Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa
File:                     323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa (raw, json)
Hash identifier:          J3ilCRp7bmG4PGJyflM7aNSx5xoTrnG2DZkHX+AN5RI=
Subject key identifier:   A4:04:DE:72:CB:2B:5D:F5:C8:8E:DC:1B:1D:E5:12:B3:C8:51:BF:FF
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       402ADA8FCA4D87132A54628A7DD13A8B3489FBA4
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa
Signing time:             Sun 03 Nov 2024 22:30:21 +0000
ROA not before:           Sun 03 Nov 2024 22:25:21 +0000
ROA not after:            Sun 02 Nov 2025 22:30:21 +0000
asID:                     969
IP address blocks:        2606:7140:500::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2a:da:8f:ca:4d:87:13:2a:54:62:8a:7d:d1:3a:8b:34:89:fb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:21 2024 GMT
            Not After : Nov  2 22:30:21 2025 GMT
        Subject: CN=A404DE72CB2B5DF5C88EDC1B1DE512B3C851BFFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:48:25:06:12:00:9d:0a:ae:e0:7d:d8:d5:
                    78:e4:3b:a6:54:29:32:bf:83:a5:ea:1f:5d:20:6d:
                    77:7a:3d:a2:08:7e:15:34:95:f8:f1:e9:63:ec:7b:
                    02:f3:34:a2:89:f3:e3:97:4d:41:ae:f7:5d:24:26:
                    e9:6d:c8:4b:03:2b:da:44:df:8a:e2:49:7b:4a:9e:
                    47:6e:af:5c:7d:33:c9:ad:13:9d:36:27:d4:dc:98:
                    1f:42:20:17:50:ea:4a:f5:e8:5c:d8:e0:c7:e5:b6:
                    bb:0e:34:82:35:c4:f3:12:81:d3:a6:18:d1:30:56:
                    b0:d9:05:51:da:39:ac:fb:66:94:30:7e:f0:27:d3:
                    4a:49:06:c0:38:b0:12:6d:90:04:e1:47:a9:86:f4:
                    ca:de:6b:40:bd:d9:cc:83:39:9c:b6:7e:a0:ed:f3:
                    68:47:c5:c5:11:d9:e3:43:d3:37:94:bb:7f:b0:26:
                    a0:b6:33:44:21:2c:70:b4:82:d2:f6:a8:57:51:09:
                    1f:4a:1f:d8:3e:fd:59:c3:28:ba:1e:e0:48:35:d5:
                    77:c0:a0:dc:59:9f:59:d4:d5:ec:2c:8c:07:ef:68:
                    f5:42:f9:84:c2:5d:6a:c1:cc:a9:1b:0d:a2:a4:fa:
                    9d:80:a5:63:87:2d:b0:4f:8b:c2:3c:de:25:4a:7a:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:04:DE:72:CB:2B:5D:F5:C8:8E:DC:1B:1D:E5:12:B3:C8:51:BF:FF
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a3530303a3a2f34302d3438203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7140:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:84:a0:98:68:d3:04:02:87:d3:76:41:90:e0:d3:b6:c8:
         8a:c7:ef:91:e6:fd:db:73:c1:b1:fc:99:11:86:c0:70:56:96:
         29:21:4d:fc:56:e1:a5:8c:f9:65:59:c9:e0:1f:25:3b:5c:6c:
         bc:ca:53:6f:61:fb:3b:cc:8d:e6:9a:14:09:d5:81:59:26:7f:
         01:2b:b9:6a:80:f8:4a:0d:7c:fd:4b:c5:2c:09:f1:48:4f:c6:
         cc:7f:41:63:ef:62:28:f1:e1:3a:eb:16:8e:35:d1:50:fd:2d:
         37:eb:b8:4b:56:bd:28:1e:98:16:77:91:d8:70:25:ca:43:6b:
         c0:a4:f5:5a:6f:08:d1:11:91:90:28:e9:ae:8e:b0:7b:8e:e7:
         57:39:f2:5a:bf:9b:10:d0:75:42:65:8f:a6:6b:f2:7f:61:55:
         c9:a1:e0:af:39:c0:4c:e0:bd:51:ac:be:7c:ea:6a:c1:a2:8c:
         d4:df:53:9d:ba:c6:d0:eb:a6:7c:e9:ce:79:35:b1:1e:d7:40:
         9f:3b:ba:6b:f5:5e:8d:f8:24:f6:ae:74:e9:7e:38:d6:9b:a0:
         50:36:82:15:c2:ec:11:95:13:17:e9:33:58:93:b4:f9:72:5f:
         38:f2:7f:3f:ce:79:45:4f:54:e9:56:06:96:87:c7:10:49:17:
         39:b4:9b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org