Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393639.roa
File:                     32332e3134332e3137362e302f32342d3234203d3e20393639.roa (raw, json)
Hash identifier:          K4KsG9g8uqDiFGFyHbmjCbHSTYLdF5BvtUCv4m3+ebU=
Subject key identifier:   D3:E3:F2:FE:64:88:5E:A5:FC:0B:BA:9B:12:7D:D2:F8:F2:69:4C:35
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       78A7F5BEFF73929316B1E21298FA5E935990B668
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393639.roa
Signing time:             Sun 03 Nov 2024 22:30:20 +0000
ROA not before:           Sun 03 Nov 2024 22:25:20 +0000
ROA not after:            Sun 02 Nov 2025 22:30:20 +0000
asID:                     969
IP address blocks:        23.143.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a7:f5:be:ff:73:92:93:16:b1:e2:12:98:fa:5e:93:59:90:b6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:20 2024 GMT
            Not After : Nov  2 22:30:20 2025 GMT
        Subject: CN=D3E3F2FE64885EA5FC0BBA9B127DD2F8F2694C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:3b:3b:5e:f3:f1:2a:02:be:b2:d9:90:0c:
                    99:6c:7f:cf:b4:ec:16:f7:4f:f1:3c:af:41:78:fc:
                    6f:7a:60:4d:cc:07:f4:bd:42:bf:b7:7b:81:41:81:
                    1b:c9:97:80:54:7d:5e:25:82:37:81:73:f3:98:8b:
                    f7:97:17:0e:c9:7c:65:18:c3:69:76:3d:77:3f:70:
                    aa:1e:57:a6:24:a6:bc:b4:de:6a:2d:5a:b8:e9:61:
                    88:b3:01:55:00:a4:b8:a6:5d:f0:8c:2a:46:ee:52:
                    2c:1b:dd:7c:04:79:6a:80:91:6a:04:24:7b:8c:64:
                    25:0b:21:59:52:88:c5:98:18:cd:92:40:70:90:d3:
                    c3:e8:76:e1:e8:9e:9b:e8:68:a2:2d:03:b2:2d:40:
                    b6:73:49:23:74:95:aa:df:b2:d8:02:60:0f:06:ea:
                    c2:34:2a:a1:de:27:ba:ea:68:fd:b6:8c:8b:ec:67:
                    04:c4:8b:f1:2e:8c:9f:16:6e:5e:b8:5f:5b:87:0c:
                    bf:c3:50:ee:d7:16:43:6f:63:3f:a6:7e:f0:4c:8a:
                    f5:bf:d7:0d:68:30:4e:92:3c:18:02:a9:fa:58:28:
                    df:75:85:19:07:c0:e8:32:83:3b:16:4c:c3:48:92:
                    53:70:7a:2a:70:dd:b8:99:13:31:bb:3c:d1:e9:3d:
                    12:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E3:F2:FE:64:88:5E:A5:FC:0B:BA:9B:12:7D:D2:F8:F2:69:4C:35
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:76:ee:c4:67:9d:29:d2:79:30:71:86:0a:ce:56:a3:7b:2c:
         0d:44:da:ca:ae:e7:fa:58:7e:e9:b6:83:db:de:50:5f:59:7b:
         d0:65:f5:be:ef:01:d7:09:f4:1b:c2:a9:41:9b:fd:0a:40:dd:
         b1:cc:56:4f:ed:54:b2:fb:ed:f1:2b:e0:b7:1a:b6:04:54:86:
         f0:e8:09:aa:ae:33:08:af:91:a1:74:c3:5b:01:a2:79:9b:1f:
         2d:3c:16:dd:cb:61:ff:86:d5:ed:77:42:14:41:98:f4:10:e9:
         3e:3f:7a:49:76:66:7e:7b:a4:d2:2d:4d:d0:d9:7f:62:b7:e4:
         d9:2e:2a:e4:83:56:33:67:92:34:17:47:c1:e2:5a:0f:cb:39:
         7e:02:d7:96:91:6e:a9:c5:4e:7f:1b:c4:97:a3:17:2f:98:19:
         76:c4:08:49:da:99:81:5c:e1:c8:5d:0a:22:20:29:17:8a:6d:
         e4:a8:83:e5:43:e2:e6:47:fc:b6:bc:aa:72:af:3d:33:09:ae:
         27:c7:12:1e:2e:82:e0:fd:74:f9:6e:a2:ae:16:02:b1:3b:f6:
         76:05:de:f6:e5:1b:ed:e2:c7:14:2c:44:c7:f6:f3:94:d9:67:
         fa:6f:e5:fa:73:6a:ac:db:4c:bb:87:0e:45:08:18:7d:25:8f:
         5b:05:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org