Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
File:                     1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa (raw, json)
Hash identifier:          M8+j4PxxFH/ELtsl8Mqof554WRUV6qP2hF7V1BrsZRg=
Subject key identifier:   35:E7:2B:6C:46:BE:C2:B7:4C:AA:EC:85:E0:E3:F4:44:09:3A:7F:7A
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584DD0905413E808420BCED77880
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     6621
IP address blocks:        97.72.0.0/19 maxlen: 19
                          97.72.32.0/21 maxlen: 21
                          97.72.40.0/21 maxlen: 21
                          97.72.40.0/24 maxlen: 24
                          97.72.48.0/21 maxlen: 21
                          97.72.56.0/21 maxlen: 21
                          97.72.69.0/24 maxlen: 24
                          97.72.70.0/24 maxlen: 24
                          97.72.73.0/24 maxlen: 24
                          97.72.74.0/24 maxlen: 24
                          97.72.80.0/20 maxlen: 20
                          97.72.80.0/24 maxlen: 24
                          97.72.81.0/24 maxlen: 24
                          97.72.84.0/24 maxlen: 24
                          97.72.85.0/24 maxlen: 24
                          97.72.87.0/24 maxlen: 24
                          97.72.88.0/24 maxlen: 24
                          97.72.94.0/24 maxlen: 24
                          97.72.95.0/24 maxlen: 24
                          97.72.96.0/19 maxlen: 19
                          97.72.128.0/19 maxlen: 19
                          97.72.161.0/24 maxlen: 24
                          97.72.162.0/23 maxlen: 23
                          97.72.164.0/22 maxlen: 22
                          97.72.168.0/21 maxlen: 21
                          97.72.176.0/23 maxlen: 23
                          97.72.178.0/24 maxlen: 24
                          97.72.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:54:13:e8:08:42:0b:ce:d7:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=b1a3fd7a-4801-4de4-aa3c-5bde7259df17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:91:3c:1e:0d:cb:c9:ff:a3:3f:83:66:e2:
                    8b:79:4a:62:23:7e:59:bd:89:21:15:c3:45:7a:fb:
                    30:f5:ce:c4:60:cc:d0:fe:03:5e:56:22:c0:f1:c8:
                    df:42:ee:9e:52:08:ac:9d:9a:13:01:57:2a:ac:d7:
                    57:af:e0:35:6b:8a:9b:33:b9:82:2a:0a:c2:ae:90:
                    ab:97:a2:a3:18:a5:7c:a5:54:2c:fc:86:be:33:1c:
                    9a:54:85:d6:c6:af:73:1e:43:1c:21:76:a6:65:da:
                    07:37:86:25:45:9e:c3:bc:84:67:dc:c5:f0:cb:c3:
                    95:a6:e9:33:e7:e0:8e:f0:ae:60:f9:ff:46:f9:34:
                    c7:7c:6b:42:51:89:6c:27:ab:7b:94:5f:20:a5:6a:
                    7b:a1:ad:61:3e:46:72:f0:9c:58:02:79:fd:8b:31:
                    02:99:37:99:9d:16:8d:f5:21:ec:de:c1:36:21:2d:
                    4e:64:ac:22:c1:37:f6:33:ab:e8:60:31:23:b3:d1:
                    74:93:1d:ab:e9:bd:bc:1b:c5:f4:3d:9a:74:8d:73:
                    95:ff:64:7c:cd:50:4b:01:30:2b:f9:5e:83:e5:86:
                    d1:58:16:a6:15:d0:2f:38:81:eb:5f:3b:15:bd:69:
                    15:20:c5:a9:a5:16:1e:9f:75:7d:82:d8:ba:fc:08:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E7:2B:6C:46:BE:C2:B7:4C:AA:EC:85:E0:E3:F4:44:09:3A:7F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.72.0.0/18
                  97.72.69.0-97.72.70.255
                  97.72.73.0-97.72.74.255
                  97.72.80.0-97.72.159.255
                  97.72.161.0-97.72.178.255
                  97.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e4:d3:06:48:30:67:75:9e:cc:23:f6:9d:c8:53:87:44:8d:
         c8:7e:74:6b:42:df:ca:af:05:94:3e:06:90:17:18:bf:e7:76:
         6e:83:e5:4b:c4:32:a3:75:be:9c:ed:bc:c3:d9:f7:10:36:cd:
         00:50:a3:a2:0f:b5:43:37:48:32:55:0e:d3:83:34:e8:3e:9c:
         00:0f:8e:9c:ac:03:9b:91:34:5a:cc:2e:a8:cb:bc:d6:9a:50:
         d7:28:dc:b1:26:c2:ba:8b:18:a0:32:01:28:ad:f4:1a:07:f8:
         91:a3:76:0f:9b:3a:6e:e4:a4:f8:1b:56:f5:6e:be:c1:6f:bd:
         ea:59:0e:2a:8c:e1:6a:f1:a6:a1:05:3b:db:d9:c1:ed:b6:df:
         4b:2c:20:73:8d:b1:d7:96:f8:10:2f:35:06:29:0c:47:6c:23:
         fd:31:e6:64:67:09:33:cb:65:61:4a:e4:a4:15:aa:1f:c8:bb:
         5f:0a:d1:51:1e:dd:0b:a6:fe:85:91:d1:9a:b9:58:b4:8c:71:
         95:92:1b:f8:eb:7c:6f:c6:00:2d:a6:78:c0:5e:bb:6c:62:51:
         8f:7d:56:cd:63:a0:b2:88:11:a1:26:b1:b6:43:44:23:5d:14:
         2f:af:30:24:77:ac:f0:eb:7f:08:a8:92:f7:47:85:77:9f:c7:
         05:d7:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:58:58 2026 by rpki-client