Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205590.roa
File:                     AS205590.roa (raw, json)
Hash identifier:          a3m559xDNVjbelBRIff7Gh9CFHd7QT9bAwPTjNbcFDM=
Subject key identifier:   A0:57:8A:4E:B2:EE:DC:71:AE:43:39:0D:1F:4E:48:5C:40:DC:0F:27
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       0F7F2216CAB310FC67EBD5AD41A8D3D8247CF2D9
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS205590.roa
Signing time:             Wed 20 Dec 2023 21:30:07 +0000
ROA not before:           Wed 20 Dec 2023 21:25:07 +0000
ROA not after:            Wed 18 Dec 2024 21:30:07 +0000
asID:                     205590
IP address blocks:        2a0b:4340:50::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7f:22:16:ca:b3:10:fc:67:eb:d5:ad:41:a8:d3:d8:24:7c:f2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Dec 20 21:25:07 2023 GMT
            Not After : Dec 18 21:30:07 2024 GMT
        Subject: CN=A0578A4EB2EEDC71AE43390D1F4E485C40DC0F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:29:75:a2:e5:88:f3:3f:48:ac:46:c6:da:
                    db:c0:77:ae:3b:97:4a:82:77:97:40:f8:65:af:47:
                    8b:cc:5e:94:aa:96:32:b8:f3:2a:a4:fa:da:28:52:
                    3e:ab:d1:89:93:38:28:43:0b:79:1b:22:b5:a2:74:
                    47:70:5a:a9:30:54:ac:88:c5:76:a6:66:d6:ea:04:
                    ef:f7:e5:92:5a:bc:cd:56:9e:ab:5d:71:07:f1:51:
                    f9:1f:8d:b8:71:48:e3:a5:c2:99:94:40:35:ff:1d:
                    b2:65:e1:b4:8d:a1:5e:eb:dd:aa:b4:cd:9b:79:f4:
                    52:b2:cb:ca:75:a9:51:df:31:0c:8a:55:04:32:a2:
                    c1:c6:d4:b4:6f:4c:85:68:fa:46:4b:09:f7:17:fd:
                    37:09:67:21:55:16:5e:02:72:d7:1a:55:18:3b:53:
                    cb:ec:80:e4:57:2e:1c:fc:a3:35:3d:07:24:8a:92:
                    39:55:87:3c:58:10:19:61:18:ba:fb:68:23:8e:77:
                    21:a5:6f:68:97:61:ce:b1:13:63:b2:93:16:d6:35:
                    d4:61:cf:43:ee:90:03:fc:19:87:ff:d7:7b:ee:75:
                    f1:5b:db:41:d5:df:00:b2:49:ec:19:ce:fc:d4:11:
                    7f:65:f8:6a:78:ef:94:08:9e:27:21:da:99:48:5e:
                    cf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:57:8A:4E:B2:EE:DC:71:AE:43:39:0D:1F:4E:48:5C:40:DC:0F:27
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205590.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:a5:29:48:3b:22:a6:be:b3:fc:77:ee:e5:2d:da:8d:4c:9b:
