Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32332d3234203d3e20393137.roa
File:                     3139392e3131392e36342e302f32332d3234203d3e20393137.roa (raw, json)
Hash identifier:          9npth/WDI5VGEp6ivDmlv3BTYpp21g6LxgyTLHtCS8s=
Subject key identifier:   FE:D3:6F:35:68:25:0E:62:2E:75:8D:03:D9:76:05:A9:6B:1A:0B:BA
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       3A5ED76D0C8348B9861012459EC030AC8CBD4FAE
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32332d3234203d3e20393137.roa
Signing time:             Sun 03 Nov 2024 22:30:23 +0000
ROA not before:           Sun 03 Nov 2024 22:25:23 +0000
ROA not after:            Sun 02 Nov 2025 22:30:23 +0000
asID:                     917
IP address blocks:        199.119.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5e:d7:6d:0c:83:48:b9:86:10:12:45:9e:c0:30:ac:8c:bd:4f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:23 2024 GMT
            Not After : Nov  2 22:30:23 2025 GMT
        Subject: CN=FED36F3568250E622E758D03D97605A96B1A0BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:67:88:65:92:56:f4:ce:8b:06:8d:a3:ce:
                    45:de:b9:99:34:c6:4d:d4:1e:6b:6a:34:5b:a1:36:
                    3f:99:26:22:66:a6:c7:ec:67:d2:c3:9d:1f:03:83:
                    ab:6d:9a:06:44:79:ec:0e:3a:e7:a1:f3:5a:d4:79:
                    e7:10:9d:90:4a:b4:80:8e:63:8d:f2:e1:c1:f1:4d:
                    af:2a:f5:89:26:84:52:d0:73:3d:81:c6:8f:8a:d2:
                    45:7c:54:77:4e:3f:9c:c1:70:7d:c3:9c:c9:dc:bf:
                    92:31:ba:c4:8b:75:3d:fd:59:e3:34:d6:de:d7:95:
                    ef:b1:26:b9:4a:c8:79:42:a7:2d:8a:f7:37:78:83:
                    95:4a:76:25:51:16:6c:11:42:d7:ed:53:f6:cc:8e:
                    bc:03:cf:79:a3:73:67:ca:85:b8:9f:7a:5e:bb:33:
                    99:a0:58:3e:5c:d6:9f:41:6f:df:fe:d1:7d:72:36:
                    df:e8:bd:3d:d3:8f:7a:b1:f7:4d:fa:01:0b:cd:16:
                    d9:e6:80:8e:bb:59:f3:11:fb:e9:23:31:9c:df:2e:
                    0c:2b:df:ff:fc:59:f6:9c:72:6e:7d:63:ce:38:ca:
                    c0:64:9c:9a:91:fc:1e:69:cc:3d:f1:93:88:98:4b:
                    75:47:59:cf:f2:0b:ee:e7:69:fc:24:23:ac:46:33:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D3:6F:35:68:25:0E:62:2E:75:8D:03:D9:76:05:A9:6B:1A:0B:BA
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/3139392e3131392e36342e302f32332d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:ff:9c:7a:65:ec:65:86:8b:1f:08:d4:c2:3b:c1:7f:b0:cb:
         84:07:19:62:b8:af:4f:8a:8e:c8:a6:34:5e:d9:bb:b1:24:7d:
         10:0e:30:6d:2b:93:cc:df:61:7c:9e:a9:9c:ae:03:29:a2:a9:
         79:82:69:49:9d:59:a0:71:4d:5a:9f:6a:9e:15:4b:51:70:07:
         98:9a:ce:47:cc:f3:16:45:3e:15:cb:d0:4f:67:d1:3c:83:db:
         1f:3e:8e:78:38:03:8e:c4:31:42:d5:ef:9e:fb:b3:97:a7:0d:
         32:c0:3b:a8:b4:6c:a9:8f:ee:75:0f:62:9c:a6:6b:ba:be:c6:
         74:94:e8:80:33:bf:a7:e8:26:b8:c6:94:ea:02:77:08:8b:be:
         81:6f:fc:d5:27:96:24:ad:e9:cf:e2:e6:66:d7:5b:ec:1b:42:
         0a:a0:79:75:48:35:a4:b7:2d:8f:44:77:ec:d8:67:d2:e6:97:
         7b:0c:1e:d1:95:b8:2b:2f:31:b5:f0:91:47:e6:0a:af:f1:37:
         b0:75:07:a2:72:95:07:3b:19:06:1f:cc:49:a3:dc:66:75:d2:
         30:5c:0f:3e:06:4f:a4:07:2a:f4:2a:c8:6f:4c:86:bc:86:f0:
         65:ff:9f:68:b5:a2:19:a3:22:fb:a3:4c:5d:c6:86:aa:6c:ca:
         78:cd:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:07:21 2024 by rpki-client on console-ams.rpki-client.org