Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32332d3234203d3e203537363935.roa
File:                     3139392e3131392e36342e302f32332d3234203d3e203537363935.roa (raw, json)
Hash identifier:          FkWHLwJc8B9MfVHeiBkgXwb9DbH8C/VpkpUtHKdbFLw=
Subject key identifier:   4E:AE:5B:19:74:CE:71:C3:76:3E:19:A6:03:A7:6C:E2:E2:65:CB:1C
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       59FE6E36B5CB482ABE112635706B0812F1BF3217
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32332d3234203d3e203537363935.roa
Signing time:             Sun 03 Nov 2024 22:30:22 +0000
ROA not before:           Sun 03 Nov 2024 22:25:22 +0000
ROA not after:            Sun 02 Nov 2025 22:30:22 +0000
asID:                     57695
IP address blocks:        199.119.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:fe:6e:36:b5:cb:48:2a:be:11:26:35:70:6b:08:12:f1:bf:32:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:22 2024 GMT
            Not After : Nov  2 22:30:22 2025 GMT
        Subject: CN=4EAE5B1974CE71C3763E19A603A76CE2E265CB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:83:3f:91:6e:6a:e7:6c:a5:61:db:b9:95:65:
                    2c:ad:16:91:80:4d:48:86:be:fc:48:57:02:61:13:
                    e7:07:cd:62:c6:45:ac:2f:51:9a:a5:b1:0e:24:45:
                    46:31:2a:4e:3b:06:c0:5a:47:0f:16:d2:89:f7:55:
                    26:75:2d:e7:8d:29:6d:1c:3f:26:7a:c5:33:85:4b:
                    63:be:83:be:a3:23:da:9a:81:55:58:a0:88:6e:83:
                    45:91:08:f4:a1:38:6f:5f:d2:95:0e:54:c5:a1:55:
                    d7:80:d2:bd:e3:22:49:4a:14:be:a3:f9:56:bc:b3:
                    12:d7:5e:ae:0a:1c:99:fe:42:f9:bd:b2:83:3f:a1:
                    48:66:da:12:10:77:c1:0c:8c:ae:0d:5f:77:73:e3:
                    7e:f6:c3:c9:61:b3:58:22:05:5c:bc:a8:fb:26:84:
                    c8:5b:01:19:c0:3c:87:95:22:6a:74:28:33:be:54:
                    fc:4b:f1:58:0b:7d:cf:7c:0e:28:ce:ea:cd:f4:3a:
                    94:76:ad:3e:97:ce:6e:3c:06:ec:37:5e:c9:e5:d6:
                    fa:55:57:39:f7:6e:35:cd:3c:aa:33:b3:9d:1e:eb:
                    a7:2e:f2:f7:7b:58:08:70:e8:ab:fb:61:f2:0d:5d:
                    d7:0b:16:fe:38:0c:be:6b:93:64:b4:5a:f5:93:e8:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AE:5B:19:74:CE:71:C3:76:3E:19:A6:03:A7:6C:E2:E2:65:CB:1C
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32332d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:8b:c0:f0:16:01:4e:87:dc:9f:eb:02:80:34:c8:45:e7:3d:
         23:49:29:d0:83:5a:4e:cd:0e:76:91:12:e5:11:e9:2f:fa:1d:
         55:8d:23:a1:35:00:47:24:bb:3a:60:95:62:57:05:6f:0d:d0:
         64:ad:c3:d7:08:6e:66:c9:60:09:99:d9:e5:0b:8d:96:e6:e2:
         a2:51:09:40:97:4b:c6:74:9d:a6:e4:b1:f3:98:ce:36:12:b8:
         61:04:c3:28:06:4b:06:83:42:69:f4:0c:2c:02:33:0a:8f:56:
         e2:80:b6:82:eb:7e:44:eb:1a:af:6f:95:cd:c1:b8:f3:c5:ef:
         66:c3:ed:10:f2:e1:30:da:8e:2f:18:fc:9e:f4:e9:44:49:b7:
         cc:69:1f:e9:76:3c:d4:0d:ed:03:ce:99:27:6f:0a:5c:89:e8:
         23:0b:5d:87:47:1c:92:c4:f7:a5:43:78:6e:e6:c7:57:1a:db:
         ab:1e:bf:34:4d:9d:04:6e:98:88:75:a5:64:16:a8:90:a1:82:
         a3:b8:67:85:89:f1:9d:e9:98:8a:55:b7:1e:bb:23:3d:88:ed:
         12:c8:e4:64:c7:f8:65:db:9e:80:b9:5b:13:16:cf:d7:ce:36:
         23:3c:87:cc:d6:22:4a:34:b9:05:50:a7:40:46:e6:f9:23:a7:
         0c:43:1b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:21 2024 by rpki-client on console-fra.rpki-client.org