Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9e579458-dbb1-33ac-9da5-e24468cbf0eb.roa
File:                     9e579458-dbb1-33ac-9da5-e24468cbf0eb.roa (raw, json)
Hash identifier:          57y4ItjWv0anJbvMb32bQ/T+p7KMM1By6VP//OMzKrA=
Subject key identifier:   12:3D:6E:86:01:B0:E5:36:39:83:F9:B8:0D:5A:1B:B5:1D:73:08:BD
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584D7A052C06C4DC2ABFF2C151B0
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9e579458-dbb1-33ac-9da5-e24468cbf0eb.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     393319
IP address blocks:        77.233.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:2c:06:c4:dc:2a:bf:f2:c1:51:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=b3204533-eed9-4761-9896-cad5f4b62a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:ba:ff:01:5c:ba:76:0b:a1:b4:31:ff:d4:
                    89:5e:be:53:61:72:13:75:1a:ff:62:f9:b2:b9:c8:
                    50:6e:fc:8c:42:db:2a:76:ac:39:75:cd:ef:1a:70:
                    c6:53:aa:ad:5b:50:6f:e6:82:23:92:7f:11:58:42:
                    82:c0:ab:3d:b4:91:a3:c3:e1:45:de:89:de:b1:9e:
                    ff:c4:04:bd:78:42:b7:9f:97:02:35:f2:11:30:24:
                    df:43:dd:c0:7b:32:d8:b8:39:d3:26:01:4e:06:a7:
                    52:59:e8:de:67:30:47:6f:80:b0:75:e7:6b:b9:1f:
                    67:6f:0c:95:bb:e0:33:9d:ac:8e:fd:c1:41:65:e9:
                    c0:38:2a:c4:a2:12:81:30:f3:b9:a0:ed:f0:bf:4b:
                    23:55:14:a8:fd:64:10:ce:2b:ae:1e:de:45:ad:bc:
                    c5:d0:a7:b8:84:60:38:28:c5:a7:94:18:30:28:7f:
                    17:25:e4:86:cd:a8:ab:be:20:58:3a:01:cb:e6:7c:
                    a6:f3:27:1c:bc:d0:58:00:dc:80:f1:16:9e:d9:51:
                    7d:ed:81:13:e6:7a:b5:4a:18:79:33:06:d6:c3:e5:
                    54:fc:a2:de:26:f8:1b:85:10:a2:83:2e:bd:06:1c:
                    29:e5:b4:6d:4e:74:f4:3e:5d:5d:44:cf:17:4c:d4:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:6E:86:01:B0:E5:36:39:83:F9:B8:0D:5A:1B:B5:1D:73:08:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9e579458-dbb1-33ac-9da5-e24468cbf0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:16:59:4a:e1:10:22:09:6f:39:75:ab:c1:8a:ed:36:0c:4e:
         66:b0:63:57:80:fa:5e:35:4e:ff:b2:6d:c2:d6:e8:09:6f:94:
         5f:12:74:74:d8:0f:f1:df:3e:d8:37:c0:70:87:02:74:7d:b2:
         fc:17:42:c8:19:99:b2:74:ba:c8:73:14:6e:ff:90:83:b6:4f:
         b1:fb:20:de:18:e2:cc:b4:b0:4b:92:fd:a9:ce:e5:78:e7:ab:
         f9:2e:6e:4f:46:27:9f:64:b5:d8:5a:1d:43:16:1e:6c:63:9b:
         1a:da:d4:12:b4:9a:59:e3:d6:f8:ac:d4:a2:be:23:d2:97:5f:
         93:a1:00:20:74:fc:95:b4:f6:b9:67:47:ec:09:a0:9b:5c:90:
         09:aa:c4:63:02:47:a2:a6:3a:07:c2:0b:d5:1b:b9:86:03:36:
         cb:93:e2:20:df:a3:84:84:38:b3:ce:d5:8c:80:99:6d:05:8c:
         09:7d:0b:20:66:bc:ea:6b:7e:77:8e:95:54:b5:2f:ab:50:f7:
         01:62:78:52:7b:6a:b4:8a:1a:f4:33:fc:86:2e:be:43:2a:55:
         94:b4:c9:59:10:33:ea:65:6b:f7:22:a7:32:06:67:26:67:f0:
         a7:36:6c:0c:35:bd:f9:dc:a8:66:ba:7d:3d:ad:22:6e:c7:3d:
         0f:7d:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:22 2026 by rpki-client