Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/370c07f4-802e-3298-a524-fb933d9a5536.roa
File:                     370c07f4-802e-3298-a524-fb933d9a5536.roa (raw, json)
Hash identifier:          utzQxAv0smH6tNKbTMjDtVU8igw4RQXLlUnLhWGoi1A=
Subject key identifier:   6A:C2:4F:F8:D0:63:EC:27:70:D7:78:31:0D:7A:C4:86:B4:85:F5:2A
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F43285849BB0F73CCC812FE7341D5C8A0
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/370c07f4-802e-3298-a524-fb933d9a5536.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     393319
IP address blocks:        77.233.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:73:cc:c8:12:fe:73:41:d5:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=15c069c2-3b37-48e5-9e96-544d08db9f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:91:a8:fc:a8:ad:af:ab:82:91:d8:68:56:
                    74:1f:10:c2:e2:34:92:f3:13:63:17:34:13:b8:2f:
                    13:64:41:ac:05:c9:19:39:ab:ae:b7:17:82:68:3e:
                    22:5e:94:3e:ef:6d:af:35:d4:eb:e1:f3:e0:05:21:
                    c0:16:b6:29:0f:7f:d9:17:c5:71:35:4a:af:23:22:
                    a4:2a:ec:ce:e9:21:65:f2:5a:b0:a8:c1:16:0c:01:
                    a5:db:9c:2c:09:c2:9b:e3:9f:3a:db:fe:c3:89:b2:
                    2d:12:06:79:ab:c6:39:0d:89:0a:83:89:52:c4:34:
                    54:99:b7:36:79:42:17:9a:6d:94:51:b8:89:9d:34:
                    c3:fe:5b:e9:de:3d:e9:f8:1a:14:8d:8f:06:54:00:
                    d9:9f:4b:4b:47:9a:a6:65:c6:6a:4a:9e:dd:b3:92:
                    d1:dd:43:0d:bb:f8:5a:55:c1:27:1b:27:7f:95:9c:
                    f0:bc:10:c5:99:be:e5:eb:67:d9:77:16:52:99:6c:
                    36:9c:b3:c5:52:7d:7f:87:c0:aa:7c:fa:f7:14:71:
                    ac:4d:53:7a:d6:fd:81:7d:81:c5:84:b5:3e:f0:f3:
                    3a:73:b2:54:1f:d8:d4:5d:8e:a1:00:77:18:63:ef:
                    0c:dc:d7:3f:90:80:34:28:7a:0f:2c:36:6b:6b:bf:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C2:4F:F8:D0:63:EC:27:70:D7:78:31:0D:7A:C4:86:B4:85:F5:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/370c07f4-802e-3298-a524-fb933d9a5536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:e5:b4:d3:8f:9b:da:27:61:8e:f0:2d:ec:6f:50:dd:ec:
         63:ee:3f:19:80:9e:ea:4f:d5:56:10:ca:07:f9:78:1f:3b:76:
         29:be:4a:63:fe:09:f2:3f:3b:8b:c8:2f:b3:d8:8e:f9:3f:9b:
         09:4f:53:f5:60:6c:03:0a:6d:67:af:07:e3:73:ac:da:dd:6d:
         f0:59:51:64:a8:13:aa:ac:62:ba:2b:c5:20:95:41:86:2b:5a:
         77:96:1e:6d:55:d9:66:89:61:2b:64:c3:35:11:c5:ef:e8:e8:
         d6:57:af:e7:ef:2d:1e:f8:d9:09:85:8a:7e:5f:86:d9:25:cb:
         2d:a9:df:09:6e:dc:06:f8:c8:4e:d2:e0:e2:a7:5d:2e:7e:53:
         fe:9e:6f:28:3a:94:4c:13:d6:7e:3b:bd:3b:df:1b:f2:a0:2b:
         fc:42:83:74:f2:84:a0:bb:74:b9:d8:fe:c3:4a:0d:ef:e4:45:
         74:51:81:8c:fb:b4:f3:d9:c8:a1:c2:f7:f5:64:52:07:60:00:
         12:67:db:47:20:a8:87:d2:73:29:8e:c3:28:20:8a:ab:94:1a:
         99:b4:08:1e:ef:d7:12:39:b7:30:70:37:78:23:87:bf:7b:64:
         61:96:24:96:8c:89:59:16:3d:f4:7e:76:3b:b0:9f:b1:95:2d:
         2c:1f:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:09:57 2025 by rpki-client