         b6:ab:aa:35:34:d3:c1:97:92:6e:47:b2:5e:07:5e:f3:94:87:
         73:9f:d0:73:8e:96:e9:86:75:f6:96:97:83:42:be:d6:56:60:
         d5:16:4f:ee:57:f5:e5:20:74:4d:91:cf:b8:84:5d:b4:55:21:
         9f:55:07:44:9f:29:ce:ed:49:00:1a:86:e7:5e:e5:bb:83:e8:
         59:d4:21:e7:a3:c2:4b:d4:bf:a0:3d:c1:99:ec:af:b5:e5:ad:
         a7:81:1c:98:6d:2a:0f:91:df:0d:2c:a0:47:3d:48:1c:6b:af:
         8e:cb:a5:ac:05:bb:c6:50:83:e7:c5:1b:ab:83:21:d9:20:71:
         86:19:18:47:e8:39:dd:27:6d:3e:49:bf:26:7c:de:6d:44:11:
         20:68:5e:05:ff:ae:bb:ad:7d:aa:08:e3:33:81:72:9c:6f:5a:
         dc:27:07:51:f1:2a:8a:20:8b:a9:8d:9b:8b:a4:7d:e0:fa:29:
         01:85:20:75:a1:ad:6e:95:c9:aa:21:c2:9b:a1:2e:5d:c9:3c:
         82:3e:41:48:21:7b:f8:c5:37:34:67:8d:0b:20:e5:2b:35:e6:
         54:2c:2d:00:12:57:51:b5:29:70:9a:54:d8:e3:28:04:c5:ff:
         f8:d7:70:be
-----BEGIN CERTIFICATE-----
MIIEnzCCA4egAwIBAgIUD38iFsqzEPxn69WtQajT2CR88tkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzU5YTRiNmM2ZDM3MTNjZmYzNjM2MjA3ZGU5ODM5MDU4
YjUxODE1YjAeFw0yMzEyMjAyMTI1MDdaFw0yNDEyMTgyMTMwMDdaMDMxMTAvBgNV
BAMTKEEwNTc4QTRFQjJFRURDNzFBRTQzMzkwRDFGNEU0ODVDNDBEQzBGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0il1ouWI8z9IrEbG2tvAd647
l0qCd5dA+GWvR4vMXpSqljK48yqk+tooUj6r0YmTOChDC3kbIrWidEdwWqkwVKyI
xXamZtbqBO/35ZJavM1WnqtdcQfxUfkfjbhxSOOlwpmUQDX/HbJl4bSNoV7r3aq0
zZt59FKyy8p1qVHfMQyKVQQyosHG1LRvTIVo+kZLCfcX/TcJZyFVFl4CctcaVRg7
U8vsgORXLhz8ozU9BySKkjlVhzxYEBlhGLr7aCOOdyGlb2iXYc6xE2OykxbWNdRh
z0PukAP8GYf/13vudfFb20HV3wCySewZzvzUEX9l+Gp475QInich2plIXs8vAgMB
AAGjggGpMIIBpTAdBgNVHQ4EFgQUoFeKTrLu3HGuQzkNH05IXEDcDycwHwYDVR0j
BBgwFoAUNZpLbG03E8/zY2IH3pg5BYtRgVswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnN5bmMucnAua2kvcmVwby9taXNha2Fpby8y
LzM1OUE0QjZDNkQzNzEzQ0ZGMzYzNjIwN0RFOTgzOTA1OEI1MTgxNUIuY3JsMGQG
CCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvREVGQVVMVC9OWnBMYkcwM0U4X3pZMklIM3BnNUJZdFJnVnMu
Y2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5bmM6Ly9yc3luYy5y
cC5raS9yZXBvL21pc2FrYWlvLzIvQVMyMDU1OTAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqC0NAAFAw
DQYJKoZIhvcNAQELBQADggEBAMKlKUg7Iqa+s/x37uUt2o1Mm7arqjU008GXkm5H
sl4HXvOUh3Of0HOOlumGdfaWl4NCvtZWYNUWT+5X9eUgdE2Rz7iEXbRVIZ9VB0Sf
Kc7tSQAahude5buD6FnUIeejwkvUv6A9wZnsr7XlraeBHJhtKg+R3w0soEc9SBxr
r47LpawFu8ZQg+fFG6uDIdkgcYYZGEfoOd0nbT5JvyZ83m1EESBoXgX/rrutfaoI
4zOBcpxvWtwnB1HxKoogi6mNm4ukfeD6KQGFIHWhrW6VyaohwpuhLl3JPII+QUgh
e/jFNzRnjQsg5Ss15lQsLQASV1G1KXCaVNjjKATF//jXcL4=
-----END CERTIFICATE-----