Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/6e3da0c3-5221-35c7-9882-0a6ae83adbc7.roa
File:                     6e3da0c3-5221-35c7-9882-0a6ae83adbc7.roa (raw, json)
Hash identifier:          2bzRVzvS20wHcOEEYvRl1b2bCzVFYOf6AAbTJzOFTQ8=
Subject key identifier:   2A:51:D4:29:2E:9B:0B:A6:E7:D5:D1:37:3A:60:61:A1:E8:29:2F:2F
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584B153C1CC1B44AB483C912D620
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/6e3da0c3-5221-35c7-9882-0a6ae83adbc7.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     393319
IP address blocks:        77.233.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1c:c1:b4:4a:b4:83:c9:12:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=f7290fb6-4188-4d7f-bd3b-c108fcb7dca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:31:78:f5:44:27:0a:3a:6f:b5:3d:56:d1:07:
                    b1:69:ab:50:c7:30:ad:12:32:ee:7d:89:d1:8b:39:
                    13:e2:74:bc:fb:1d:36:a6:59:55:8d:21:e2:0b:eb:
                    d7:cd:3e:3f:a2:47:d6:e2:59:fd:22:13:4a:e2:4a:
                    e5:96:32:3f:20:67:8e:11:d1:bd:87:82:5f:c0:88:
                    89:b2:9d:0f:62:05:48:ec:c8:ee:40:07:5f:20:8c:
                    74:a0:1e:03:d3:94:d0:33:0e:d3:d6:c6:c2:6f:7c:
                    a0:e3:89:63:8f:f0:c4:b3:7e:25:29:c0:62:c8:b3:
                    a6:2f:72:c2:ea:4a:27:57:59:75:0b:50:62:12:ea:
                    ba:bd:bd:7f:49:4d:4f:1a:36:0b:dd:a8:4f:43:ad:
                    26:99:d6:67:0c:c6:94:41:92:34:2e:47:4b:84:ad:
                    64:93:01:ba:77:36:c8:15:5b:66:41:0c:4d:af:5a:
                    d1:19:07:bb:56:fc:c5:2d:f5:63:f5:1f:3e:94:f6:
                    07:bc:26:20:c8:b4:7a:fc:aa:a7:76:34:6e:9d:cc:
                    dc:60:1d:64:14:91:b1:29:07:15:3c:14:d1:49:18:
                    e3:c5:1c:38:e3:4d:9b:65:a5:3d:10:8d:86:69:4f:
                    2f:fa:25:43:fd:d4:b7:53:8a:bb:b5:ad:8b:5c:39:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:51:D4:29:2E:9B:0B:A6:E7:D5:D1:37:3A:60:61:A1:E8:29:2F:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/6e3da0c3-5221-35c7-9882-0a6ae83adbc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:61:a9:92:8f:b9:2b:46:c2:3b:a5:7b:4a:a1:3f:d7:ae:a3:
         1d:27:9b:2b:a1:c7:d2:cf:ef:a0:5b:53:c9:e8:31:66:4c:5e:
         53:31:ed:2d:30:0c:89:fa:e9:8e:ab:26:7d:ef:45:fb:31:be:
         ad:59:c5:55:d0:8f:e5:26:a8:c1:65:92:65:44:66:50:f4:05:
         e2:07:53:35:db:2c:c6:99:8c:9a:83:2b:8a:bb:b8:29:ff:82:
         9b:01:57:e2:e7:b8:89:b1:0d:bc:db:c6:a2:ce:78:7b:7a:fb:
         09:90:b9:e0:91:62:45:f4:dc:5c:66:24:f9:c7:3b:6b:47:69:
         0a:c0:89:ac:fa:cd:7b:65:63:61:b3:2d:dc:23:89:dc:2f:0e:
         25:ab:47:43:76:ce:25:bb:90:03:fc:1e:8d:ec:5b:d8:d2:4e:
         47:a0:6f:8d:00:c0:69:34:a8:14:5a:43:7b:b8:e8:f8:2c:27:
         04:ac:9e:a7:bf:3b:01:61:94:b6:65:f1:f1:60:ef:c8:ff:5e:
         46:4a:3a:5b:2c:9f:18:8e:5c:2c:e0:3e:61:f6:9c:2d:fc:80:
         c5:a3:76:f8:48:cf:01:13:0e:94:4d:0a:9e:46:79:21:62:2a:
         87:39:29:dc:e5:a2:75:75:c8:0a:af:96:a3:4c:fa:4f:23:fa:
         f8:87:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:31 2025 by rpki-client