Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/0ae8414b-f660-310e-826d-d2619d7d7150.roa
File:                     0ae8414b-f660-310e-826d-d2619d7d7150.roa (raw, json)
Hash identifier:          L3fuwwNRIhA7Th7elMqG/S8xNqA15SsVUQp/JXSX1pQ=
Subject key identifier:   29:1E:3F:04:BE:F5:D5:13:5E:D9:4B:33:17:88:ED:6E:A3:29:00:DB
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584E640F71D07D0C896878565200
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/0ae8414b-f660-310e-826d-d2619d7d7150.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     393319
IP address blocks:        77.233.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:71:d0:7d:0c:89:68:78:56:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=fb828f55-bb5f-4899-8201-298cfe131a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:22:89:68:19:68:84:51:95:f9:41:7f:60:
                    40:d6:df:49:12:25:f9:70:33:cd:10:5c:32:c1:19:
                    ba:5b:3c:18:d0:b4:eb:e8:78:76:82:af:4c:4f:22:
                    ea:b1:c4:66:7d:9e:cd:77:58:22:d6:16:f9:60:b5:
                    74:28:42:69:66:35:37:f9:15:e1:0d:84:45:7d:ec:
                    9d:2a:95:21:6c:d9:f1:2b:a7:73:89:b0:04:c7:50:
                    81:61:4b:43:31:e9:92:01:0e:6a:46:70:ba:13:db:
                    f7:e6:f1:ae:f3:ba:68:8c:e0:9d:0b:c4:0e:46:d6:
                    0e:19:45:82:5c:03:c7:cf:af:d6:b7:a8:18:45:70:
                    e2:4c:58:f3:59:e2:c2:1d:a0:06:3a:45:c7:f4:dd:
                    62:0d:2d:e1:4e:bc:62:3b:3f:c6:73:0f:9b:8a:22:
                    a7:24:05:8f:44:ea:c8:f4:47:cc:36:e7:84:00:bc:
                    5b:68:26:d4:24:8a:a7:bb:c1:14:e2:53:f0:2a:f8:
                    0b:19:98:37:56:5f:6f:ff:68:fa:5e:11:6c:1f:0c:
                    1b:a9:62:e4:a0:0b:58:3e:8e:18:ae:1a:cc:0b:03:
                    45:2e:ad:7f:1d:c5:ab:d7:79:46:9c:c8:c5:1d:6b:
                    e3:38:94:9d:f9:cc:6a:a8:16:00:80:1b:26:b4:80:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1E:3F:04:BE:F5:D5:13:5E:D9:4B:33:17:88:ED:6E:A3:29:00:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/0ae8414b-f660-310e-826d-d2619d7d7150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:b2:d0:c5:c4:f4:cf:61:bb:04:e1:ef:85:d0:b6:ed:b4:
         83:24:4c:cc:ce:7c:ae:24:0c:5a:8b:04:af:ea:60:7f:d9:7b:
         8e:9f:e0:fe:9a:ea:72:7a:1c:70:87:f5:6a:fc:23:41:91:29:
         3b:44:00:40:9a:be:b9:ed:d1:63:a1:8c:f7:bc:af:26:8f:1f:
         74:95:d3:cb:0c:64:b6:7f:51:6e:75:61:d9:1c:80:f0:59:97:
         46:97:14:5b:6a:37:d3:ee:c2:fd:b8:0c:ef:80:30:fc:8e:ea:
         54:c3:41:fb:40:c4:4c:14:f1:6d:ad:c9:80:f2:fb:86:91:12:
         74:b2:9e:79:19:7d:60:a1:88:34:3a:69:9d:eb:10:a6:15:a2:
         a6:da:b5:a2:fe:1b:1c:19:12:09:d6:79:27:70:c1:02:86:50:
         6d:41:ce:f9:59:48:0f:65:17:e7:2a:5c:d0:a3:f6:7b:75:70:
         6d:71:19:ec:18:65:49:ce:fd:c5:2f:c2:56:3f:da:eb:ec:7c:
         b4:0f:bd:86:e6:46:e9:00:c9:3a:c5:8e:7e:0e:59:c2:ad:88:
         7b:8c:9d:4d:57:0f:5d:2f:ff:cc:5c:cf:bf:b7:d8:42:f4:cf:
         68:fa:12:e5:52:a2:33:75:82:db:0b:fb:f4:98:e3:27:76:09:
         af:b0:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:23:53 2026 by rpki-client