Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/b21761e2-2695-3ce3-a9c8-bcaf07cfecc6.roa
File:                     b21761e2-2695-3ce3-a9c8-bcaf07cfecc6.roa (raw, json)
Hash identifier:          M5NLW8J3I51zD31ZrB9JngqGVgNOaDgz0ROAL5YRHQ0=
Subject key identifier:   98:97:95:33:27:BC:18:4E:3C:51:3D:1B:CB:B1:0B:82:9C:22:CE:A9
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F432858497F09A5F2838FD1E8057F5880
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/b21761e2-2695-3ce3-a9c8-bcaf07cfecc6.roa
Signing time:             Sat 12 Apr 2025 01:00:48 +0000
ROA not before:           Sat 12 Apr 2025 01:00:48 +0000
ROA not after:            Fri 11 Jul 2025 01:00:48 +0000
asID:                     393319
IP address blocks:        77.233.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:a5:f2:83:8f:d1:e8:05:7f:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Apr 12 01:00:48 2025 GMT
            Not After : Jul 11 01:00:48 2025 GMT
        Subject: CN=f1720b88-edda-4d37-a91c-d0bbe08f7f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:53:d0:6a:ec:52:9d:14:e3:ea:93:51:51:0f:
                    69:b7:a1:81:fd:5a:7e:87:7d:b7:65:9d:c9:7d:01:
                    33:63:17:dc:88:f0:e0:a5:8f:94:be:c5:75:d0:69:
                    ee:04:75:e0:b0:8e:e5:59:e6:e7:86:e3:8c:9a:22:
                    eb:8e:f1:84:df:b6:68:fc:8d:ee:4f:73:1d:d8:49:
                    59:81:a7:4f:f7:cc:a0:09:d1:9a:c5:5e:43:96:6d:
                    00:59:04:4a:18:f0:e6:60:10:70:39:d3:8c:a7:e5:
                    a7:d6:1f:a5:71:f0:33:3c:9c:f6:e2:13:06:86:1d:
                    4f:d5:f8:3e:d8:25:1a:4f:22:0e:a2:74:28:34:d1:
                    53:ea:c5:c1:d7:83:49:1a:2b:45:25:c9:6f:3b:1d:
                    a8:09:ef:2d:21:51:f3:cd:38:be:2d:eb:37:0f:96:
                    f0:25:fe:75:64:72:f9:92:83:6c:81:86:d0:30:91:
                    ee:d3:db:91:03:ea:a8:4e:94:6f:b3:05:c1:ee:7d:
                    ed:0e:3c:81:ba:93:66:ad:12:c9:09:cd:d6:78:f9:
                    cf:59:16:4c:fd:1e:d0:7e:93:32:f4:9d:18:2f:fd:
                    d5:a0:f8:a2:0e:a8:b3:b0:b4:ad:c3:34:5b:5b:55:
                    4f:b1:e4:73:90:30:cb:7f:48:13:11:30:75:49:d5:
                    f0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:97:95:33:27:BC:18:4E:3C:51:3D:1B:CB:B1:0B:82:9C:22:CE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/b21761e2-2695-3ce3-a9c8-bcaf07cfecc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2d:26:38:d1:e4:d7:6c:27:b1:8b:35:b3:a3:48:d3:0f:75:
         e2:5c:29:e9:2d:e8:81:c2:74:9e:75:40:58:66:ee:6e:05:93:
         59:ab:4c:ef:bb:c7:9a:62:50:b2:9b:35:b3:e9:91:d5:ce:c4:
         1c:8f:e5:bc:0d:90:71:b5:6e:4e:76:e6:a7:b2:c4:46:45:17:
         c9:ff:0b:e5:9b:1a:65:da:91:18:03:9e:54:92:f5:63:f8:08:
         2a:c9:9e:2c:72:26:40:03:92:22:1e:d5:f4:09:a4:c5:f3:b9:
         19:48:de:c8:26:1d:0a:c9:d7:59:06:ce:4d:de:f5:38:ad:c7:
         de:f8:57:0f:9e:89:9a:65:3e:40:cb:21:4c:15:d9:e1:f7:53:
         0d:fe:03:ac:d9:13:26:7b:b2:24:97:e7:74:97:c0:f3:fd:2d:
         b7:f2:5b:ee:09:d5:68:68:c1:d6:3f:89:80:7a:3f:a9:d3:07:
         23:1e:f5:66:2c:34:01:8f:54:3f:e8:c9:05:c9:e1:a3:6c:0f:
         20:3e:35:89:b9:0b:6e:ad:8d:d6:5f:71:77:e8:af:e1:26:d8:
         0c:6f:4b:0c:32:c2:de:63:a6:a4:f1:e9:e2:b8:8e:f6:60:80:
         aa:86:a8:31:33:4c:f1:9b:5d:37:01:ec:ff:ca:3e:60:7f:78:
         bc:c1:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:04:10 2025 by rpki-client