Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/b21761e2-2695-3ce3-a9c8-bcaf07cfecc6.roa
File:                     b21761e2-2695-3ce3-a9c8-bcaf07cfecc6.roa (raw, json)
Hash identifier:          +Zj7pPIh+W+3zfbezQXtBLBl3jxGhenSDbJO74CZ/fc=
Subject key identifier:   41:32:99:A3:4C:7F:DD:AB:02:57:47:97:6D:21:52:D5:28:15:4F:79
Certificate issuer:       /CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
Certificate serial:       010D0C9F4328584A5E60630DB67CD42FAF2C2860
Authority key identifier: 50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/b21761e2-2695-3ce3-a9c8-bcaf07cfecc6.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     393319
IP address blocks:        77.233.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:63:0d:b6:7c:d4:2f:af:2c:28:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=aad2fee1-637c-459f-9234-4803fb5c5bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:58:7c:c3:7b:df:bf:a3:3a:c9:ce:2b:68:ec:
                    7f:49:d1:eb:66:94:c6:01:da:dc:27:4f:09:1d:b5:
                    11:7d:ca:fa:c2:60:db:cd:ce:18:e1:0a:b8:10:77:
                    bb:38:6d:cb:9b:fe:2a:46:28:fe:2c:f6:89:27:de:
                    a1:17:42:e2:ed:ea:41:f7:73:91:dd:ed:52:c8:7b:
                    41:7e:4d:03:69:66:43:18:c8:72:13:db:20:db:f5:
                    5e:b1:56:46:5b:49:e0:00:ee:c1:ce:b6:0f:1f:b6:
                    8f:a7:47:67:26:b3:dd:7d:0e:29:49:79:6e:3f:6c:
                    36:b8:22:f6:9f:e1:ea:6d:f3:90:23:a3:76:be:e8:
                    1f:cf:f5:b9:5f:57:84:de:bb:c6:36:2a:ee:51:28:
                    ea:4b:71:8b:01:25:f1:48:d2:83:fd:94:07:1d:92:
                    08:9c:6d:58:f3:b0:cc:ed:08:e7:fe:5f:aa:b7:ba:
                    b8:46:62:fd:c0:f5:33:03:fb:fa:31:6a:24:7a:77:
                    eb:85:a6:98:29:36:75:95:63:81:62:d5:1d:fa:7e:
                    79:f1:5e:30:4a:ea:28:33:e5:32:c1:c4:12:fa:3b:
                    f9:ca:1e:61:1b:45:5e:18:bf:a8:1a:b3:81:8a:18:
                    b4:d5:5c:75:99:46:bb:73:c4:35:d8:54:79:9b:c7:
                    b8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:32:99:A3:4C:7F:DD:AB:02:57:47:97:6D:21:52:D5:28:15:4F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/b21761e2-2695-3ce3-a9c8-bcaf07cfecc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.crl

            X509v3 Authority Key Identifier:
                keyid:50:40:61:FE:24:9C:0C:4A:E8:29:0B:CE:37:69:E9:EC:15:53:2F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2f41f55e-7fe6-4b88-8d1b-f3e0fc6259f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.233.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:51:68:40:0c:61:ac:0b:0f:42:ba:9b:68:19:92:a6:1d:
         03:51:92:cd:df:24:ca:74:af:f5:a2:41:7f:3f:da:08:65:0b:
         84:d1:37:06:14:5b:95:5d:47:0d:11:82:d7:06:97:98:56:6a:
         ea:14:65:ad:38:42:6e:55:fe:f2:79:5b:05:f5:31:21:b5:64:
         7c:32:12:fe:b9:78:c9:8c:ee:7c:36:69:1e:15:5c:bb:53:d0:
         4f:a1:a0:11:64:6f:51:08:44:0d:56:e3:c3:d5:f4:11:04:f8:
         03:fb:ad:87:a8:b7:32:4b:10:17:bb:4e:b9:78:d7:02:fa:0d:
         04:f2:e2:ab:e5:e1:5b:b0:6b:0e:aa:31:ff:70:96:eb:7e:c1:
         2c:02:7d:d7:27:74:e1:e9:4e:f7:8c:fd:4f:77:cf:df:c9:33:
         97:fc:45:65:40:c0:f4:de:0c:71:f8:52:a0:86:f4:f4:55:8b:
         10:f0:53:6c:69:23:35:79:86:6e:e3:a6:e7:43:16:fa:e0:94:
         58:31:46:0a:6c:42:4b:c3:14:d7:04:ab:3e:28:55:47:6a:24:
         ae:3a:e5:fb:44:c5:17:5b:c8:fb:61:52:fe:aa:06:2b:8f:37:
         5c:7b:ba:1c:07:b4:59:46:c2:4a:3a:cf:c8:22:44:1c:90:57:
         78:92:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 08:51:25 2025 by rpki-client