Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/a3c85edf-dd91-351b-8eb2-590efdd198be.roa
File:                     a3c85edf-dd91-351b-8eb2-590efdd198be.roa (raw, json)
Hash identifier:          GLrMllVmwGbftDmJO3O5I6WVjBEw/AQL1EMcsjXWCUI=
Subject key identifier:   33:13:0F:7E:6F:B7:D8:6F:EB:BE:DC:F8:CC:78:65:32:37:29:94:3A
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584F03A78CA5153FBFA9C72BEC40
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/a3c85edf-dd91-351b-8eb2-590efdd198be.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     393319
IP address blocks:        77.233.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:8c:a5:15:3f:bf:a9:c7:2b:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=9a44daf5-8b85-405b-b4e5-6d7f6d82a9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:c3:b9:b6:b5:79:c5:f3:be:90:67:ed:bb:
                    a6:86:47:2c:4d:2f:68:8c:27:80:c0:0e:8f:7d:99:
                    e7:3e:66:3f:13:67:f3:22:4c:4d:1a:ce:36:2b:e9:
                    1a:a7:9f:93:74:d4:6b:11:3c:8a:a5:6b:9e:75:66:
                    d5:d3:1d:e8:bf:d6:32:8a:4e:9a:e4:f6:4d:41:d1:
                    d4:68:2d:ac:b5:29:53:b7:1b:20:a3:9c:87:39:78:
                    3d:f9:61:81:cd:36:fe:d5:da:cb:08:98:c9:4e:67:
                    e8:d5:6f:14:f4:b4:47:83:00:0a:57:aa:0a:08:4e:
                    0c:70:bf:f0:59:70:ba:8a:e6:ec:c6:c3:b1:3b:01:
                    8d:05:b5:c5:d8:28:46:ce:7f:39:99:ef:e1:13:0a:
                    94:37:3b:2b:9a:4b:21:e1:8b:fc:af:b8:a1:73:9e:
                    20:9e:db:96:94:97:fb:61:79:5c:ee:21:9d:21:d2:
                    44:16:c8:e6:34:6d:ba:f8:5f:d4:74:29:6c:68:33:
                    c8:b0:b4:4c:21:17:97:ba:60:e6:c1:c2:20:69:1e:
                    53:3c:70:e4:3f:3f:42:c6:32:63:ef:50:c0:20:ef:
                    87:40:4a:74:26:4b:e7:4d:de:59:15:a9:4a:bb:50:
                    a7:26:5d:5b:45:16:f2:fb:34:e4:03:56:69:fb:0e:
                    56:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:13:0F:7E:6F:B7:D8:6F:EB:BE:DC:F8:CC:78:65:32:37:29:94:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/a3c85edf-dd91-351b-8eb2-590efdd198be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:00:a6:d7:d0:58:ed:b7:c5:0e:e5:35:03:05:b6:ef:3f:
         3d:79:49:51:ef:7e:55:cd:32:94:e3:e1:98:16:ab:3d:40:e5:
         89:d2:07:d1:4d:4f:60:73:1d:ee:ac:bd:8e:fd:da:09:d8:04:
         73:2e:f1:36:90:eb:69:af:20:0a:de:fb:9a:60:b8:48:fd:1f:
         88:6d:28:fe:cb:17:2b:10:2e:f6:46:9d:7f:af:5d:00:5d:b7:
         4c:70:55:0e:4d:e3:d8:24:1f:89:5e:8a:e7:a6:0e:92:91:0f:
         fe:a8:c5:1b:a1:ff:14:17:41:b5:b5:bf:7d:b1:35:00:28:c9:
         b7:cb:8e:20:76:98:da:a3:8a:ee:ac:25:19:56:29:12:d6:6d:
         de:15:cd:69:5e:e1:2d:5d:6b:f2:b5:60:ff:fc:5e:26:85:b9:
         65:1d:cb:1a:61:75:de:4d:95:b4:b6:2e:3d:e3:65:db:37:67:
         76:4c:eb:0e:b8:bf:28:a7:45:fb:f2:f7:52:72:73:38:ce:3b:
         a4:7e:e9:4c:2b:ec:4f:3c:70:79:87:2f:79:53:bf:30:d1:67:
         1d:e2:70:64:ab:c3:84:89:66:b8:0f:85:ab:37:1c:30:dd:fb:
         25:22:7b:9e:25:2b:80:d0:40:74:14:f9:59:58:50:18:6c:ad:
         ac:d5:84:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp4ylFT+/qccr7EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmY0MWY1NWUtN2ZlNi00Yjg4LThkMWItZjNlMGZjNjI1
OWYzMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk
OWE0NGRhZjUtOGI4NS00MDViLWI0ZTUtNmQ3ZjZkODJhOWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZDDuba1ecXzvpBn7bumhkcsTS9ojCeAwA6P
fZnnPmY/E2fzIkxNGs42K+kap5+TdNRrETyKpWuedWbV0x3ov9Yyik6a5PZNQdHU
aC2stSlTtxsgo5yHOXg9+WGBzTb+1drLCJjJTmfo1W8U9LRHgwAKV6oKCE4McL/w
WXC6iubsxsOxOwGNBbXF2ChGzn85me/hEwqUNzsrmksh4Yv8r7ihc54gntuWlJf7
YXlc7iGdIdJEFsjmNG26+F/UdClsaDPIsLRMIReXumDmwcIgaR5TPHDkPz9CxjJj
71DAIO+HQEp0JkvnTd5ZFalKu1CnJl1bRRby+zTkA1Zp+w5WPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMTD35vt9hv677c+Mx4ZTI3KZQ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQx
ZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2UwZmM2MjU5ZjMvYTNjODVlZGYtZGQ5MS0z
NTFiLThlYjItNTkwZWZkZDE5OGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmY0MWY1NWUtN2ZlNi00Yjg4LThk
MWItZjNlMGZjNjI1OWYzLzJmNDFmNTVlLTdmZTYtNGI4OC04ZDFiLWYzZTBmYzYy
NTlmMy5jcmwwHwYDVR0jBBgwFoAUUEBh/iScDEroKQvON2np7BVTLzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQxZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2Uw
ZmM2MjU5ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATek7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvqAKbX0Fjtt8UO5TUDBbbvPz15SVHvflXNMpTj4ZgWqz1A5YnSB9FN
T2BzHe6svY792gnYBHMu8TaQ62mvIAre+5pguEj9H4htKP7LFysQLvZGnX+vXQBd
t0xwVQ5N49gkH4leiuemDpKRD/6oxRuh/xQXQbW1v32xNQAoybfLjiB2mNqjiu6s
JRlWKRLWbd4VzWle4S1da/K1YP/8XiaFuWUdyxphdd5NlbS2Lj3jZds3Z3ZM6w64
vyinRfvy91JyczjOO6R+6Uwr7E88cHmHL3lTvzDRZx3icGSrw4SJZrgPhas3HDDd
+yUie54lK4DQQHQU+VlYUBhsrazVhM8=
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:40:41 2026 by rpki-client