Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9f03da6a-40a0-3c27-b4a4-65ef523b8d4d.roa
File:                     9f03da6a-40a0-3c27-b4a4-65ef523b8d4d.roa (raw, json)
Hash identifier:          GysT40X1mxVxocN18WEDNIQ5ICmeNzp547i5ex5YEro=
Subject key identifier:   08:30:67:E3:C4:D6:86:F2:92:29:BC:6B:5F:BE:A4:3B:BC:23:FD:A6
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F43285847600B99C83C07455E5FEB9680
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9f03da6a-40a0-3c27-b4a4-65ef523b8d4d.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     393319
IP address blocks:        77.233.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:99:c8:3c:07:45:5e:5f:eb:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=c42907a8-41a1-4108-9da0-59552b641adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:fd:f2:77:2a:43:69:20:68:8b:45:10:0a:
                    76:c7:fa:65:c3:db:e6:7f:40:f2:1d:63:87:87:7c:
                    f6:31:49:b0:85:f8:33:e2:15:c4:f9:e6:ae:f1:c7:
                    08:9f:e9:65:56:3d:8b:d9:40:e5:2d:4c:81:99:97:
                    1d:06:3f:c3:b1:b0:fd:6d:57:1e:93:5a:e1:a8:c3:
                    c6:20:86:41:2b:77:b2:08:ec:3e:ac:67:dc:21:26:
                    12:2d:71:66:c2:22:82:08:cc:55:0c:97:d7:d9:ec:
                    ac:b1:19:84:ed:21:3c:c8:7f:e2:00:df:a5:46:3e:
                    33:20:a3:46:77:98:a4:f1:e9:1c:c5:9b:ee:86:d5:
                    e1:e6:7e:44:0f:af:33:19:b9:16:c0:92:22:35:45:
                    01:8d:d1:dd:72:a6:45:15:cd:76:dc:7a:9c:0c:93:
                    f3:46:01:05:f4:9f:e9:da:cf:f0:37:85:ee:f0:13:
                    29:34:1b:4a:15:12:f8:cf:8a:76:96:3d:ef:29:96:
                    88:82:1e:a7:31:04:85:c6:44:39:e2:cb:1f:7f:4c:
                    de:17:47:3d:f8:be:fe:06:2b:43:74:c4:73:d2:0f:
                    25:47:7c:d4:76:c0:c5:51:5a:79:2c:8e:90:b1:54:
                    74:a0:39:d7:7d:17:12:a0:34:1f:63:76:1c:ba:aa:
                    9a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:30:67:E3:C4:D6:86:F2:92:29:BC:6B:5F:BE:A4:3B:BC:23:FD:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/9f03da6a-40a0-3c27-b4a4-65ef523b8d4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:de:29:4e:35:8c:42:29:24:49:88:da:a4:54:4a:07:38:5c:
         d5:a5:39:b3:2f:a3:de:12:6e:d5:fb:79:2b:25:c6:e4:34:17:
         88:db:94:0e:7c:e8:59:d1:18:d0:dc:0a:99:40:6c:9a:d6:ed:
         81:79:da:26:3d:a1:6c:c1:38:b5:9e:40:df:13:3d:c4:cc:8d:
         cb:b1:8a:2e:18:7b:c7:f4:ca:e8:aa:a8:9a:7d:8f:0e:42:e9:
         6b:69:0e:0a:67:8b:55:a3:3f:e8:9c:a6:35:59:0d:76:a1:5b:
         0e:c8:f9:76:43:02:33:82:89:88:42:a0:3a:54:cc:f2:19:79:
         a7:65:dc:df:d9:7d:53:ff:91:75:43:21:ad:6d:73:bd:a3:1c:
         07:af:55:4e:7a:01:d8:96:b8:78:96:a1:a4:53:6c:e2:75:d2:
         05:5a:0f:46:ce:1c:39:91:be:21:5a:81:c4:53:70:93:81:62:
         36:91:ee:b1:e7:f3:b2:a3:d2:2b:44:17:0c:c3:10:27:b8:3a:
         3e:c3:59:08:e0:6b:af:a2:8a:6d:40:2c:6c:99:50:3e:22:69:
         e8:93:ad:81:54:84:57:bb:9a:20:46:6e:80:5e:49:70:4e:6b:
         b0:ee:48:93:92:72:88:c1:81:a1:10:ab:8f:67:b4:b9:c3:46:
         e2:92:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org