Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/ce9a12c6-a0dc-36b4-a2a4-b99dcf92c5d4.roa
File:                     ce9a12c6-a0dc-36b4-a2a4-b99dcf92c5d4.roa (raw, json)
Hash identifier:          H08TLxg3fEIsG1QF9OCdWdjS3LEjAme1jdIA55NOXdY=
Subject key identifier:   48:C6:B8:8E:51:22:49:1F:43:35:02:45:A6:45:45:CC:A5:5F:1E:99
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F43285849BB0F7399D498654FCD51E0C0
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/ce9a12c6-a0dc-36b4-a2a4-b99dcf92c5d4.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     393319
IP address blocks:        77.233.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:73:99:d4:98:65:4f:cd:51:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=167705ee-567d-46c6-89f9-93fa68ae1fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:28:d0:02:d8:ac:d6:7b:ed:6b:72:b6:0e:
                    3f:3b:dc:ba:ef:49:38:74:3f:93:09:a8:ce:63:8f:
                    6d:18:90:6d:d2:ad:57:6b:58:c0:2b:28:da:5b:24:
                    24:df:48:f9:f3:e2:c1:f2:12:e2:6d:47:5c:30:5f:
                    19:c7:06:3f:fa:26:6a:cb:1f:cb:77:fd:7c:00:71:
                    23:67:74:1f:ef:81:90:49:c1:fd:27:24:10:ec:9c:
                    6d:c3:83:ff:28:16:55:55:32:98:42:71:43:26:6d:
                    39:2d:27:00:7b:7b:fe:6f:8f:e9:4b:29:5e:c6:81:
                    28:38:16:09:15:0b:e2:c6:f6:4b:fc:bd:fa:7d:0d:
                    94:d6:87:59:3f:1a:83:7d:d8:ad:ef:09:07:a8:c1:
                    11:dd:78:54:c4:dc:25:54:43:4d:6e:79:d5:1b:c2:
                    14:f1:9c:40:75:c6:e6:c8:26:28:1b:eb:c1:63:a1:
                    09:9d:78:2b:76:bc:aa:82:c2:c5:f1:db:f8:80:99:
                    c3:31:28:58:ed:49:e7:94:42:0d:18:2b:b9:f1:80:
                    76:a0:83:e7:9e:82:78:22:3f:e5:cd:c4:ac:20:d2:
                    94:91:b6:b3:1a:00:7a:ed:2a:f1:50:78:d2:78:f0:
                    68:76:ce:43:8e:97:0c:92:72:28:78:b2:3a:e3:02:
                    0b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C6:B8:8E:51:22:49:1F:43:35:02:45:A6:45:45:CC:A5:5F:1E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/ce9a12c6-a0dc-36b4-a2a4-b99dcf92c5d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0a:7e:7a:bc:45:ce:61:42:8d:e8:ba:ef:98:82:e8:b5:5d:
         80:ad:84:d1:f9:5b:8d:d1:69:d0:32:33:c8:1f:d0:c7:9a:aa:
         ad:39:04:3f:81:8b:30:4e:e0:37:5f:e4:f5:fa:c2:f7:ed:c3:
         5e:ab:5c:e3:5f:58:8a:f6:21:8b:c7:b7:15:2f:00:44:bf:90:
         eb:57:f3:dd:94:6d:70:f1:5e:25:ed:4a:1f:c4:de:ed:cf:01:
         f7:d1:5a:1c:00:52:4b:5f:d7:32:c8:ae:e7:ab:93:b4:9c:9f:
         f1:60:a4:aa:8c:14:32:f4:2b:eb:98:a5:d6:d7:a2:c1:85:a2:
         96:29:e5:8d:9e:bf:50:2b:14:b8:b9:2a:58:8f:c1:e8:47:7e:
         f5:44:21:51:33:b8:1c:1b:dc:55:ab:39:4b:bd:0f:fc:34:4c:
         10:73:ab:a1:ef:e2:ba:d1:d8:0d:82:58:7f:03:28:30:29:39:
         b3:4f:f1:3b:92:1b:94:71:e0:09:64:e1:70:1b:6f:6a:20:1e:
         be:63:65:f6:a9:71:2f:05:66:34:8f:fd:67:1d:de:58:89:54:
         84:8a:16:55:67:96:da:f7:b7:ef:4e:9e:72:04:7a:e9:39:c4:
         57:ee:2e:6f:b5:60:d6:03:ee:5d:74:19:d0:a5:1c:8b:55:6a:
         27:d4:21:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3OZ1JhlT81R4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmY0MWY1NWUtN2ZlNi00Yjg4LThkMWItZjNlMGZjNjI1
OWYzMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk
MTY3NzA1ZWUtNTY3ZC00NmM2LTg5ZjktOTNmYTY4YWUxZmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP8o0ALYrNZ77Wtytg4/O9y670k4dD+TCajO
Y49tGJBt0q1Xa1jAKyjaWyQk30j58+LB8hLibUdcMF8ZxwY/+iZqyx/Ld/18AHEj
Z3Qf74GQScH9JyQQ7Jxtw4P/KBZVVTKYQnFDJm05LScAe3v+b4/pSylexoEoOBYJ
FQvixvZL/L36fQ2U1odZPxqDfdit7wkHqMER3XhUxNwlVENNbnnVG8IU8ZxAdcbm
yCYoG+vBY6EJnXgrdryqgsLF8dv4gJnDMShY7UnnlEINGCu58YB2oIPnnoJ4Ij/l
zcSsINKUkbazGgB67SrxUHjSePBods5DjpcMknIoeLI64wILtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjGuI5RIkkfQzUCRaZFRcylXx6ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQx
ZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2UwZmM2MjU5ZjMvY2U5YTEyYzYtYTBkYy0z
NmI0LWEyYTQtYjk5ZGNmOTJjNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmY0MWY1NWUtN2ZlNi00Yjg4LThk
MWItZjNlMGZjNjI1OWYzLzJmNDFmNTVlLTdmZTYtNGI4OC04ZDFiLWYzZTBmYzYy
NTlmMy5jcmwwHwYDVR0jBBgwFoAUUEBh/iScDEroKQvON2np7BVTLzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQxZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2Uw
ZmM2MjU5ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATek2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEcKfnq8Rc5hQo3ouu+Ygui1XYCthNH5W43RadAyM8gf0Meaqq05BD+B
izBO4Ddf5PX6wvftw16rXONfWIr2IYvHtxUvAES/kOtX892UbXDxXiXtSh/E3u3P
AffRWhwAUktf1zLIruerk7Scn/FgpKqMFDL0K+uYpdbXosGFopYp5Y2ev1ArFLi5
KliPwehHfvVEIVEzuBwb3FWrOUu9D/w0TBBzq6Hv4rrR2A2CWH8DKDApObNP8TuS
G5Rx4Alk4XAbb2ogHr5jZfapcS8FZjSP/Wcd3liJVISKFlVnltr3t+9OnnIEeuk5
xFfuLm+1YNYD7l10GdClHItVaifUIeY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:54:07 2025 by rpki-client