Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/09a368fe-61a9-3915-8d1b-9b279c24f5ae.roa
File:                     09a368fe-61a9-3915-8d1b-9b279c24f5ae.roa (raw, json)
Hash identifier:          gtBjc90BMSUbx7mk0NXRJur4SyQFrg/pmu4JANRwcQ0=
Subject key identifier:   B5:54:1A:A4:E2:58:0F:B5:8A:D3:18:32:4A:F9:6F:9E:B2:55:65:BD
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584C5A96926BC8EB404F9EE30390
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/09a368fe-61a9-3915-8d1b-9b279c24f5ae.roa
Signing time:             Tue 30 Dec 2025 02:00:30 +0000
ROA not before:           Tue 30 Dec 2025 02:00:30 +0000
ROA not after:            Mon 30 Mar 2026 01:00:30 +0000
asID:                     393319
IP address blocks:        77.233.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5a:96:92:6b:c8:eb:40:4f:9e:e3:03:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Dec 30 02:00:30 2025 GMT
            Not After : Mar 30 01:00:30 2026 GMT
        Subject: CN=765ff085-96e3-468a-a8c9-ea4edbdd12f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:70:b3:14:45:82:e9:1c:cc:8e:f8:8e:1c:
                    77:07:43:2e:5d:a5:0e:0b:8c:d7:f6:16:d9:4d:a7:
                    a7:ff:0c:5e:35:14:15:09:38:e7:12:d3:93:69:c0:
                    f5:7c:9a:28:f9:bb:79:e8:8f:21:25:03:12:2f:f0:
                    7c:d8:0b:ef:42:01:01:ad:fa:ad:ea:c2:41:03:11:
                    37:4f:cc:b4:06:03:f7:a8:18:99:4a:a1:20:cc:9f:
                    40:ed:9a:d4:66:c8:ba:6e:c1:75:fe:ef:c9:2a:0f:
                    c0:bc:41:ed:ef:53:5e:11:c1:c8:a8:8f:88:27:6d:
                    84:f1:85:52:2e:ea:89:8d:3a:e3:0f:35:78:6b:ba:
                    18:c2:91:69:e4:45:73:88:ed:63:00:23:8f:f6:99:
                    66:27:87:eb:da:3a:77:fc:41:29:5f:77:64:36:fd:
                    1b:7c:57:16:d7:bf:a4:ce:92:67:c3:4c:64:86:16:
                    2f:46:6b:ca:83:69:d6:ad:8e:6e:d6:eb:f7:1b:af:
                    d3:24:ef:f3:b9:7b:d3:b7:9c:8f:d3:d2:5d:11:5b:
                    13:ff:e1:a2:e1:63:de:2f:16:43:03:b0:2f:e6:f5:
                    fd:fc:b8:15:77:42:b8:d3:33:fc:49:81:ab:ef:e2:
                    fb:9f:ac:19:29:03:55:15:36:9e:2a:a2:eb:7d:fa:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:54:1A:A4:E2:58:0F:B5:8A:D3:18:32:4A:F9:6F:9E:B2:55:65:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/09a368fe-61a9-3915-8d1b-9b279c24f5ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:51:a5:3f:bc:63:65:72:39:3c:a4:bc:59:f6:40:1a:0e:12:
         24:f4:17:6a:af:70:42:d3:b9:28:9e:b6:d0:a7:8e:b7:5e:3a:
         cd:1e:33:92:38:83:5d:1b:26:08:de:0b:45:7e:56:6a:c6:ab:
         45:74:30:52:bc:81:68:2c:21:e3:61:5c:26:dc:fa:86:ad:10:
         5e:d3:62:1b:1e:a0:a9:46:a1:7b:ef:98:28:b0:ad:be:ff:20:
         b7:79:bf:c1:b2:22:f9:c3:78:82:83:84:ec:54:40:9b:3b:5e:
         cf:ae:82:df:65:5d:23:82:9c:0a:cd:ff:1a:9b:54:a0:73:e0:
         8b:4e:ac:e0:84:06:3a:1a:76:02:29:e3:94:ad:0e:34:9a:31:
         bd:76:55:fd:3c:2c:52:99:8d:0f:96:f3:4e:0f:d3:1a:62:3d:
         a4:e5:36:ee:ca:87:72:40:27:aa:ec:ed:70:33:48:95:10:3b:
         78:9a:74:fa:97:07:cb:72:e1:05:82:ba:23:1d:eb:92:fd:12:
         76:c0:8d:56:fb:ff:ac:7a:9e:24:eb:6b:be:21:e5:1d:58:a5:
         78:d2:cb:3d:5b:18:53:1a:73:01:42:0d:00:03:cf:d8:29:b5:
         29:fb:c2:30:e5:ed:25:be:53:16:67:f6:19:7d:ca:83:57:ef:
         e8:3d:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:23 2026 by rpki-client