Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/36352e39372e35352e302f32342d3234203d3e203336323630.roa
File:                     36352e39372e35352e302f32342d3234203d3e203336323630.roa (raw, json)
Hash identifier:          YrGLQfydaU8mc6IHZuQN7nonduCKI6u3FDkeREqogro=
Subject key identifier:   06:11:9B:4B:12:CE:CE:6A:06:EC:07:57:1E:9E:CD:AD:45:1F:43:14
Certificate issuer:       /CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
Certificate serial:       0247C587BFCEF5738F6156B782215DBC77C62BDC
Authority key identifier: 27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35352e302f32342d3234203d3e203336323630.roa
Signing time:             Sun 03 Nov 2024 22:30:24 +0000
ROA not before:           Sun 03 Nov 2024 22:25:24 +0000
ROA not after:            Sun 02 Nov 2025 22:30:24 +0000
asID:                     36260
IP address blocks:        65.97.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl
                          rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/6efc8ae9-a0c6-428a-8a95-038468028928.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:47:c5:87:bf:ce:f5:73:8f:61:56:b7:82:21:5d:bc:77:c6:2b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2
        Validity
            Not Before: Nov  3 22:25:24 2024 GMT
            Not After : Nov  2 22:30:24 2025 GMT
        Subject: CN=06119B4B12CECE6A06EC07571E9ECDAD451F4314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:36:c0:be:67:ef:99:5d:e7:a0:34:70:10:
                    c8:81:ce:eb:44:a7:1a:b0:7c:59:41:2c:e7:77:ff:
                    9c:3a:c6:1f:06:ab:78:9b:bf:8e:a2:11:45:37:f4:
                    26:62:4f:47:c7:ef:f8:68:9c:34:16:eb:84:f7:ba:
                    e3:f9:c4:03:5f:21:95:9f:7a:5c:87:e0:58:f6:a2:
                    42:47:b5:ac:f1:eb:37:5b:61:46:10:d3:11:e0:db:
                    02:af:7e:54:bb:91:93:0f:24:08:06:d5:39:31:27:
                    6b:dd:bf:a4:ef:ae:2a:32:17:c4:7a:4e:13:db:c9:
                    64:ec:5b:dc:22:0b:6f:40:08:cc:85:17:1e:2e:c4:
                    32:33:0c:41:19:20:82:2f:bb:92:fe:87:d1:7c:5e:
                    3b:b7:f8:6e:eb:ea:ae:f2:13:dd:87:a4:35:ed:7a:
                    82:dc:da:34:26:91:76:bf:91:15:fe:63:f3:1e:8b:
                    d9:c5:4f:38:ba:ff:4e:20:4e:d7:b1:38:7e:d9:22:
                    0f:b2:0e:df:d6:72:0a:ea:99:85:c4:45:1d:e0:7a:
                    b8:d9:3b:d1:4e:fc:09:98:a7:58:e9:83:5f:f7:37:
                    8e:4b:1d:9b:32:f2:11:82:5c:bb:6f:17:8a:58:9c:
                    91:8f:26:eb:3e:5c:b3:99:d1:53:9d:b1:04:e6:dc:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:11:9B:4B:12:CE:CE:6A:06:EC:07:57:1E:9E:CD:AD:45:1F:43:14
            X509v3 Authority Key Identifier:
                keyid:27:90:4C:FE:04:15:47:C5:6F:20:BA:5B:1B:B3:7B:C3:3E:8A:13:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/27904CFE041547C56F20BA5B1BB37BC33E8A13D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4c6be882f3fb61c2aaaa4facbb3fad72f096be7d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/36352e39372e35352e302f32342d3234203d3e203336323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.97.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:35:1d:b7:c9:b6:bb:04:e2:8d:1d:d0:ff:b7:9a:8c:7c:fe:
         ec:d1:f9:d4:2c:26:a5:b8:7f:22:0a:63:6f:14:55:0b:5e:32:
         01:bb:55:86:f4:9d:9a:ea:9e:3a:ff:a3:2c:53:ba:a5:ae:5f:
         16:54:80:61:42:dd:c2:71:45:a4:98:38:7d:61:7f:53:e0:de:
         22:36:93:a1:b8:94:b2:96:c3:a2:d0:df:3c:f9:a1:aa:9b:fa:
         33:45:47:c6:f0:09:e0:a2:01:40:4c:b1:d1:30:4a:60:e8:5d:
         1b:81:b0:50:b8:7f:69:02:84:db:1d:17:ef:94:af:d6:3e:fc:
         fd:47:6d:80:55:06:96:52:5f:96:d7:84:f6:29:a9:8f:63:ef:
         f4:ba:7f:97:26:9b:b5:49:93:3d:83:a5:f4:20:ae:76:5d:5c:
         b5:d1:0f:8b:d1:88:f4:39:34:b0:0a:15:81:4e:1e:0d:1c:29:
         b5:02:8d:4f:0e:22:12:6d:e7:d9:3f:bb:66:b3:2e:11:d1:37:
         7e:90:fb:31:7e:d2:89:02:2e:8d:91:f6:ee:52:8b:4a:7f:60:
         8f:19:bb:af:ac:12:96:0b:28:d7:e1:a1:59:eb:24:f0:d9:f6:
         fb:a9:12:87:cd:9f:ac:f2:9e:68:22:06:e9:db:fb:d3:f9:68:
         7c:b9:54:e1
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 21 19:35:27 2024 by rpki-client on console-ams.rpki-client.org