Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e203530303639.roa
File:                     323630363a373134303a666230303a3a2f34302d3438203d3e203530303639.roa (raw, json)
Hash identifier:          kY0DjdbhgETaNugixLafS3F8/BtrZ/5d3mOn3HNBTsY=
Subject key identifier:   7E:C4:4E:80:21:EC:AB:D7:B3:8F:CA:08:63:41:8C:4D:49:A9:C0:21
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       4FF089E9D043C2ED70CACF011AD087E88206DADD
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e203530303639.roa
Signing time:             Mon 25 Mar 2024 11:50:57 +0000
ROA not before:           Mon 25 Mar 2024 11:45:57 +0000
ROA not after:            Mon 24 Mar 2025 11:50:57 +0000
asID:                     50069
IP address blocks:        2606:7140:fb00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f0:89:e9:d0:43:c2:ed:70:ca:cf:01:1a:d0:87:e8:82:06:da:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Mar 25 11:45:57 2024 GMT
            Not After : Mar 24 11:50:57 2025 GMT
        Subject: CN=7EC44E8021ECABD7B38FCA0863418C4D49A9C021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7d:75:bc:26:d9:00:f5:00:86:1f:0c:43:0c:
                    aa:44:ff:39:d0:06:ab:19:21:58:7c:92:84:cd:ce:
                    29:5b:4c:70:53:de:fe:ae:6c:d3:68:ef:f1:ae:11:
                    5b:38:70:39:89:86:20:4d:a7:6d:bd:b9:49:df:0c:
                    d8:8d:4f:9b:21:9e:57:82:f2:ff:7b:3a:3c:84:88:
                    ec:7e:9f:9e:c9:d2:f7:a6:27:bc:1e:f1:fb:20:2c:
                    b9:48:03:a8:ce:18:72:59:c2:cb:2b:d6:b6:0d:48:
                    e1:5b:1d:1a:ad:22:d4:a7:cf:1b:51:17:ae:20:a9:
                    6c:f3:b9:52:35:09:ad:2a:bb:da:9b:22:2d:ca:9e:
                    26:3e:27:c4:85:d9:03:07:06:d0:f4:8b:5f:01:a1:
                    b3:d7:e7:bc:bb:d9:17:66:bd:32:7f:41:9c:dd:d4:
                    91:36:09:09:a3:9e:07:6d:d6:9f:da:3b:25:af:0d:
                    48:76:b1:b4:10:dc:5c:e5:3a:7e:16:fc:5d:54:82:
                    b5:04:0b:8b:40:c7:4a:76:cc:5b:0b:b2:55:3c:d0:
                    0b:3f:53:e8:66:91:75:47:23:02:48:67:80:71:47:
                    73:fc:de:ce:d9:a3:fd:62:11:f1:88:b7:50:3a:44:
                    62:b1:c3:12:7d:0e:45:d5:2d:e0:76:ae:0e:5d:4f:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C4:4E:80:21:EC:AB:D7:B3:8F:CA:08:63:41:8C:4D:49:A9:C0:21
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/323630363a373134303a666230303a3a2f34302d3438203d3e203530303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7140:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:e9:bb:00:f6:7a:dd:a4:11:36:dc:b9:2b:37:a9:17:45:
         a6:9d:d5:04:93:ea:68:1a:4f:14:83:13:a8:e5:d8:fe:42:45:
         e9:dc:16:50:42:34:9f:e3:12:4a:70:7f:c2:51:93:fc:7c:01:
