Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/b7b642f2-58fa-3df0-9886-32be875da209.roa
File:                     b7b642f2-58fa-3df0-9886-32be875da209.roa (raw, json)
Hash identifier:          s43Gx+cg/VFM0F8RQd4RLZ4HCiOMyMqNaXBxi1tbPRQ=
Subject key identifier:   80:13:4E:54:11:48:91:4E:87:CA:B5:C8:AA:06:48:45:72:A4:ED:F1
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584A51D0653BE48BBC726448B900
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/b7b642f2-58fa-3df0-9886-32be875da209.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     6621
IP address blocks:        97.73.0.0/20 maxlen: 20
                          97.73.16.0/20 maxlen: 20
                          97.73.19.0/24 maxlen: 24
                          97.73.31.0/24 maxlen: 24
                          97.73.48.0/21 maxlen: 21
                          97.73.64.0/20 maxlen: 20
                          97.73.80.0/22 maxlen: 22
                          97.73.84.0/22 maxlen: 22
                          97.73.88.0/22 maxlen: 22
                          97.73.92.0/22 maxlen: 22
                          97.73.94.0/23 maxlen: 23
                          97.73.100.0/22 maxlen: 22
                          97.73.104.0/22 maxlen: 22
                          97.73.108.0/22 maxlen: 22
                          97.73.160.0/19 maxlen: 19
                          97.73.240.0/22 maxlen: 22
                          97.73.244.0/22 maxlen: 22
                          97.73.248.0/22 maxlen: 22
                          97.73.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:65:3b:e4:8b:bc:72:64:48:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=86c00914-ac24-4ef9-a5d5-8c444d5812db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:1f:62:24:06:5a:5c:ce:6f:b0:50:96:a4:
                    46:9b:0b:f4:b3:53:f0:0a:88:47:72:02:66:41:45:
                    ca:7d:c7:7e:63:9f:ba:56:3f:b9:eb:98:55:c3:d5:
                    8a:01:0c:59:4b:15:5c:a9:61:3d:43:33:50:6e:f6:
                    16:ba:77:6d:6b:ab:c9:63:d7:db:18:48:a3:f0:3c:
                    f1:e3:b3:a9:88:24:9f:f0:fd:0b:ad:9e:1d:54:21:
                    ef:11:d2:8e:cd:e7:66:b8:83:cb:59:c2:db:a9:25:
                    90:ea:d7:4e:77:9b:97:96:82:e0:1f:e6:97:24:89:
                    bd:87:47:72:40:89:d2:04:dc:0d:4e:be:69:b9:87:
                    30:c0:a2:fa:89:11:f4:80:79:b3:d2:03:a6:4e:2f:
                    2d:6e:76:91:f4:2b:fa:5f:b5:de:9f:0b:9f:80:64:
                    27:8a:3c:74:db:5d:03:d6:26:25:f2:74:da:93:3f:
                    1e:83:64:f9:91:31:08:f4:f8:16:b4:27:77:d7:b4:
                    01:36:9a:69:86:ce:b2:89:8d:65:d6:0c:44:c9:24:
                    d9:13:5f:93:9b:49:3d:51:a7:b5:bd:be:f7:1f:cc:
                    5c:ff:82:c9:74:de:d7:fc:9d:37:46:34:95:ca:21:
