Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa
File:                     60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa (raw, json)
Hash identifier:          6cF8VmABx+GWo6Lgvbl7ZK+V+AgfKf7orbv2I/PPo3g=
Subject key identifier:   25:B3:5B:6A:D3:F6:1C:C3:F6:F3:C8:BE:F6:55:F2:66:7D:D1:A3:99
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F43285845B0B8ABCEEF9407A0436F2680
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa
Signing time:             Sun 28 Apr 2024 01:00:25 +0000
ROA not before:           Sun 28 Apr 2024 01:00:25 +0000
ROA not after:            Sat 27 Jul 2024 01:00:25 +0000
asID:                     393319
IP address blocks:        77.233.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b0:b8:ab:ce:ef:94:07:a0:43:6f:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Apr 28 01:00:25 2024 GMT
            Not After : Jul 27 01:00:25 2024 GMT
        Subject: CN=9af86858-c2a7-40f0-892c-39f03197b6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:15:08:df:ec:98:2f:97:ca:28:f0:ae:00:
                    58:14:59:38:90:f0:f2:b4:a4:60:95:c5:72:ed:c5:
                    dc:ce:b5:9f:c4:f4:a4:44:b1:4d:5a:f5:c3:04:99:
                    5d:3b:12:d1:dc:2b:a7:13:c3:2a:49:83:4c:b0:2e:
                    81:8a:74:78:df:32:62:c6:ee:36:47:68:4b:9c:33:
                    78:d8:15:8e:54:16:5b:fb:57:90:61:0b:9b:26:ca:
                    bb:b0:5f:de:43:87:6d:ad:ab:0b:2c:16:9e:f3:d9:
                    e4:82:02:04:b1:14:3d:63:d6:07:49:80:42:85:6a:
                    15:2c:bf:32:61:81:e4:21:2a:75:b7:49:dc:22:6b:
                    af:b1:2a:85:44:84:0d:25:6b:71:a1:80:58:e0:fc:
                    d0:2a:ad:21:14:35:98:9d:04:f9:ca:98:66:41:b2:
                    e6:26:b2:12:0f:aa:37:dc:a5:ac:61:69:f3:9a:a4:
                    c3:58:58:1a:89:c0:de:2b:4f:fd:f4:9c:87:cb:41:
                    9c:45:bf:db:5d:2e:8d:58:ac:02:68:32:77:32:f0:
                    6c:0f:2e:3e:f6:07:29:d0:35:07:56:51:22:0b:4b:
                    8f:84:b1:b6:fe:b6:01:ec:4e:d2:fc:9a:87:bb:70:
                    3e:c0:cd:43:9e:78:11:66:aa:76:2f:9d:de:3d:7f:
                    2f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B3:5B:6A:D3:F6:1C:C3:F6:F3:C8:BE:F6:55:F2:66:7D:D1:A3:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/60eac66d-c5a3-3e00-be9f-8d538bc95e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b5:e4:ab:ed:a3:26:3e:ec:9b:a2:8d:9f:86:19:3d:30:62:
         1d:f0:75:d2:e4:91:44:d1:d4:e3:fc:1e:ad:e6:65:d9:4e:b5:
         f6:a9:10:e6:67:bb:40:7c:ae:58:af:e2:b7:c2:bd:d0:36:62:
         14:b2:af:08:ba:2d:fb:23:67:c1:71:4c:6e:2f:12:9a:be:5f:
         dc:3a:cc:cd:1b:1e:99:8b:e6:38:8b:58:8f:60:7d:71:a4:68:
         74:98:b0:64:4e:34:0a:3d:a4:59:ff:8c:ff:15:ff:2d:70:3a:
         24:64:fa:ec:e8:ed:38:8b:2c:a7:73:91:f0:33:62:39:03:bd:
         ac:c0:03:87:6e:22:8e:8c:60:4d:40:10:79:d5:cb:a6:ee:5f:
         19:a6:f1:be:c7:35:78:e2:86:ad:6e:f2:36:0d:16:6e:06:fa:
         e0:00:06:23:d1:b8:d5:6d:6e:38:ca:bc:b4:5e:b7:96:27:6c:
         c5:88:d1:ee:0c:f4:6a:1e:47:77:85:96:5d:fb:f8:c0:8c:70:
         88:d0:bc:71:80:b3:4a:81:73:bf:18:e7:2e:0d:a2:a5:75:71:
         e3:3c:0a:ea:37:ea:84:ac:37:7b:9a:b1:9f:9e:f1:8b:c5:31:
         7e:66:de:99:77:10:34:e1:07:dd:88:8c:7b:59:af:6c:58:91:
         01:9c:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:50:51 2024 by rpki-client on console-fra.rpki-client.org