Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/0ae8414b-f660-310e-826d-d2619d7d7150.roa
File:                     0ae8414b-f660-310e-826d-d2619d7d7150.roa (raw, json)
Hash identifier:          +JJ52USxSXcNprrQMwl3lfLwmUcihz0zNIMGIHz09PM=
Subject key identifier:   A7:2F:A9:DC:FA:7E:03:E1:16:82:92:FA:E4:CC:4A:9C:F5:CD:E3:9A
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F43285845A2C3430AA5B0365B34E82440
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/0ae8414b-f660-310e-826d-d2619d7d7150.roa
Signing time:             Tue 23 Apr 2024 01:00:25 +0000
ROA not before:           Tue 23 Apr 2024 01:00:25 +0000
ROA not after:            Mon 22 Jul 2024 01:00:25 +0000
asID:                     393319
IP address blocks:        77.233.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a2:c3:43:0a:a5:b0:36:5b:34:e8:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Apr 23 01:00:25 2024 GMT
            Not After : Jul 22 01:00:25 2024 GMT
        Subject: CN=80cb82be-25c0-4fa9-84a5-1b530dd7a2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:f2:da:8d:82:3d:59:ea:43:72:93:c2:d9:
                    72:c4:3b:fa:44:57:b7:8e:f2:c4:97:81:37:bc:ca:
                    5b:01:bc:7d:5c:6e:e2:48:be:86:04:23:5f:4c:07:
                    45:99:d4:fd:a5:ec:40:04:e0:18:94:f0:8b:78:76:
                    ae:10:a9:0a:e8:43:29:0a:4c:33:6f:6b:de:1f:c1:
                    89:95:a8:07:40:b7:5e:95:71:a5:d0:8f:5d:54:b6:
                    6c:c5:fd:19:c1:ff:4e:30:30:cb:77:5b:77:ce:73:
                    0e:3d:02:f7:86:27:78:6a:27:79:39:3c:2f:46:87:
                    2b:cd:d7:97:b2:2e:eb:3e:33:98:19:6d:22:21:2f:
                    65:1c:f8:ca:ee:4d:d8:52:1d:09:74:95:93:99:dc:
                    52:af:8f:0a:8c:3a:5a:57:c1:c2:2c:8c:57:4f:2d:
                    41:1c:f4:da:f9:d1:6d:76:1c:5f:cf:87:8b:b3:93:
                    8a:93:08:90:21:4d:66:44:c7:9c:f4:ea:23:d1:fc:
                    75:2c:3f:5e:f2:d8:e6:a3:76:2d:0e:7b:58:c4:e8:
                    b6:96:b6:5a:d2:5e:9b:db:0b:1e:2a:44:33:4a:6c:
                    fe:a0:b1:94:39:31:4b:b3:60:28:33:6a:18:98:66:
                    ed:ae:6e:90:98:e3:59:0a:88:ad:d0:57:16:8c:da:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2F:A9:DC:FA:7E:03:E1:16:82:92:FA:E4:CC:4A:9C:F5:CD:E3:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/0ae8414b-f660-310e-826d-d2619d7d7150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:88:f9:79:e8:8a:2c:f7:6f:85:9d:13:33:fd:60:2d:84:22:
         b4:7f:21:37:19:ce:c7:57:8a:8c:a5:28:af:b7:30:43:bc:b4:
         ca:63:b5:ed:c1:eb:53:5f:0d:aa:cd:af:3e:38:77:91:26:d4:
         e0:b1:1f:56:fa:3c:31:77:c5:52:64:5a:e1:36:35:31:49:fe:
         93:67:8a:c2:70:2d:f7:f5:87:5f:68:51:ca:31:ee:ef:4a:96:
         48:38:8f:4f:50:78:f3:f7:de:74:3a:a0:07:59:ec:26:d5:d1:
         59:eb:90:9c:85:1a:72:50:f4:e3:b6:1f:74:69:03:1b:c7:e7:
         12:64:44:0a:77:b5:0e:d5:25:86:2b:9b:e7:29:ed:7f:da:f5:
         f6:f5:2b:cb:b4:3b:c2:e1:67:8c:6e:e7:9b:2e:de:fd:b8:fe:
         34:ea:3e:b9:00:58:95:a2:22:45:27:c1:e3:5b:e0:01:fb:c3:
         77:bd:16:e8:1e:36:18:d2:7e:cc:36:77:94:4f:6d:0d:14:8a:
         20:71:51:ce:c8:37:e6:ed:6a:e5:55:04:48:83:f8:8d:8d:2d:
         23:61:de:44:2f:41:31:ed:3c:36:d7:c8:31:af:fb:8f:e0:47:
         da:d2:b9:61:bc:09:e7:d0:34:e4:c3:88:ef:55:f3:69:c7:5b:
         d5:77:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:42:36 2024 by rpki-client on console-ams.rpki-client.org