Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9e579458-dbb1-33ac-9da5-e24468cbf0eb.roa
File:                     9e579458-dbb1-33ac-9da5-e24468cbf0eb.roa (raw, json)
Hash identifier:          V4BxABjOcOIK/W9ceA5cHPpqK30Vnxl+jH5i8Z59BuE=
Subject key identifier:   C9:13:77:5C:83:C9:A4:98:89:12:7D:C8:E5:21:EF:B3:39:15:2F:A8
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584E5A49FF903CCA4B55EA6DE300
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9e579458-dbb1-33ac-9da5-e24468cbf0eb.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     393319
IP address blocks:        77.233.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:ff:90:3c:ca:4b:55:ea:6d:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=213f12bb-8ba8-4975-8893-d6393783dfd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:e4:01:39:a1:ae:70:c4:bc:71:95:87:2b:
                    c2:19:97:8b:dd:35:4a:8d:9d:03:75:31:b4:6a:f9:
                    25:a9:4c:f8:91:3a:cc:8e:9c:45:4a:22:3e:0e:ae:
                    47:d7:28:01:8d:33:0f:be:dc:b7:8c:59:33:79:4b:
                    1c:57:51:47:41:e6:39:4b:20:5f:f4:ce:46:52:74:
                    80:ca:63:5a:2e:b6:94:19:af:4e:84:6b:6b:46:b7:
                    f5:dc:72:d8:76:e6:57:01:97:fd:f0:5b:82:b9:64:
                    79:ac:84:ff:96:e8:9b:07:35:af:b4:2e:a9:82:a4:
                    ac:a0:83:c2:05:49:72:1e:9c:f7:12:06:36:a1:2a:
                    6b:65:91:45:82:6a:87:3a:a5:04:ee:c2:63:df:ec:
                    af:1d:5f:eb:6e:8f:56:2b:85:11:f6:3e:c8:05:8e:
                    3c:a5:cf:e0:1f:d3:8d:96:c4:f2:de:0b:2b:3c:93:
                    2a:36:8a:e8:b6:0e:08:f0:88:79:f9:fb:71:25:1b:
                    2b:eb:01:15:a2:2d:de:da:50:eb:10:fc:17:b0:da:
                    ce:a3:41:91:dc:49:07:3d:0e:5b:c1:f6:90:74:6b:
                    e0:30:bf:dd:06:c3:2f:b9:00:20:e5:cb:81:ad:53:
                    35:3b:c4:f9:86:ed:5f:13:c8:da:d5:43:51:7d:ea:
                    97:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:13:77:5C:83:C9:A4:98:89:12:7D:C8:E5:21:EF:B3:39:15:2F:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9e579458-dbb1-33ac-9da5-e24468cbf0eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e4:db:6f:01:c7:30:84:27:90:18:5c:ca:1b:86:2c:d3:71:
         66:22:4f:94:a5:82:7a:0f:68:3e:0a:c4:88:30:50:bf:5f:79:
         82:b7:db:65:91:ad:5b:35:53:fd:18:34:65:14:af:26:69:2a:
         eb:ff:47:b4:25:51:b3:f4:ad:0f:74:95:9f:a7:ba:14:c1:38:
         2d:3c:69:39:6d:11:87:fb:98:13:ef:ea:59:06:34:cd:ba:d9:
         89:8e:97:d8:82:2e:f6:c3:15:cd:ee:d6:61:7d:84:b3:fe:d3:
         f1:7d:ce:2f:bc:97:8a:38:98:81:76:3e:e6:fc:f6:99:7f:f6:
         78:ef:4d:02:c2:2e:fe:21:d9:4e:63:00:47:7c:32:4a:02:3f:
         fb:e6:7f:99:7e:b1:42:ee:7a:b4:86:a2:74:be:da:fc:00:e6:
         5a:9e:18:e0:74:39:d8:cd:7e:de:8d:4b:e7:e1:a2:a2:18:5a:
         41:2b:5c:37:1f:4b:d8:1e:df:62:de:77:53:06:2a:be:07:45:
         ac:3c:ba:2c:11:9e:36:01:0a:cf:72:09:4e:c0:7d:f8:a7:7d:
         39:61:36:25:b7:48:76:f1:d0:19:d7:9e:32:7e:8a:8a:f6:95:
         59:9a:f9:61:aa:3d:d4:25:4d:08:9c:47:65:07:2d:8a:e0:ea:
         4b:68:6e:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSf+QPMpLVept4wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmY0MWY1NWUtN2ZlNi00Yjg4LThkMWItZjNlMGZjNjI1
OWYzMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk
MjEzZjEyYmItOGJhOC00OTc1LTg4OTMtZDYzOTM3ODNkZmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCPkATmhrnDEvHGVhyvCGZeL3TVKjZ0DdTG0
avklqUz4kTrMjpxFSiI+Dq5H1ygBjTMPvty3jFkzeUscV1FHQeY5SyBf9M5GUnSA
ymNaLraUGa9OhGtrRrf13HLYduZXAZf98FuCuWR5rIT/luibBzWvtC6pgqSsoIPC
BUlyHpz3EgY2oSprZZFFgmqHOqUE7sJj3+yvHV/rbo9WK4UR9j7IBY48pc/gH9ON
lsTy3gsrPJMqNorotg4I8Ih5+ftxJRsr6wEVoi3e2lDrEPwXsNrOo0GR3EkHPQ5b
wfaQdGvgML/dBsMvuQAg5cuBrVM1O8T5hu1fE8ja1UNRfeqXpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMkTd1yDyaSYiRJ9yOUh77M5FS+oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQx
ZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2UwZmM2MjU5ZjMvOWU1Nzk0NTgtZGJiMS0z
M2FjLTlkYTUtZTI0NDY4Y2JmMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmY0MWY1NWUtN2ZlNi00Yjg4LThk
MWItZjNlMGZjNjI1OWYzLzJmNDFmNTVlLTdmZTYtNGI4OC04ZDFiLWYzZTBmYzYy
NTlmMy5jcmwwHwYDVR0jBBgwFoAUUEBh/iScDEroKQvON2np7BVTLzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZjQxZjU1ZS03ZmU2LTRiODgtOGQxYi1mM2Uw
ZmM2MjU5ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATekvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3k228BxzCEJ5AYXMobhizTcWYiT5SlgnoPaD4KxIgwUL9feYK322WR
rVs1U/0YNGUUryZpKuv/R7QlUbP0rQ90lZ+nuhTBOC08aTltEYf7mBPv6lkGNM26
2YmOl9iCLvbDFc3u1mF9hLP+0/F9zi+8l4o4mIF2Pub89pl/9njvTQLCLv4h2U5j
AEd8MkoCP/vmf5l+sULuerSGonS+2vwA5lqeGOB0OdjNft6NS+fhoqIYWkErXDcf
S9ge32Led1MGKr4HRaw8uiwRnjYBCs9yCU7AffinfTlhNiW3SHbx0BnXnjJ+ior2
lVma+WGqPdQlTQicR2UHLYrg6ktobuE=
-----END CERTIFICATE-----
Generated at Mon Jul 6 23:22:05 2026 by rpki-client