:79:5e:c7:2d:15:8f:6b:b0:d4:3d:19:46:c4:cf:3c:5d:
         87:7c:38:7d:e9:79:74:c7:3b:25:1d:5e:57:9b:e2:ea:25:e6:
         a9:04:e2:c3:1e:a9:86:16:14:01:e9:1e:eb:06:78:55:f0:f7:
         1d:63:5c:81:50:cd:04:18:5d:6b:c0:e5:23:8e:a7:e6:0a:85:
         77:1b:c8:1d:01:a1:7d:e0:13:f6:14:e1:6e:c2:4e:d4:c2:20:
         28:59:9b:e0:2c:a8:db:0b:f3:a7:3e:ef:32:46:1e:26:f1:8a:
         de:3b:43:e7:df:51:cc:02:a5:23:25:c0:97:9c:1b:ad:9a:a4:
         ae:fa:e4:a3:bf:a9:84:9f:5c:19:8c:64:71:07:3c:6f:cf:7e:
         6d:36:9f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:14 2025 by rpki-client