Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/36352e39372e35322e302f32322d3234203d3e20393137.roa
File:                     36352e39372e35322e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          TZ3CwxUCWXf3PjFr951CmcbFitLIQPX9S1ARTbS6klk=
Subject key identifier:   52:FC:C9:08:70:79:D7:67:E4:87:A3:D3:EB:24:1B:D4:39:14:DD:2C
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       69F6650017859A7729390F3ECB22F2C9FCB58A05
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35322e302f32322d3234203d3e20393137.roa
Signing time:             Sun 03 Nov 2024 22:30:24 +0000
ROA not before:           Sun 03 Nov 2024 22:25:24 +0000
ROA not after:            Sun 02 Nov 2025 22:30:24 +0000
asID:                     917
IP address blocks:        65.97.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f6:65:00:17:85:9a:77:29:39:0f:3e:cb:22:f2:c9:fc:b5:8a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:24 2024 GMT
            Not After : Nov  2 22:30:24 2025 GMT
        Subject: CN=52FCC9087079D767E487A3D3EB241BD43914DD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:1b:60:f2:09:94:dc:18:8d:3f:ca:dc:1d:
                    6c:55:10:33:b9:68:cb:2b:90:47:28:dd:b5:ce:ef:
                    94:17:f6:2b:db:f1:9e:c8:13:a8:6e:05:4b:ed:ae:
                    27:c6:6b:da:63:95:15:83:4b:c8:80:5a:eb:51:e5:
                    74:84:93:23:4b:f3:85:47:aa:7c:a8:d0:18:d2:6d:
                    b1:c3:16:c0:46:d9:b8:55:43:24:71:87:7e:f1:8c:
                    fc:1e:7c:71:df:35:69:b2:77:fb:2c:70:f3:be:b5:
                    a6:e8:85:64:ec:76:70:0a:18:49:7b:90:02:88:c3:
                    7e:83:6b:cf:ff:e5:2e:fb:c8:61:98:37:33:dc:c6:
                    24:5e:ec:41:b9:4c:56:e8:b0:e9:64:a2:cb:44:14:
                    2a:82:31:04:89:58:20:0b:20:75:69:a5:45:84:fc:
                    cf:b1:a1:5f:59:c3:d6:b8:31:3b:3c:21:04:7e:0f:
                    39:cd:13:15:f2:cb:e2:b0:c9:85:e1:44:61:ba:53:
                    6c:32:a3:98:60:8d:48:4a:7f:fe:fd:03:7c:4e:9c:
                    0a:b8:ca:d6:48:76:d9:98:35:46:0f:aa:09:c6:a0:
                    34:31:63:20:c7:81:d2:cc:11:2c:fb:48:70:28:a0:
                    9c:27:e5:28:bd:ec:c4:0e:20:24:34:f9:f1:4a:f3:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FC:C9:08:70:79:D7:67:E4:87:A3:D3:EB:24:1B:D4:39:14:DD:2C
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35322e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.97.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:34:06:52:86:b5:bc:12:28:e4:30:b3:de:ec:cb:29:4c:3e:
         c7:ea:90:c1:e9:6a:88:95:6c:94:21:3e:66:81:2b:0f:65:c8:
         5d:c8:df:37:b9:f7:f9:be:bd:b3:56:9d:a5:bd:2f:1d:2f:0f:
         ad:ff:55:f0:55:b0:78:2b:b7:50:ce:d2:db:63:aa:c5:a9:c0:
         0f:e1:f1:fa:fa:02:fb:a9:6b:4c:df:fd:8b:7e:cd:9f:77:fd:
         70:6f:07:3b:75:e7:9b:20:d5:51:ec:57:e2:9c:df:b4:65:06:
         50:46:f1:0a:5d:68:56:5c:3c:9f:4a:25:c1:1f:11:da:ba:e4:
         e1:ca:6d:ac:b6:51:aa:31:1a:1a:c5:41:03:84:0f:04:51:e1:
         7c:ad:4d:e2:f8:08:75:3a:3f:e9:c2:f3:ff:1c:8b:7b:63:dd:
         5b:0b:51:6f:b6:fb:f1:e3:ac:07:48:cc:60:68:09:98:d5:6d:
         41:ba:04:f6:ea:7e:62:ad:14:34:3f:18:ee:4e:31:92:10:b1:
         25:be:ef:4d:ef:99:80:a1:40:ef:b3:89:bf:32:44:75:73:24:
         0b:53:d0:a6:67:10:6a:61:83:c2:0f:50:57:2a:76:6d:02:fd:
         d5:20:47:7e:c3:6b:4b:63:56:51:9f:af:04:0b:b9:37:d8:28:
         04:e0:96:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:25 2025 by rpki-client