         7b:4e:3c:c5:b4:c1:fe:42:78:84:ea:22:73:13:85:44:27:04:
         31:d9:b4:8b:c8:ea:9c:6a:43:62:7d:e7:6e:5b:0d:73:b2:8e:
         2e:d0:ae:ee:29:d4:ab:a5:a7:bc:2d:20:74:9f:d4:ed:5c:d5:
         56:cb:b1:50:57:31:58:88:ac:d8:f8:11:a5:0f:7f:45:7a:ce:
         c0:94:70:1d:5e:23:84:c0:86:6f:fc:6f:3f:c8:c1:25:6a:d7:
         b0:5d:19:a7:0a:ac:5f:e4:6e:4b:1d:59:aa:6b:4e:a9:ed:8f:
         64:9e:4c:95:4e:a1:3c:bc:02:6e:26:78:8f:02:ed:bf:97:ff:
         3d:07:4d:bb:e5:ed:79:96:0a:a5:5b:67:fe:96:ba:36:94:8f:
         6d:03:74:aa:e4:d0:3f:13:c3:cd:21:77:14:b5:ea:57:75:9f:
         f3:20:8f:ab:14:5a:d2:8f:dd:89:bd:ce:b1:70:84:4f:c7:ca:
         17:1a:53:54:1d:20:68:f2:d1:c4:95:a8:a9:c7:be:8a:7c:25:
         60:da:45:97
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgIUT/CJ6dBDwu1wys8BGtCH6IIG2t0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDZmYzI3YjJiNGM2YmU4ODJmM2ZiNjFjMmFhYWE0ZmFj
YmIzZmFkNzJmMDk2YmU3ZDIwHhcNMjQwMzI1MTE0NTU3WhcNMjUwMzI0MTE1MDU3
WjAzMTEwLwYDVQQDEyg3RUM0NEU4MDIxRUNBQkQ3QjM4RkNBMDg2MzQxOEM0RDQ5
QTlDMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9311vCbZAPUA
hh8MQwyqRP850AarGSFYfJKEzc4pW0xwU97+rmzTaO/xrhFbOHA5iYYgTadtvblJ
3wzYjU+bIZ5XgvL/ezo8hIjsfp+eydL3pie8HvH7ICy5SAOozhhyWcLLK9a2DUjh
Wx0arSLUp88bUReuIKls87lSNQmtKrvamyItyp4mPifEhdkDBwbQ9ItfAaGz1+e8
u9kXZr0yf0Gc3dSRNgkJo54Hbdaf2jslrw1IdrG0ENxc5Tp+FvxdVIK1BAuLQMdK
dsxbC7JVPNALP1PoZpF1RyMCSGeAcUdz/N7O2aP9YhHxiLdQOkRiscMSfQ5F1S3g
dq4OXU/DBwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH7EToAh7KvXs4/KCGNBjE1J
qcAhMB8GA1UdIwQYMBaAFCeQTP4EFUfFbyC6Wxuze8M+ihPTMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
bWlzYWthaW8vMS8yNzkwNENGRTA0MTU0N0M1NkYyMEJBNUIxQkIzN0JDMzNFOEEx
M0QzLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQt
OGY2Yy1kNmM5MWIwYjg0MTUvNmVmYzhhZTktYTBjNi00MjhhLThhOTUtMDM4NDY4
MDI4OTI4LzA2ZmMyN2IyYjRjNmJlODgyZjNmYjYxYzJhYWFhNGZhY2JiM2ZhZDcy
ZjA5NmJlN2QyLmNlcjCBggYIKwYBBQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3lu
YzovL3JzeW5jLnJwLmtpL3JlcG8vbWlzYWthaW8vMS8zMjM2MzAzNjNhMzczMTM0
MzAzYTY2NjIzMDMwM2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzUzMDMwMzYzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACYGcUD7MA0GCSqGSIb3DQEBCwUAA4IBAQA+/um7APZ63aQRNty5
KzepF0WmndUEk+poGk8UgxOo5dj+QkXp3BZQQjSf4xJKcH/CUZP8fAF7TjzFtMH+
QniE6iJzE4VEJwQx2bSLyOqcakNifeduWw1zso4u0K7uKdSrpae8LSB0n9TtXNVW
y7FQVzFYiKzY+BGlD39Fes7AlHAdXiOEwIZv/G8/yMElatewXRmnCqxf5G5LHVmq
a06p7Y9knkyVTqE8vAJuJniPAu2/l/89B0275e15lgqlW2f+lro2lI9tA3Sq5NA/
E8PNIXcUtepXdZ/zII+rFFrSj92Jvc6xcIRPx8oXGlNUHSBo8tHElaipx76KfCVg
2kWX
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:22 2024 by rpki-client on console-fra.rpki-client.org