Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa
File:                     ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa (raw, json)
Hash identifier:          Ws5Mn8aKN0SON/u+N7X8R1mgBviimv17W4xJMlwWDrQ=
Subject key identifier:   01:CA:60:03:C4:33:18:7C:75:44:29:D4:26:A1:3A:08:1F:37:73:EA
Certificate issuer:       /CN=94543699-4d50-4a37-8000-038c38671a86
Certificate serial:       010D0C9F4328584DA6B01DDA216110B99C907280
Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     6939
IP address blocks:        172.111.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:1d:da:21:61:10:b9:9c:90:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94543699-4d50-4a37-8000-038c38671a86
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=e6b64441-4c82-4144-a71a-3005982a5ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:be:23:4a:76:c8:27:d1:c5:7e:f7:01:5a:
                    10:70:8b:d8:2b:f8:79:47:29:1b:90:d8:04:49:9b:
                    3f:76:01:4e:19:11:d1:36:8b:11:49:4b:22:8c:ff:
                    54:82:34:8e:9b:96:f1:d6:ca:eb:c1:b6:18:5a:25:
                    bb:4e:1e:6b:6b:c6:54:82:74:6c:6b:dd:1b:fa:4b:
                    83:d2:e7:8f:d6:2d:14:9e:cd:42:27:fb:f5:03:3e:
                    b5:94:3e:89:37:07:20:9e:53:b9:41:f6:3c:bb:11:
                    71:62:a9:d3:f5:d4:ec:39:b8:7a:13:17:8d:55:74:
                    fb:36:c1:24:0e:6a:cc:10:8e:a4:9c:b9:e5:66:8b:
                    1d:38:eb:45:2f:52:19:c5:29:ce:36:7a:da:b8:66:
                    c7:e5:f8:70:e5:39:0a:9a:b2:1b:6f:78:6e:0d:3f:
                    de:8a:6c:db:3a:9a:4a:ef:00:c0:13:d8:62:7f:cd:
                    05:90:5a:27:7f:44:62:0d:e4:b8:cf:3b:fc:99:61:
                    3a:b5:fd:bb:7c:d0:17:8b:80:2f:ab:e5:7e:fb:f0:
                    92:ff:04:b4:92:ee:d1:b8:d6:3f:d1:9c:68:ef:01:
                    cb:9a:8c:7f:2c:7e:c8:26:10:ec:c2:c4:8b:6b:12:
                    d6:46:03:32:1e:20:85:10:ba:93:90:06:35:10:f3:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CA:60:03:C4:33:18:7C:75:44:29:D4:26:A1:3A:08:1F:37:73:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/ffc4e20c-a6cf-3c3b-9c67-a909a68af906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl

            X509v3 Authority Key Identifier:
                keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:5e:ad:8b:a1:ea:27:ab:35:87:05:3c:fd:70:4a:89:1e:
         ab:a5:a5:b0:fc:a8:84:0f:72:31:d4:1d:09:28:8c:cb:4e:45:
         43:9b:88:8b:ee:8f:0c:5b:90:5f:d8:3c:bb:4b:59:0f:5c:77:
         7c:39:70:6d:53:ed:d3:97:5f:6c:cb:45:e7:a4:ca:d4:05:c2:
         1c:65:9a:c6:3a:c0:31:7a:48:04:b7:54:11:82:74:a3:8d:c1:
         ce:cd:4a:cc:e4:61:5e:e6:2a:5a:e6:6a:d7:cf:b1:f3:48:67:
         a4:2b:55:d0:9d:55:cd:14:c6:83:13:fe:1d:37:f7:7e:c1:3d:
         89:6f:48:2c:02:27:a4:b4:68:ae:d8:c8:91:7c:b1:c6:f4:21:
         a3:e0:e5:7d:98:b3:79:6e:8f:b1:c8:f8:f7:0d:89:22:91:29:
         26:8f:88:df:f9:d7:11:f3:82:49:06:6a:00:9b:1d:81:5e:1b:
         a4:39:45:65:b9:06:f4:72:1b:c9:ba:86:3b:b8:74:7e:9d:f5:
         4c:31:28:48:00:a4:1e:1a:ff:fa:ed:7b:b5:a8:87:aa:d6:c8:
         67:9a:26:e5:77:39:b2:0c:38:f3:4f:e5:1a:cb:d8:b4:7c:93:
         8e:24:98:42:07:93:b5:5d:17:bf:db:3a:9f:ea:97:36:fe:5f:
         55:e8:26:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msB3aIWEQuZyQcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx
YTg2MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZTZiNjQ0NDEtNGM4Mi00MTQ0LWE3MWEtMzAwNTk4MmE1ZWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDG+I0p2yCfRxX73AVoQcIvYK/h5RykbkNgE
SZs/dgFOGRHRNosRSUsijP9UgjSOm5bx1srrwbYYWiW7Th5ra8ZUgnRsa90b+kuD
0ueP1i0Uns1CJ/v1Az61lD6JNwcgnlO5QfY8uxFxYqnT9dTsObh6ExeNVXT7NsEk
DmrMEI6knLnlZosdOOtFL1IZxSnONnrauGbH5fhw5TkKmrIbb3huDT/eimzbOppK
7wDAE9hif80FkFonf0RiDeS4zzv8mWE6tf27fNAXi4Avq+V++/CS/wS0ku7RuNY/
0Zxo7wHLmox/LH7IJhDswsSLaxLWRgMyHiCFELqTkAY1EPOgPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHKYAPEMxh8dUQp1CahOggfN3PqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0
MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvZmZjNGUyMGMtYTZjZi0z
YzNiLTljNjctYTkwOWE2OGFmOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw
MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3
MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj
Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrG8WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG61Xq2LoeonqzWHBTz9cEqJHqulpbD8qIQPcjHUHQkojMtORUObiIvu
jwxbkF/YPLtLWQ9cd3w5cG1T7dOXX2zLReekytQFwhxlmsY6wDF6SAS3VBGCdKON
wc7NSszkYV7mKlrmatfPsfNIZ6QrVdCdVc0UxoMT/h03937BPYlvSCwCJ6S0aK7Y
yJF8scb0IaPg5X2Ys3luj7HI+PcNiSKRKSaPiN/51xHzgkkGagCbHYFeG6Q5RWW5
BvRyG8m6hju4dH6d9UwxKEgApB4a//rte7Woh6rWyGeaJuV3ObIMOPNP5RrL2LR8
k44kmEIHk7VdF7/bOp/qlzb+X1XoJq4=
-----END CERTIFICATE-----
Generated at Wed May 13 12:33:35 2026 by rpki-client