Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/370c07f4-802e-3298-a524-fb933d9a5536.roa
File:                     370c07f4-802e-3298-a524-fb933d9a5536.roa (raw, json)
Hash identifier:          7Ia8OY/nrXH02aH9P6RayH9JF3nfid3ESI2i/9HCHTQ=
Subject key identifier:   BB:47:6D:D3:A9:8F:20:06:24:AC:E1:5E:5D:63:65:D9:0A:67:FC:D0
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584D39CF8DF9D4D88AA6640E81C0
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/370c07f4-802e-3298-a524-fb933d9a5536.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     393319
IP address blocks:        77.233.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:8d:f9:d4:d8:8a:a6:64:0e:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=cced7f9f-ee41-4cdf-983a-6cf956252440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:56:03:8e:aa:da:7b:aa:fc:f3:ed:d7:6f:
                    ba:60:58:62:aa:50:ff:41:e8:59:b3:eb:9d:ec:34:
                    fb:63:f2:8c:63:a8:e3:07:5d:9f:7a:86:f9:48:ab:
                    85:fe:6a:d2:9d:f8:07:01:ac:b6:21:2a:77:27:97:
                    8a:41:ca:58:5a:62:7f:4d:47:93:f6:99:64:ea:9d:
                    48:db:88:de:72:a8:d8:59:3e:fc:09:69:59:0e:16:
                    d9:77:fb:ca:99:a3:41:7d:84:1f:6e:14:0f:12:06:
                    8e:b1:c3:2d:67:37:3c:39:e8:e3:23:39:c2:43:b9:
                    0a:8e:90:f6:05:68:68:f1:7c:fa:d6:79:d3:63:65:
                    10:b2:61:bc:b3:b4:6d:1a:47:e5:99:10:01:10:89:
                    e3:a7:3d:e9:92:ef:98:d8:6a:1b:b8:b1:5a:68:21:
                    73:9e:f0:dd:4f:2c:41:42:bd:48:18:31:78:e2:0b:
                    f3:c5:8f:e9:26:49:dc:f6:d4:33:14:81:c3:0e:eb:
                    59:b6:f0:16:c2:55:84:b8:98:e0:c8:02:a2:a6:97:
                    c9:7a:76:bd:e5:5d:11:d3:21:7a:74:f2:2b:18:ab:
                    71:88:0d:22:01:4f:bd:20:77:25:3d:4e:49:8a:9d:
                    05:33:6c:d5:95:71:da:30:be:e7:a1:f2:5a:fa:6b:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:47:6D:D3:A9:8F:20:06:24:AC:E1:5E:5D:63:65:D9:0A:67:FC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/370c07f4-802e-3298-a524-fb933d9a5536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:a1:f5:b3:d1:4a:da:43:53:6d:20:c5:85:ba:1a:bf:a7:62:
         0e:d5:73:30:a2:54:25:6f:fc:08:d0:a5:04:ce:8e:1d:20:31:
         43:f1:d3:03:88:ed:a1:85:e3:a3:5d:5e:06:f8:c3:2e:3a:db:
         e2:c0:ea:c7:d2:27:f3:c4:99:2e:79:0a:89:71:5c:a2:b2:85:
         ee:e4:23:89:53:72:f7:67:5c:6d:69:3c:be:9a:10:40:4a:9d:
         9d:f4:8a:94:33:db:72:e6:1c:50:4a:94:ee:bd:6a:47:d2:c7:
         ab:22:b3:19:97:5e:91:74:2c:0a:3c:e0:7e:cb:6d:d4:d5:ba:
         18:80:5e:9e:73:d0:7a:88:ec:c2:3f:c6:e7:67:52:9a:e2:8e:
         2d:06:46:fd:1f:e7:fe:59:59:b4:f0:5c:13:4d:6c:5f:14:be:
         58:c9:24:dc:62:68:99:00:f0:f5:07:93:0f:a6:75:4f:12:73:
         1c:14:aa:90:9b:8d:5d:b8:09:13:ec:3b:de:2e:8c:1a:44:11:
         df:52:98:5b:ff:7d:fe:e5:20:95:ae:89:fc:5f:e3:5f:a6:60:
         34:35:8b:69:cb:7d:60:0d:df:47:e8:29:7b:a4:0a:10:c3:11:
         c5:57:58:31:0f:bc:9b:1c:c8:ed:b3:d3:79:fb:5a:2a:19:94:
         42:6a:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:07:13 2026 by rpki-client