Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/36352e39372e35352e302f32342d3234203d3e203336323630.roa
File:                     36352e39372e35352e302f32342d3234203d3e203336323630.roa (raw, json)
Hash identifier:          7S6fDzHuAOwPT35IZDJ/ZK/+zrBHbqrCneaGY3gl5i0=
Subject key identifier:   A8:85:0C:44:5A:AF:75:24:03:69:81:DB:5D:0C:EE:C7:FC:B2:C2:B0
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       4DE680C62ECB51F34D752A1665190B786FBDFD66
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35352e302f32342d3234203d3e203336323630.roa
Signing time:             Sun 03 Dec 2023 21:38:16 +0000
ROA not before:           Sun 03 Dec 2023 21:33:16 +0000
ROA not after:            Sun 01 Dec 2024 21:38:16 +0000
asID:                     36260
IP address blocks:        65.97.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 01:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e6:80:c6:2e:cb:51:f3:4d:75:2a:16:65:19:0b:78:6f:bd:fd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Dec  3 21:33:16 2023 GMT
            Not After : Dec  1 21:38:16 2024 GMT
        Subject: CN=A8850C445AAF7524036981DB5D0CEEC7FCB2C2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:45:d8:d7:e1:50:ed:6b:aa:38:18:73:3b:
                    ca:74:dc:99:85:3a:28:d5:99:88:46:e2:dc:be:af:
                    2d:20:88:65:a1:6a:6d:81:50:b3:4a:4d:0f:6b:1e:
                    11:f4:57:f3:34:78:2f:9f:33:87:19:39:f3:03:ac:
                    a0:35:c5:01:7b:62:06:b6:b8:7b:70:4e:ff:f1:3f:
                    0c:15:88:1f:01:5e:04:87:67:5e:5f:a8:d4:c1:f9:
                    a6:3a:e0:20:cb:8c:dd:ce:9c:7a:08:1d:ff:07:46:
                    70:38:25:54:41:c2:64:4f:98:14:51:1b:d6:c3:8f:
                    e2:ef:a0:89:91:59:ec:30:1f:8f:95:cc:26:10:30:
                    96:5e:a6:9a:9b:a8:b1:1d:6e:77:a8:42:44:38:25:
                    00:86:0f:5f:4e:28:f7:19:38:05:0b:b9:d2:b5:ef:
                    5a:d1:b0:9b:3b:81:8f:3d:2a:8c:51:0f:10:32:05:
                    96:98:d3:93:57:33:af:99:a8:10:79:4c:35:6d:62:
                    8a:6b:ce:c8:c2:17:58:e7:92:01:a9:33:2b:72:cd:
                    75:ee:91:55:a6:ec:e1:09:e8:c3:44:4a:69:f3:be:
                    4b:ca:75:55:c0:27:2a:f7:e6:53:d6:04:62:ce:c5:
                    c3:9d:db:2c:0b:93:25:bc:57:47:0b:d7:27:e2:88:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:85:0C:44:5A:AF:75:24:03:69:81:DB:5D:0C:EE:C7:FC:B2:C2:B0
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35352e302f32342d3234203d3e203336323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.97.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ab:77:a9:8a:3f:9e:02:32:ac:a3:d6:35:34:ce:1c:40:e1:
         21:dc:4f:57:61:64:7f:43:6c:7d:2a:d5:14:98:d6:9b:4f:fb:
         86:95:2a:5e:7e:6f:b2:03:ca:40:72:86:9f:91:40:86:4f:0c:
         4a:bd:44:bf:0f:12:3c:b0:b0:13:40:c3:5e:a7:73:43:26:1d:
         2e:a5:c3:55:f5:ea:54:f5:88:92:fe:05:2b:34:5d:b3:f0:16:
         15:f6:f5:30:35:fc:5d:f4:7d:f0:c3:b5:65:7d:19:31:1a:e4:
         af:95:36:c8:d9:c2:93:e4:5c:13:fb:3f:83:51:01:53:9e:44:
         fa:7b:6a:b6:30:27:a5:8c:2e:82:ae:6e:f6:4d:5e:90:6d:b2:
         56:41:c0:da:1c:9d:31:39:96:69:e5:7b:99:0e:9a:5d:24:ae:
         ec:76:a4:a6:a4:5e:66:ba:ed:4b:1a:d6:88:c7:1f:af:6a:c1:
         a2:b9:7a:e7:19:a9:b7:12:45:aa:e1:e3:4f:a0:97:63:73:81:
         b8:24:eb:bd:75:bb:ce:0b:f7:7b:4e:27:51:83:5c:47:36:99:
         0b:b2:64:14:d7:ae:79:3a:b5:0c:d6:ef:cf:b5:cf:70:0f:41:
         f8:2a:ff:4e:22:dd:cb:cd:0a:10:12:2f:dc:8c:57:9f:23:3d:
         43:e4:77:43
-----BEGIN CERTIFICATE-----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