Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa
File:                     323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa (raw, json)
Hash identifier:          R7blKVvRVfwOmBHFJsHmffGO7HBoLr1aR/RgFB6Ikj0=
Subject key identifier:   D5:A7:39:BE:A6:87:43:E2:BD:E2:C8:3B:50:E1:35:65:2A:7B:3A:5E
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       60735E9A44FF21D21C2533B2FB0A4CFCFFB6144C
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa
Signing time:             Sun 03 Nov 2024 22:30:23 +0000
ROA not before:           Sun 03 Nov 2024 22:25:23 +0000
ROA not after:            Sun 02 Nov 2025 22:30:23 +0000
asID:                     969
IP address blocks:        2606:7140:100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:73:5e:9a:44:ff:21:d2:1c:25:33:b2:fb:0a:4c:fc:ff:b6:14:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:23 2024 GMT
            Not After : Nov  2 22:30:23 2025 GMT
        Subject: CN=D5A739BEA68743E2BDE2C83B50E135652A7B3A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:7e:05:36:48:4e:14:64:58:c8:e4:46:5f:
                    5e:d8:65:db:2b:1d:07:ac:0f:8d:b1:5b:24:03:3b:
                    5a:11:a0:66:68:fb:ad:46:bc:c6:44:a0:a0:d3:ea:
                    44:ec:61:69:d9:09:65:45:d5:55:d3:a2:cd:26:c2:
                    03:de:ac:d8:60:2e:64:ec:3b:4c:59:73:5e:db:2c:
                    ab:19:c6:ad:81:01:cf:38:11:f8:0b:a3:bc:c8:c3:
                    0b:87:e7:f6:ee:8f:51:45:8b:5d:6a:e8:af:e2:8a:
                    1f:de:39:9b:38:30:3f:df:d3:8b:a0:9b:e0:6b:a4:
                    21:e7:40:12:d3:42:31:9b:94:2a:46:f0:0e:f4:8e:
                    15:79:90:15:fc:71:af:f7:02:1a:84:fb:27:3d:82:
                    39:9c:8c:be:38:28:91:48:dd:83:e5:e0:bc:db:8a:
                    c2:c4:6f:7b:83:e4:ca:47:03:22:92:ec:1d:14:93:
                    74:e6:a1:ac:d9:d5:81:18:33:86:8f:cb:f4:01:81:
                    28:54:a4:5c:70:dd:b5:ba:39:7d:ad:8f:35:5a:c1:
                    53:08:84:5e:6e:6f:53:e2:d7:19:35:ce:30:89:04:
                    ab:69:f2:06:02:05:fa:91:26:c7:96:28:3b:5f:c1:
                    ad:a0:7f:bd:93:a9:67:70:9c:15:62:bb:fb:ed:22:
                    84:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A7:39:BE:A6:87:43:E2:BD:E2:C8:3B:50:E1:35:65:2A:7B:3A:5E
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3130303a3a2f34302d3438203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7140:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:60:3b:4a:c4:46:fe:b8:0b:d2:8c:62:a6:30:f2:92:28:ee:
         1b:7a:c8:b8:26:a8:fb:0e:97:ce:2f:35:aa:7f:b8:dc:37:67:
         d4:b9:5a:2b:10:4b:fc:7e:1b:4b:f9:a3:4d:66:6a:a4:ac:37:
         57:65:f2:54:72:d1:cd:7e:ea:10:0f:30:e0:5b:c2:e4:cc:de:
         a6:46:48:27:4b:fa:97:c2:31:51:b4:29:b5:3b:27:6a:f5:f6:
         f8:6b:26:c7:5e:5f:d2:0c:e9:20:98:37:d3:5e:2a:55:8d:e0:
         5b:93:4e:0d:36:72:42:3c:b6:e8:74:96:08:3b:57:0b:a8:0f:
         ba:83:61:05:e2:b5:67:ef:a8:89:1f:93:bf:a2:c1:fb:77:7e:
         45:22:d3:95:f7:b0:9a:df:4e:0f:2f:34:35:22:ce:bc:ff:96:
         4a:4e:ff:05:c1:b1:d1:67:56:b4:cd:35:de:1b:03:38:8c:08:
         1b:77:12:18:33:3f:15:0b:1a:21:bd:d0:4b:85:cc:dd:d6:57:
         3c:87:14:92:3e:ea:75:a4:b2:2f:c4:6d:1a:e5:1f:d7:ad:44:
         1b:c2:11:af:9d:f0:c3:18:f7:ad:31:bc:7b:2f:b4:00:ee:17:
         7b:78:c7:d2:df:b0:60:19:b2:3f:be:27:57:1f:9d:bc:cc:3a:
         46:40:a0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org