Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
File:                     1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa (raw, json)
Hash identifier:          FruVTeDHagPtb7xQ3ugJIIv8KTJu7FnbLsjzF/hf3cw=
Subject key identifier:   DE:D6:5D:D6:78:5C:55:56:11:A5:C8:85:51:BF:ED:39:E9:DC:22:01
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584A4F05C2DB4E58F1BBB1F96840
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     6621
IP address blocks:        97.72.0.0/19 maxlen: 19
                          97.72.32.0/21 maxlen: 21
                          97.72.40.0/21 maxlen: 21
                          97.72.40.0/24 maxlen: 24
                          97.72.48.0/21 maxlen: 21
                          97.72.56.0/21 maxlen: 21
                          97.72.69.0/24 maxlen: 24
                          97.72.70.0/24 maxlen: 24
                          97.72.73.0/24 maxlen: 24
                          97.72.74.0/24 maxlen: 24
                          97.72.80.0/20 maxlen: 20
                          97.72.80.0/24 maxlen: 24
                          97.72.81.0/24 maxlen: 24
                          97.72.84.0/24 maxlen: 24
                          97.72.85.0/24 maxlen: 24
                          97.72.87.0/24 maxlen: 24
                          97.72.88.0/24 maxlen: 24
                          97.72.94.0/24 maxlen: 24
                          97.72.95.0/24 maxlen: 24
                          97.72.96.0/19 maxlen: 19
                          97.72.128.0/19 maxlen: 19
                          97.72.161.0/24 maxlen: 24
                          97.72.162.0/23 maxlen: 23
                          97.72.164.0/22 maxlen: 22
                          97.72.168.0/21 maxlen: 21
                          97.72.176.0/23 maxlen: 23
                          97.72.178.0/24 maxlen: 24
                          97.72.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c2:db:4e:58:f1:bb:b1:f9:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=1613d62c-4710-4ba2-861b-60b9376c17ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:ab:93:63:67:87:d5:8f:fb:9a:65:33:d2:
                    32:b3:d6:1f:b6:09:84:a1:fc:a5:c3:f4:2a:c6:a0:
                    22:8c:9c:09:ab:ba:76:03:58:c3:66:04:81:f5:d2:
                    18:3f:4a:c0:40:94:70:19:ea:7f:cb:c0:d0:c5:0d:
                    a3:aa:fa:3f:3b:cd:3e:87:22:61:0f:30:ce:d5:52:
                    d5:03:3a:5a:f1:e1:7b:7d:58:dc:68:97:70:1f:4f:
                    00:55:2e:3b:37:bd:95:43:cc:d3:eb:73:d4:98:d8:
                    0c:95:4a:75:da:e4:0a:02:bf:dd:9e:06:22:23:d3:
                    08:3b:c6:ad:24:98:f3:c8:9a:85:35:13:6b:6f:d4:
                    2c:b5:fd:c8:80:a9:91:0c:3b:1a:72:49:e1:fa:40:
                    87:ea:34:0d:05:27:77:b7:54:17:3e:47:c7:be:b7:
                    d0:87:83:b7:b5:9e:ff:76:f4:56:13:e8:4c:b0:7a:
                    a2:38:15:aa:ef:9d:a3:99:c4:0c:f8:63:cc:7d:7d:
                    20:c3:11:02:81:d0:6e:10:17:6e:05:12:c6:ae:f2:
                    78:f4:4a:c9:27:fe:5d:ca:14:3c:bd:6a:f9:14:fb:
                    a7:4f:c2:94:80:50:21:36:66:55:c1:81:4c:31:4a:
                    57:98:b3:a1:9e:65:46:70:41:49:9b:7b:45:17:6e:
                    92:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D6:5D:D6:78:5C:55:56:11:A5:C8:85:51:BF:ED:39:E9:DC:22:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/1a87bf76-4cca-3c68-9dab-bcd2e9a7ddfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.72.0.0/18
                  97.72.69.0-97.72.70.255
                  97.72.73.0-97.72.74.255
                  97.72.80.0-97.72.159.255
                  97.72.161.0-97.72.178.255
                  97.72.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:e0:44:03:f6:c0:09:71:0d:fd:4e:00:57:eb:f8:78:ad:
         32:dc:e5:a1:4a:d8:98:f7:b7:84:40:d5:3c:ce:c3:3a:a6:08:
         c9:11:71:5f:ae:1d:b1:1c:8a:25:b5:31:c6:76:d9:e5:3b:ca:
         61:42:ee:4b:59:6f:44:5e:c7:53:eb:6e:07:da:25:8a:58:1c:
         1b:6c:65:fd:07:ae:87:54:dd:90:b2:d8:61:d4:e8:a0:49:39:
         de:89:47:53:a3:6c:d0:9a:8f:d3:14:1d:c0:9a:67:6b:ed:35:
         49:d3:8f:4b:96:31:a5:00:17:fe:56:b4:64:9d:6c:c1:b3:07:
         cb:66:ec:ba:d8:7c:62:65:1d:52:50:19:c2:ec:9f:7d:e8:6a:
         5b:f1:8a:75:74:06:5e:c2:7c:07:c9:00:d4:54:4e:19:01:41:
         13:58:bb:45:d4:0b:2f:23:21:1c:84:54:36:a3:6f:d1:5c:4a:
         ee:0a:5d:2f:dd:ef:95:40:e6:de:8e:59:73:d7:76:00:81:59:
         04:35:45:ea:22:33:1f:63:a2:3a:f8:32:37:5e:9e:97:5c:2e:
         73:8a:c8:6a:8c:4e:9e:24:04:12:45:73:77:fb:ab:94:d6:e0:
         2f:5c:c0:be:47:4f:00:f0:f8:98:ef:40:25:00:9d:66:89:bc:
         bc:77:39:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:52:11 2025 by rpki-client