Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/bf603e79-64ee-3723-9c4c-43e85a1ac3fa.roa
File:                     bf603e79-64ee-3723-9c4c-43e85a1ac3fa.roa (raw, json)
Hash identifier:          JhIWp4uWhAwPYTU/sWvN6yhn43ofzHTelcTiWngTn+U=
Subject key identifier:   86:CD:12:FE:9C:FF:01:64:F0:75:28:DC:87:55:6C:2E:56:F1:A2:43
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584B7B21F7AE07D955497CCB1FA0
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/bf603e79-64ee-3723-9c4c-43e85a1ac3fa.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     393319
IP address blocks:        77.233.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f7:ae:07:d9:55:49:7c:cb:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=7f6f01b3-5c9e-41c3-ad00-0225d0d908e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:48:67:2c:95:ad:66:a2:99:f5:67:51:84:
                    85:1b:b9:6a:c1:cd:a0:c3:38:80:56:54:bd:01:2e:
                    be:5b:25:bb:e6:01:8e:c4:94:bb:8a:2c:72:ff:f1:
                    cf:c3:07:ce:a2:60:6d:69:27:69:a4:be:6e:ef:3f:
                    eb:97:ae:e2:f8:84:3d:fa:e5:c2:d2:8b:ea:6d:a4:
                    80:3d:91:d8:2e:09:94:02:ed:32:bc:41:c3:e1:ab:
                    af:d1:1e:3c:6c:87:45:d3:88:18:d0:f6:74:c3:d8:
                    f2:a5:3b:32:bb:d7:76:f9:a1:48:b0:81:df:c4:9d:
                    de:f6:04:96:85:2f:70:d7:86:e8:e5:c9:ba:f6:3e:
                    10:3c:c9:0b:9e:4f:09:79:a8:c8:8d:ef:d2:35:39:
                    eb:ca:6a:a7:bc:d8:71:d2:24:ee:d8:55:69:bd:6c:
                    ac:ef:47:b6:10:e5:2e:b2:0f:19:f7:27:d0:51:f2:
                    d0:3b:5c:09:41:c8:02:9f:b8:b9:0c:e1:24:23:b2:
                    65:94:79:5a:ba:07:e3:f9:bb:a9:bd:14:82:af:c4:
                    e6:5d:5e:00:ab:cf:94:b7:58:45:7f:17:9c:e0:ea:
                    30:ae:95:6e:47:df:1c:d1:9b:d1:a8:78:2d:79:82:
                    40:58:9c:a6:6b:90:a4:75:61:6e:dc:38:4b:5c:53:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CD:12:FE:9C:FF:01:64:F0:75:28:DC:87:55:6C:2E:56:F1:A2:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/bf603e79-64ee-3723-9c4c-43e85a1ac3fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:33:2b:a6:82:11:4a:af:f8:1e:51:58:7f:1e:55:d7:38:94:
         c8:94:da:1d:47:88:d5:38:67:a0:a4:46:18:72:3c:e1:d7:34:
         35:6a:4f:3a:67:c5:9a:b4:f7:14:b3:b4:3c:a5:52:b7:53:d0:
         56:6b:06:cd:e2:be:36:0a:fd:08:85:22:d1:af:d1:29:81:fb:
         8b:cf:9e:8e:35:36:b4:cb:2a:8f:7e:5c:79:5e:41:19:02:f3:
         b9:6e:ac:36:e6:67:28:21:f4:ba:bc:b7:60:a4:44:c1:2b:05:
         66:66:74:f1:3e:bf:be:d3:69:12:b5:ed:12:71:4a:2c:46:d0:
         cc:91:8d:82:a7:98:36:00:7d:eb:7c:b6:bd:a5:f9:81:41:d0:
         b3:c7:e8:e5:94:2c:93:3e:b5:93:7b:cc:b5:49:59:b6:2f:ae:
         33:45:ff:4b:61:78:9d:5c:80:a5:8c:32:20:a7:4d:78:6b:16:
         52:36:44:88:6d:4b:a0:44:35:98:1b:8e:18:43:12:a9:20:03:
         bb:81:4a:8f:38:44:4f:63:0c:12:07:8c:8f:8b:a0:e1:76:1b:
         8a:19:34:6b:f2:ab:30:7a:88:46:97:61:3d:0b:0e:ad:14:08:
         e7:ba:48:80:8a:ba:48:24:fe:da:77:e3:c5:2f:fa:e8:07:8f:
         22:00:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:31 2025 by rpki-client