Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/AS205590.roa
File:                     AS205590.roa (raw, json)
Hash identifier:          kJhIsguZSJFidU0C6po6kO44b962eZGWh+KCdPw6Ccc=
Subject key identifier:   77:76:43:2A:1A:62:FD:DE:E2:FB:C7:9E:AE:BC:E6:47:35:6F:16:F0
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       357C51E0D7FFFBA063023B5B689485C1C683EC24
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/AS205590.roa
Signing time:             Wed 20 Nov 2024 21:30:31 +0000
ROA not before:           Wed 20 Nov 2024 21:25:31 +0000
ROA not after:            Wed 19 Nov 2025 21:30:31 +0000
asID:                     205590
IP address blocks:        2a0b:4340:50::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7c:51:e0:d7:ff:fb:a0:63:02:3b:5b:68:94:85:c1:c6:83:ec:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Nov 20 21:25:31 2024 GMT
            Not After : Nov 19 21:30:31 2025 GMT
        Subject: CN=7776432A1A62FDDEE2FBC79EAEBCE647356F16F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fc:8b:7f:de:8a:b0:17:91:9f:04:0b:98:68:
                    db:9b:e7:db:71:a6:93:57:0d:a4:02:3d:a5:9e:0b:
                    d5:c6:c5:5a:b4:00:74:a3:16:de:a0:57:b0:35:8d:
                    bb:9c:4b:70:d5:e7:57:fa:9f:10:ff:b0:1a:e6:8e:
                    02:39:2f:09:76:cf:c5:70:3c:25:12:4f:81:92:94:
                    0a:b7:98:01:86:98:c1:ac:31:e7:e8:3c:ac:d1:4a:
                    44:50:92:34:fc:f5:1e:bc:14:ef:ee:0d:33:52:94:
                    30:b7:e3:83:be:20:62:12:bd:25:fb:dc:ad:16:c0:
                    b0:6d:61:64:42:ff:13:24:5a:71:5e:60:b6:54:ee:
                    7a:2b:3d:ad:61:58:8e:76:98:d6:07:82:1a:08:10:
                    b1:86:f4:9b:d9:48:5d:76:70:95:05:f4:fa:b0:9e:
                    68:d3:31:ba:55:f6:05:c3:83:63:11:0d:2a:ca:f5:
                    49:36:ec:e3:2c:d7:d8:dc:7d:37:34:e0:2c:1b:38:
                    4d:8a:71:ed:13:ec:5e:f8:75:71:a5:7b:a3:e0:12:
                    8a:35:7f:6a:75:50:13:2d:52:99:fc:ad:f2:07:4f:
                    7b:f8:31:f2:9f:a0:c8:91:33:8f:01:67:b5:40:72:
                    94:9c:2e:43:25:90:1b:42:3a:3b:e6:de:65:15:67:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:76:43:2A:1A:62:FD:DE:E2:FB:C7:9E:AE:BC:E6:47:35:6F:16:F0
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/AS205590.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4340:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:fb:2b:11:f7:85:85:0a:16:8e:4d:df:d1:01:1e:f4:97:56:
         75:a5:29:c6:6e:e4:3a:03:00:2b:4e:ee:70:6b:1e:06:1c:a2:
         5c:9b:8c:cb:d2:c9:86:f7:e5:d8:a2:30:20:72:f3:04:67:88:
         9f:e7:77:d7:bb:58:e4:3e:95:ef:92:ee:1f:f0:a3:73:df:2b:
         fe:05:36:0d:17:fc:31:b4:e0:8e:71:23:d9:18:9c:12:d3:b5:
         ff:f3:0b:a2:a9:9b:6e:bf:7a:aa:28:e2:90:fe:d9:f4:fa:74:
         1f:1d:b3:e3:c0:c3:b9:d3:0e:1e:0b:35:9e:0e:02:69:fd:af:
         79:e9:99:26:32:13:72:d3:19:6d:f9:c0:a8:f5:03:fc:12:a0:
         54:73:0e:6a:0e:cd:40:5c:b6:6c:d4:9f:97:62:88:2e:23:98:
         fb:0b:8a:e4:88:18:ea:97:f2:69:a4:06:1d:97:f8:6b:8c:ab:
         27:09:44:45:38:bc:f9:ce:47:95:0e:ba:55:bd:8f:cd:23:d4:
         11:52:72:dc:97:b9:23:65:38:d2:1c:83:fe:df:f6:06:2c:1b:
         e4:c8:e1:01:5d:e7:13:b7:dc:af:04:16:7e:20:45:a0:bd:4c:
         80:33:8c:ca:f5:2e:52:64:e9:bc:c7:93:96:92:30:86:be:ab:
         ac:44:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----