Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa
File:                     60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa (raw, json)
Hash identifier:          PGPBzIEYDmpXalaJwiH0jj+4+sidHEeN+XRZjq35dKw=
Subject key identifier:   E4:F0:EB:32:88:DB:AD:B8:9D:13:2B:EE:59:78:92:86:D1:BB:F0:68
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584A10354C4DC25FEF6DF2985380
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     393319
IP address blocks:        77.233.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4c:4d:c2:5f:ef:6d:f2:98:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=fe404ae8-10ac-48a2-b819-ebe6f7646def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:db:ce:1e:12:68:51:b5:82:61:04:8d:71:
                    7d:7d:27:72:86:eb:9d:db:a3:ff:fc:aa:c3:76:c4:
                    c8:8d:ee:ab:2a:36:c2:9f:bb:7e:ea:98:5f:70:e1:
                    21:91:14:f6:6f:7b:c8:3e:94:32:c3:47:ef:b3:53:
                    87:11:6f:86:cc:ed:9c:80:b2:83:9a:d6:d2:3c:2d:
                    32:10:d9:87:92:8e:73:2f:03:d8:a2:db:21:ef:30:
                    2c:8e:3e:75:d5:9c:ce:17:72:1a:11:df:25:ce:0a:
                    fb:ac:c2:20:49:06:5b:67:aa:d5:32:6a:a3:a4:72:
                    f7:e5:51:ad:4a:43:6b:78:43:93:fb:6b:6b:59:cf:
                    a3:cb:a3:63:99:5a:74:85:de:4f:8f:7d:7d:22:d7:
                    9d:79:fb:2d:6a:4a:c9:75:a1:e7:55:c6:23:df:b8:
                    e6:91:3c:b0:96:64:ee:3c:92:91:09:5f:ce:dd:e3:
                    75:56:83:13:3a:20:ad:64:f7:87:41:fd:38:e2:97:
                    3e:a8:7e:f2:03:a5:d3:da:52:38:2a:e9:14:95:f4:
                    03:29:71:b1:fe:ab:2c:55:97:26:9f:91:ea:bd:1a:
                    dd:ae:c1:6d:6c:93:b1:1c:4d:ba:c8:ba:e9:2c:4d:
                    d0:71:5b:c8:f5:de:c1:b6:d2:b0:f4:2c:0d:38:bf:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F0:EB:32:88:DB:AD:B8:9D:13:2B:EE:59:78:92:86:D1:BB:F0:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:56:86:eb:ab:14:92:84:25:06:68:e1:da:22:68:fe:63:
         d0:a4:80:4e:b0:e9:81:18:21:c0:65:4e:54:1a:eb:ad:d6:dd:
         95:c0:f6:36:ad:15:eb:1b:bc:bf:b8:2c:11:1c:96:fe:61:28:
         00:37:87:8e:68:d1:6e:ee:83:df:4e:6d:9d:42:50:6e:0c:64:
         8e:8f:39:66:7d:c0:51:79:83:a0:75:89:14:2a:b1:98:ed:63:
         7f:78:a7:ee:ea:7d:9f:0d:f4:f1:21:f7:12:0b:7b:d6:90:98:
         16:77:89:09:29:c4:26:5c:59:9f:7e:38:e8:67:79:73:65:c9:
         e6:54:46:64:e2:9c:f6:42:42:ae:81:89:32:b6:00:e1:a6:6e:
         a0:34:f8:af:c1:4a:c6:72:28:de:7d:27:0d:ce:00:78:dd:0f:
         e4:f0:6c:88:17:d0:4b:6b:65:7d:5f:ac:7f:ca:f7:fa:53:2d:
         ae:c0:6b:82:62:ca:4b:75:a9:48:11:a7:de:2e:4f:d3:bb:ab:
         f3:57:c7:9a:f8:d3:9f:47:65:f1:1b:46:7d:13:46:ae:e4:25:
         ca:d0:e7:aa:d2:19:3e:69:4a:05:01:3b:ff:dd:00:e9:2e:65:
         24:41:24:d9:d5:a9:7c:5b:9c:e4:68:0c:76:58:e7:fd:dd:17:
         1f:10:01:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUxNwl/vbfKYU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmY0MWY1NWUtN2ZlNi00Yjg4LThkMWItZjNlMGZjNjI1
OWYzMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
ZmU0MDRhZTgtMTBhYy00OGEyLWI4MTktZWJlNmY3NjQ2ZGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoLbzh4SaFG1gmEEjXF9fSdyhuud26P//KrD
dsTIje6rKjbCn7t+6phfcOEhkRT2b3vIPpQyw0fvs1OHEW+GzO2cgLKDmtbSPC0y
ENmHko5zLwPYotsh7zAsjj511ZzOF3IaEd8lzgr7rMIgSQZbZ6rVMmqjpHL35VGt
SkNreEOT+2trWc+jy6NjmVp0hd5Pj319ItedefstakrJdaHnVcYj37jmkTywlmTu
PJKRCV/O3eN1VoMTOiCtZPeHQf044pc+qH7yA6XT2lI4KukUlfQDKXGx/qssVZcm
n5HqvRrdrsFtbJOxHE26yLrpLE3QcVvI9d7BttKw9CwNOL9RnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTw6zKI2624nRMr7ll4kobRu/BoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQx
ZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2UwZmM2MjU5ZjMvNjBlYWM2NmQtYzVhMy0z
ZTAwLWJlOWYtOGQ1MzhiYzk1ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmY0MWY1NWUtN2ZlNi00Yjg4LThk
MWItZjNlMGZjNjI1OWYzLzJmNDFmNTVlLTdmZTYtNGI4OC04ZDFiLWYzZTBmYzYy
NTlmMy5jcmwwHwYDVR0jBBgwFoAUUEBh/iScDEroKQvON2np7BVTLzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQxZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2Uw
ZmM2MjU5ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATek9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIg7VobrqxSShCUGaOHaImj+Y9CkgE6w6YEYIcBlTlQa663W3ZXA9jat
FesbvL+4LBEclv5hKAA3h45o0W7ug99ObZ1CUG4MZI6POWZ9wFF5g6B1iRQqsZjt
Y394p+7qfZ8N9PEh9xILe9aQmBZ3iQkpxCZcWZ9+OOhneXNlyeZURmTinPZCQq6B
iTK2AOGmbqA0+K/BSsZyKN59Jw3OAHjdD+TwbIgX0EtrZX1frH/K9/pTLa7Aa4Ji
ykt1qUgRp94uT9O7q/NXx5r4059HZfEbRn0TRq7kJcrQ56rSGT5pSgUBO//dAOku
ZSRBJNnVqXxbnORoDHZY5/3dFx8QAY4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:02:28 2025 by rpki-client