Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
File:                     1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa (raw, json)
Hash identifier:          U6wfBt09LIg6Xxm5fg56lOYeSt6+w0ZEGNn7pe+SPCs=
Subject key identifier:   4F:88:3E:53:44:6F:D0:1F:41:58:A8:15:4E:8A:98:BC:2B:DC:EE:B2
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F43285847B1015BAC8B9D963A32212E00
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     6621
IP address blocks:        97.72.0.0/19 maxlen: 19
                          97.72.32.0/21 maxlen: 21
                          97.72.40.0/21 maxlen: 21
                          97.72.40.0/24 maxlen: 24
                          97.72.48.0/21 maxlen: 21
                          97.72.56.0/21 maxlen: 21
                          97.72.69.0/24 maxlen: 24
                          97.72.70.0/24 maxlen: 24
                          97.72.73.0/24 maxlen: 24
                          97.72.74.0/24 maxlen: 24
                          97.72.80.0/20 maxlen: 20
                          97.72.80.0/24 maxlen: 24
                          97.72.81.0/24 maxlen: 24
                          97.72.84.0/24 maxlen: 24
                          97.72.85.0/24 maxlen: 24
                          97.72.87.0/24 maxlen: 24
                          97.72.88.0/24 maxlen: 24
                          97.72.94.0/24 maxlen: 24
                          97.72.95.0/24 maxlen: 24
                          97.72.96.0/19 maxlen: 19
                          97.72.128.0/19 maxlen: 19
                          97.72.161.0/24 maxlen: 24
                          97.72.162.0/23 maxlen: 23
                          97.72.164.0/22 maxlen: 22
                          97.72.168.0/21 maxlen: 21
                          97.72.176.0/23 maxlen: 23
                          97.72.178.0/24 maxlen: 24
                          97.72.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5b:ac:8b:9d:96:3a:32:21:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=70e3d758-90f4-4bf8-9dfb-36a1864623eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:2f:91:97:20:cd:ca:af:53:af:9a:0e:fd:
                    31:30:7d:16:77:bf:67:ac:72:64:66:07:e6:c9:e7:
                    ce:83:49:9a:41:44:8e:1d:90:c0:80:09:68:69:6b:
                    93:94:97:c7:3a:1a:45:04:86:f9:af:88:f5:52:f1:
                    5f:ca:78:f0:2b:cc:d4:fb:fb:8c:ed:24:45:f0:c1:
                    61:58:ec:d9:a8:8d:04:74:4f:c7:1f:bc:54:70:40:
                    28:a0:8e:d0:99:1c:8f:0c:06:ef:0c:be:14:9f:9c:
                    29:fe:2b:d0:e8:5c:43:de:3c:36:ca:ee:ff:da:eb:
                    ea:15:35:27:49:d1:9a:4e:83:dc:b7:42:1b:d1:d9:
                    ed:61:8c:f7:67:9b:f6:71:57:81:a0:85:7a:df:5d:
                    b5:a3:c5:bb:79:d5:77:8e:18:f6:43:79:08:34:89:
                    ca:83:8a:fe:ae:45:c5:0c:c7:ae:b6:c2:f6:e6:68:
                    81:08:bf:cd:84:01:d5:09:41:a4:16:c6:b7:99:11:
                    90:cd:19:a3:2b:92:19:50:8b:c6:a1:ea:dc:28:3f:
                    b0:4c:c4:5f:a7:87:05:94:3b:c9:00:17:7d:dc:2a:
                    28:f0:82:9f:bb:84:d5:e4:65:e8:7b:6c:6f:32:5a:
                    67:f5:06:c5:16:4a:70:7f:af:7c:e0:d3:e1:ce:2b:
                    12:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:88:3E:53:44:6F:D0:1F:41:58:A8:15:4E:8A:98:BC:2B:DC:EE:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.72.0.0/18
                  97.72.69.0-97.72.70.255
                  97.72.73.0-97.72.74.255
                  97.72.80.0-97.72.159.255
                  97.72.161.0-97.72.178.255
                  97.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:15:f2:16:f1:ee:fd:1c:18:c0:bf:bc:52:5d:61:f5:17:38:
         d7:f7:59:88:18:51:6e:db:15:8d:5c:65:62:62:0e:0c:c7:86:
         23:83:1b:21:8d:68:51:ad:b6:04:66:af:a0:9a:18:02:55:ac:
         19:33:62:7e:ba:08:4b:8a:8b:a0:d2:6f:ea:75:66:0d:13:ef:
         bd:ad:20:cc:2f:e2:da:39:38:f2:d7:15:ef:f1:00:1d:59:3d:
         ce:2d:3b:4f:e9:45:72:86:3c:58:98:96:28:c0:e0:b9:a7:14:
         d0:3c:13:1f:f4:7e:52:98:3e:2b:bc:56:fd:62:50:cb:45:97:
         3d:f6:bc:80:a0:df:1d:41:ad:d9:14:d5:ae:c1:d6:bd:30:a8:
         6f:5f:1a:9b:21:5f:2b:81:2b:41:d9:d3:fc:76:4a:f0:20:7c:
         56:fa:3d:ff:aa:db:16:23:bb:9f:63:34:0f:35:21:50:b3:f9:
         ab:2f:5b:e2:4a:91:7d:60:5c:74:2f:50:3b:23:52:45:51:e3:
         a5:6c:eb:68:30:69:ad:4c:ef:f7:de:31:98:29:83:06:75:e2:
         a2:54:58:bd:e0:90:33:af:a0:ad:eb:bf:4f:cf:56:09:99:29:
         a4:f3:19:51:b4:c7:19:70:7b:8d:7c:e2:d6:f5:cb:0b:77:59:
         44:27:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:23 2024 by rpki-client on console-ams.rpki-client.org