Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa
File:                     60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa (raw, json)
Hash identifier:          Nif2T9Q/3DNCY2m+tQzxbg6KTGg2ZM2y9wIJqaJ5Piw=
Subject key identifier:   1E:67:E3:DF:C4:72:7E:AE:F2:BC:8A:16:CE:37:71:F2:A0:B0:9B:BA
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584D91C0153C7B46557321F47100
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     393319
IP address blocks:        77.233.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:15:3c:7b:46:55:73:21:f4:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=e1024155-b358-4ed5-a275-aea293040464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:fe:a5:60:38:87:6f:5c:fd:cb:e2:7a:54:
                    cd:12:af:e7:3b:4f:b8:a5:6f:84:04:10:9c:96:5a:
                    7c:11:6f:6c:00:1c:24:b9:f7:b0:17:89:fd:fc:28:
                    ad:60:a1:77:10:29:6e:59:06:18:a7:5c:78:4f:51:
                    b8:ca:32:b0:77:20:8f:63:de:d6:49:ea:86:a9:9d:
                    21:51:b3:8e:16:89:49:e6:39:14:e7:7b:e2:df:1a:
                    44:0a:f0:65:66:8b:96:a3:68:84:f1:a9:a2:1d:75:
                    36:1b:a8:ac:d0:db:cb:8a:4f:df:06:88:16:b2:f5:
                    68:53:4f:b3:e4:be:a5:2b:c2:47:8c:5e:44:f3:15:
                    00:6f:71:de:57:6e:97:a1:e2:af:99:f1:60:cc:bb:
                    7c:a3:9d:75:37:c9:24:77:f2:9d:10:3e:71:d6:50:
                    94:c0:15:bf:22:e8:a7:16:5f:88:6d:b8:7f:dc:ff:
                    7c:90:2a:ad:c3:8e:7e:17:5c:b4:db:b5:e0:bd:89:
                    94:9f:12:7a:3d:16:bf:9c:9a:8f:ae:48:c1:9d:e6:
                    66:89:17:96:26:41:1a:84:b2:10:c0:71:f8:b8:81:
                    1c:6a:ff:8b:bf:f4:21:52:95:5d:00:db:a2:29:b4:
                    14:a8:a8:bd:1c:04:84:09:3e:73:e1:2d:b5:9d:14:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:67:E3:DF:C4:72:7E:AE:F2:BC:8A:16:CE:37:71:F2:A0:B0:9B:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:4c:a8:d8:28:cc:99:d1:0c:aa:fe:96:9b:7a:66:2b:b2:b6:
         a4:c8:21:3f:2b:e0:89:ea:b3:f7:11:a0:90:f5:58:56:6b:bf:
         aa:66:20:e5:8a:62:5c:5e:79:93:ac:4e:22:64:ae:71:9a:3c:
         a2:1a:7a:f5:ac:e3:a1:5a:09:f0:60:75:ce:3d:67:ab:88:f3:
         84:5e:82:b3:3f:7c:cf:d9:a2:e6:d1:ad:55:7f:72:ca:19:14:
         9d:16:4f:fa:78:79:29:46:fa:77:b9:13:a7:f2:76:bb:de:61:
         e3:f4:1c:f6:52:6b:05:a8:b0:37:74:55:91:54:43:93:19:ac:
         2f:2c:92:56:dc:67:37:b1:88:f4:c3:19:ae:72:0a:dc:f8:b0:
         9f:7f:87:13:ae:d3:77:8e:35:5c:33:e9:30:9a:73:3f:81:e2:
         14:4c:cf:72:17:12:76:8e:b2:07:c5:9d:e9:b5:d5:c4:d0:9f:
         55:0f:a9:66:5b:4e:97:02:1f:24:c5:95:93:8a:46:bb:06:ba:
         b8:1d:d3:9c:bf:4c:b5:fb:fc:ef:77:6d:55:10:cb:5d:cc:5e:
         cb:e0:e6:24:88:62:bf:53:68:d2:86:08:a0:9c:e0:d9:8a:f9:
         60:b4:20:3c:51:c2:30:35:e4:d2:05:7d:15:f8:ba:f3:bc:ca:
         e4:59:b2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:05:52 2026 by rpki-client