Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
File:                     1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa (raw, json)
Hash identifier:          eWqusS7quMvvVV90pmPDWN9GF1qR0JOiaONtI2ZBtio=
Subject key identifier:   D3:16:4F:1C:E6:99:30:4A:E2:9B:9D:33:2C:25:9B:A1:EA:1F:23:79
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584B2FC18988EE60A3CB01716D80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     6621
IP address blocks:        97.72.0.0/19 maxlen: 19
                          97.72.32.0/21 maxlen: 21
                          97.72.40.0/21 maxlen: 21
                          97.72.40.0/24 maxlen: 24
                          97.72.48.0/21 maxlen: 21
                          97.72.56.0/21 maxlen: 21
                          97.72.69.0/24 maxlen: 24
                          97.72.70.0/24 maxlen: 24
                          97.72.73.0/24 maxlen: 24
                          97.72.74.0/24 maxlen: 24
                          97.72.80.0/20 maxlen: 20
                          97.72.80.0/24 maxlen: 24
                          97.72.81.0/24 maxlen: 24
                          97.72.84.0/24 maxlen: 24
                          97.72.85.0/24 maxlen: 24
                          97.72.87.0/24 maxlen: 24
                          97.72.88.0/24 maxlen: 24
                          97.72.94.0/24 maxlen: 24
                          97.72.95.0/24 maxlen: 24
                          97.72.96.0/19 maxlen: 19
                          97.72.128.0/19 maxlen: 19
                          97.72.161.0/24 maxlen: 24
                          97.72.162.0/23 maxlen: 23
                          97.72.164.0/22 maxlen: 22
                          97.72.168.0/21 maxlen: 21
                          97.72.176.0/23 maxlen: 23
                          97.72.178.0/24 maxlen: 24
                          97.72.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:89:88:ee:60:a3:cb:01:71:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=b430dfa6-6046-47ac-a7e4-27e171fa5f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:ee:de:d8:ea:14:da:05:23:78:a9:9c:39:
                    6f:60:aa:69:94:63:b4:96:1a:01:80:50:be:3c:d3:
                    b0:bb:5a:a0:a2:71:ea:aa:71:94:eb:34:ef:06:db:
                    67:05:fd:fb:0f:cc:fb:82:de:7b:b7:cf:a5:43:b0:
                    c5:c5:22:11:2a:b1:97:f2:2f:67:01:40:9b:a5:3a:
                    a6:84:9b:21:c8:82:cf:a7:d7:77:f7:47:f7:6a:da:
                    8e:dc:1f:00:3c:b7:7e:8e:42:25:46:29:ec:3d:23:
                    16:48:ae:66:d5:9a:85:80:90:89:25:eb:3e:56:43:
                    66:de:97:1e:81:4c:8f:d3:35:d8:cd:ff:5b:76:7b:
                    43:c6:bb:ca:f7:57:03:ea:71:14:6b:32:94:6e:64:
                    59:12:93:21:4e:e3:a3:b7:8e:c1:6b:88:20:92:0e:
                    9e:c7:eb:7d:b1:4a:8e:fd:1a:2e:ec:2d:c1:16:01:
                    2b:ae:2b:5f:3c:22:35:c0:92:3e:a9:07:12:48:14:
                    38:60:e4:fc:d1:12:78:75:71:84:ad:58:30:ee:82:
                    cb:b3:bb:5e:28:49:51:7f:94:5e:af:10:32:0f:7c:
                    84:c8:af:7d:49:20:00:3e:8f:19:55:6a:81:99:d6:
                    7e:53:81:03:e3:a7:57:1c:fe:1c:5d:61:27:c5:36:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:16:4F:1C:E6:99:30:4A:E2:9B:9D:33:2C:25:9B:A1:EA:1F:23:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.72.0.0/18
                  97.72.69.0-97.72.70.255
                  97.72.73.0-97.72.74.255
                  97.72.80.0-97.72.159.255
                  97.72.161.0-97.72.178.255
                  97.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:23:ee:0a:99:e3:a5:3d:7e:e7:d7:a0:aa:f8:ab:69:4d:
         63:84:d0:49:12:ea:c7:86:1d:5e:39:4e:bb:3f:dd:69:aa:cf:
         7a:28:8d:45:b9:98:5b:5d:19:c6:26:41:30:ff:7a:f2:a7:4e:
         66:46:22:53:2f:bf:c8:4e:ee:39:66:2c:ec:36:33:92:fa:74:
         1c:e2:ff:89:98:bc:ac:bd:c7:91:35:c1:86:8a:a0:a8:cd:24:
         24:1f:c0:2c:25:55:c3:65:07:dc:a3:0f:0d:ea:4c:ab:1a:3d:
         97:91:2e:b0:15:26:cf:05:e6:d6:92:a2:83:32:07:27:bf:78:
         93:f4:ff:87:dd:52:8b:a4:d6:de:4d:de:60:aa:7a:6a:af:84:
         9a:dd:21:a5:de:7c:d3:89:6f:25:61:d7:a7:9a:4e:58:d8:80:
         9e:a6:5c:e9:5f:38:bd:63:c6:ef:a5:b2:a9:4f:da:37:56:82:
         8b:57:79:d0:50:60:ae:b3:3c:12:33:80:ce:0e:2e:5a:0a:8a:
         87:e5:3d:f5:81:30:7a:26:9a:5b:ea:ad:eb:79:7c:2f:a0:7c:
         e3:3c:06:e9:a7:05:0a:9f:2d:a6:d8:42:7e:da:4a:d5:d3:07:
         24:c7:6f:cb:c7:8b:58:c7:5c:a9:3e:fa:60:b3:e8:43:56:fb:
         3e:7a:a7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:29:58 2025 by rpki-client