                    34:8a:c6:b3:cb:c1:40:52:fa:fe:eb:0c:8e:74:55:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:13:4E:54:11:48:91:4E:87:CA:B5:C8:AA:06:48:45:72:A4:ED:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/b7b642f2-58fa-3df0-9886-32be875da209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.73.0.0/19
                  97.73.48.0/21
                  97.73.64.0/19
                  97.73.100.0-97.73.111.255
                  97.73.160.0/19
                  97.73.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ad:d4:46:05:30:0f:1c:53:c1:9f:b7:2e:7e:2b:95:12:10:
         1b:08:9b:3c:3a:d5:5e:9b:a6:aa:8c:af:70:b0:5f:27:ef:65:
         69:30:e8:5c:2d:fe:01:e2:17:f0:b3:f6:5a:ca:44:98:04:0f:
         31:2d:63:04:12:94:d6:be:58:be:d3:e6:62:99:15:8d:d8:cc:
         b1:f7:2f:d8:8d:fe:0a:ae:69:c7:65:e8:a0:6b:4c:76:45:72:
         ec:17:1a:72:38:01:7e:6b:09:9f:28:0a:9a:23:73:08:ed:ce:
         0a:31:5e:31:7a:48:19:86:02:6d:8d:61:f2:2c:9a:9f:e1:0e:
         81:fb:8a:c1:c0:80:65:9e:7f:54:d0:2d:47:88:6a:43:89:38:
         ae:be:83:f7:0b:8c:e5:48:3c:67:2f:f5:04:b7:98:8d:e6:f8:
         06:77:86:ca:9e:6b:6e:8d:a4:6d:24:25:86:ac:8b:5c:25:8d:
         1a:b3:06:30:b9:2e:0f:85:01:af:f6:6d:2d:63:9c:be:ca:54:
         8e:e6:75:1f:93:c5:6e:f3:35:3e:68:84:32:a3:a1:fa:27:20:
         4e:3a:1f:9c:34:75:24:40:23:66:94:17:f7:60:6d:39:a9:22:
         77:ba:33:0b:02:aa:9f:56:bf:9c:0d:f4:c4:2e:b6:07:8d:a3:
         81:d7:59:06
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEpR0GU75Iu8cmRIuQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0
NDYwMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
ODZjMDA5MTQtYWMyNC00ZWY5LWE1ZDUtOGM0NDRkNTgxMmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriEfYiQGWlzOb7BQlqRGmwv0s1PwCohHcgJm
QUXKfcd+Y5+6Vj+565hVw9WKAQxZSxVcqWE9QzNQbvYWundta6vJY9fbGEij8Dzx
47OpiCSf8P0LrZ4dVCHvEdKOzedmuIPLWcLbqSWQ6tdOd5uXloLgH+aXJIm9h0dy
QInSBNwNTr5puYcwwKL6iRH0gHmz0gOmTi8tbnaR9Cv6X7XenwufgGQnijx0210D
1iYl8nTakz8eg2T5kTEI9PgWtCd317QBNppphs6yiY1l1gxEySTZE1+Tm0k9Uae1
vb73H8xc/4LJdN7X/J03RjSVyiE0isazy8FAUvr+6wyOdFWzlwIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFIATTlQRSJFOh8q1yKoGSEVypO3xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4
ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvYjdiNjQyZjItNThmYS0z
ZGYwLTk4ODYtMzJiZTg3NWRhMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk
MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy
NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5
ZTIzMjQ0NjAuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQFYUkAAwQD
YUkwAwQFYUlAMAwDBAJhSWQDBARhSWADBAVhSaADBARhSfAwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAq3U
RgUwDxxTwZ+3Ln4rlRIQGwibPDrVXpumqoyvcLBfJ+9laTDoXC3+AeIX8LP2WspE
mAQPMS1jBBKU1r5YvtPmYpkVjdjMsfcv2I3+Cq5px2XooGtMdkVy7BcacjgBfmsJ
nygKmiNzCO3OCjFeMXpIGYYCbY1h8iyan+EOgfuKwcCAZZ5/VNAtR4hqQ4k4rr6D
9wuM5Ug8Zy/1BLeYjeb4BneGyp5rbo2kbSQlhqyLXCWNGrMGMLkuD4UBr/ZtLWOc
vspUjuZ1H5PFbvM1PmiEMqOh+icgTjofnDR1JEAjZpQX92BtOakid7ozCwKqn1a/
nA30xC62B42jgddZBg==
-----END CERTIFICATE-----
Generated at Thu Jul 10 08:03:11 2025 by rpki-client