Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/09a368fe-61a9-3915-8d1b-9b279c24f5ae.roa
File:                     09a368fe-61a9-3915-8d1b-9b279c24f5ae.roa (raw, json)
Hash identifier:          UXrVsYxGDvwTGG4EW/2sSoE8njT06OqmCOrrZjKwxls=
Subject key identifier:   A2:A6:FD:5B:B4:04:97:0A:96:AB:D2:9B:66:D6:1D:DF:28:FE:9E:B1
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F432858471BA5AADF072D370EDA5208E2
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/09a368fe-61a9-3915-8d1b-9b279c24f5ae.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     393319
IP address blocks:        77.233.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:aa:df:07:2d:37:0e:da:52:08:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=db59652d-6bf2-4eb1-a1ad-0f655c30d4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:aa:c6:40:68:6c:36:db:50:f7:a1:5a:d7:
                    b3:2a:54:cc:a7:69:65:05:6f:1b:c5:f2:5b:dd:30:
                    00:87:90:d3:f6:e8:88:44:36:a3:28:75:2c:cb:57:
                    cc:ad:3e:4c:cb:59:12:6d:15:06:6e:9a:f8:57:88:
                    7f:15:27:a3:0a:8f:c3:f5:c6:72:fa:4d:6b:e1:47:
                    dd:2f:eb:6e:ae:b2:5f:8e:35:9f:45:c3:91:14:5d:
                    17:b9:0b:b8:5c:4b:ac:ed:ce:53:42:d9:40:45:40:
                    d7:86:d2:fd:cd:d2:a5:a2:ca:76:61:71:6c:52:9e:
                    67:93:8f:23:8a:15:87:b3:8c:4f:4d:9f:de:cb:3b:
                    0f:cf:d0:a3:8b:b1:1f:82:e0:f3:43:fa:20:fc:e0:
                    e6:4d:4a:8a:86:a8:6b:a3:cb:41:49:89:c9:b3:f8:
                    0f:8c:d9:08:9a:e5:61:67:54:95:63:ef:91:cb:f9:
                    23:b5:85:07:42:34:3a:13:f6:de:db:42:fa:a5:1d:
                    ac:70:69:3a:93:b5:03:66:9f:24:69:2b:69:2e:dd:
                    94:d2:10:21:52:77:7b:e6:33:57:7d:ef:69:8b:a9:
                    3e:64:cf:5e:b5:c0:f0:91:c5:22:67:67:91:d3:27:
                    0a:4e:eb:4e:bb:1a:60:6c:2a:36:1c:3a:71:99:fa:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A6:FD:5B:B4:04:97:0A:96:AB:D2:9B:66:D6:1D:DF:28:FE:9E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/09a368fe-61a9-3915-8d1b-9b279c24f5ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:eb:61:2a:2a:4c:ed:47:b2:a7:ca:61:a0:61:82:d6:f2:
         e7:8e:84:59:f5:3c:c7:20:7c:6b:b1:68:1a:39:c2:c4:f8:b6:
         c1:89:9f:15:26:86:b4:00:d4:74:3b:b3:ce:b3:5b:e9:81:32:
         22:10:7a:a8:eb:50:ea:48:2c:f7:0b:39:cc:31:15:bd:a4:c4:
         02:b3:92:12:0e:c7:dc:6d:b4:d4:f2:bd:df:65:0f:4f:41:db:
         57:4e:d3:29:a0:75:b7:37:4b:f6:a5:36:e4:4b:da:04:f6:a6:
         7e:d6:db:08:2d:91:9e:af:af:fd:6c:aa:ed:e6:64:ea:cd:cf:
         12:a1:f0:ba:4d:d4:e0:89:6a:38:c1:aa:e9:e4:35:67:61:d2:
         5c:c2:1f:12:dd:66:e9:d1:9d:98:c8:06:21:9b:e9:c8:22:b4:
         00:72:82:7c:a4:63:e2:85:76:12:89:f0:b4:d6:f2:29:07:9f:
         38:e4:8a:50:38:c8:b4:02:bf:87:97:6e:a5:1b:98:ef:b3:c4:
         89:b5:94:17:86:b8:d1:0e:9b:63:47:f2:5c:39:42:92:da:9f:
         ee:86:80:00:38:7a:41:37:c8:86:6e:3c:2e:bb:6c:76:bc:b2:
         f5:53:d3:c4:54:fd:cb:8a:88:d7:76:41:a3:71:83:85:2b:ee:
         70:37:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org