Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9f03da6a-40a0-3c27-b4a4-65ef523b8d4d.roa
File:                     9f03da6a-40a0-3c27-b4a4-65ef523b8d4d.roa (raw, json)
Hash identifier:          efSBRdOsZIs1gVK+eapXylYMkfxjTDpQXxR5N8QPemM=
Subject key identifier:   25:EE:AA:3F:C6:14:7A:0C:6C:72:CD:08:29:CC:AB:2A:57:94:37:30
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F43285845A15E128F21526710765E2D00
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9f03da6a-40a0-3c27-b4a4-65ef523b8d4d.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     393319
IP address blocks:        77.233.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:12:8f:21:52:67:10:76:5e:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=04c4319c-e4e8-47b1-a930-94654fd5db6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:82:17:71:62:d9:50:6f:5b:f2:40:66:bf:
                    2d:a1:06:5f:c2:4e:69:d9:24:3e:fc:46:06:62:7c:
                    36:4c:e3:53:14:02:61:c4:c1:c7:b9:d8:cd:ae:d0:
                    50:f8:fb:b7:d3:f7:10:bc:db:b8:55:dc:8d:8d:d7:
                    ad:2c:3e:b8:02:9e:16:92:45:7e:d5:c1:b2:6d:cd:
                    03:0e:b2:08:f8:fe:a8:93:60:f2:5f:98:63:c4:e5:
                    8f:8b:d3:12:55:bc:fa:69:4f:74:ca:80:96:75:19:
                    95:4b:25:6c:6b:79:8f:54:d7:41:f9:60:43:05:7a:
                    2e:6f:10:35:33:9f:47:88:5d:40:49:dd:6f:71:7c:
                    ce:2e:8b:fb:06:84:f0:30:66:6f:ce:83:7d:06:0c:
                    76:0b:d9:16:8a:b1:21:40:27:ac:97:86:c2:75:a0:
                    f7:d8:f2:de:5b:68:da:3a:58:1e:6d:3f:c1:6b:03:
                    93:86:a6:7d:96:c3:f9:3b:b2:49:58:5a:e0:3b:5a:
                    92:4d:da:7f:6d:87:c9:67:55:a2:09:a6:d7:82:88:
                    a9:4e:1e:de:b8:c5:31:2b:f2:23:5f:18:99:c5:e3:
                    ff:5e:e4:9c:0d:e1:0e:4a:75:30:07:89:35:28:fb:
                    23:ed:fd:b4:8f:15:aa:47:5b:46:c1:cb:34:d1:b2:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EE:AA:3F:C6:14:7A:0C:6C:72:CD:08:29:CC:AB:2A:57:94:37:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9f03da6a-40a0-3c27-b4a4-65ef523b8d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:64:f2:75:e1:bf:47:4f:a5:90:39:29:e7:d2:0c:2c:9c:
         b3:87:25:8e:4c:c9:6d:20:fe:f1:1a:c9:11:bb:ca:bb:9c:05:
         3f:22:48:6b:79:79:91:1f:db:19:4d:67:b4:7c:ea:68:6a:7a:
         3a:30:63:4b:39:22:67:09:c5:b6:09:d4:b0:1b:16:7c:a9:5e:
         54:a0:a9:42:3a:13:19:45:32:83:be:c7:b2:13:69:68:13:82:
         25:f7:58:05:1e:9f:f2:59:73:99:41:18:9e:b4:17:78:9b:f7:
         6f:b5:dd:0a:5b:41:db:d1:d4:7f:a3:2d:89:b1:ca:94:95:13:
         27:f6:87:76:b3:29:59:22:fb:72:e3:6d:be:68:d5:34:95:89:
         00:85:7c:ae:95:77:e8:7b:dd:e8:53:32:13:2d:96:a6:61:87:
         c6:5c:bb:a2:59:b5:99:e9:b2:95:6e:00:65:63:2e:d9:4b:01:
         01:ca:be:1a:af:e7:ee:8a:2a:3f:12:4c:74:84:22:60:14:ca:
         62:4b:47:d6:66:96:84:2f:ee:3b:b9:7b:0b:9f:d1:c1:db:46:
         f5:a7:bb:36:40:38:78:45:e3:20:21:19:34:75:b1:eb:c2:bc:
         a9:24:8a:9c:ec:d0:7a:ca:6b:f7:87:b6:a1:a9:7d:56:7f:83:
         4b:4b:98:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:42:36 2024 by rpki-client on console-ams.rpki-client.org