Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa
File:                     70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json)
Hash identifier:          EuFCTiMYCfrgX00oOxGWC/ve7Ka4WXK42jsZO5EhzOg=
Subject key identifier:   55:A1:9E:CE:BF:B8:2C:35:C2:A6:A8:E6:ED:FF:0C:60:C0:C0:64:85
Certificate issuer:       /CN=94543699-4d50-4a37-8000-038c38671a86
Certificate serial:       010D0C9F4328584EF7175DFDDB84F937418F1400
Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     22115
IP address blocks:        172.111.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:5d:fd:db:84:f9:37:41:8f:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94543699-4d50-4a37-8000-038c38671a86
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=1566e396-a2ee-47d0-bc7c-2630c3e691f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:ab:39:7a:b5:32:9d:83:64:06:44:83:84:
                    d3:57:a4:1e:ff:c7:21:34:8d:27:19:31:b2:2c:74:
                    52:96:45:fa:24:e2:78:e7:1e:e4:3a:4b:2e:ed:b4:
                    da:e9:d6:cd:1c:17:e0:42:ce:d7:2d:5c:a5:aa:ac:
                    25:71:f8:d8:6c:9d:47:5a:72:93:7f:fc:dd:df:58:
                    7e:27:0e:ce:a3:8f:9a:79:be:37:81:91:db:c4:95:
                    81:6f:f7:fe:ab:7a:85:47:91:3d:ed:01:63:06:1e:
                    6b:34:a4:82:07:b4:66:08:38:da:d1:33:51:69:84:
                    8e:e9:54:17:b3:bd:38:03:ba:cb:db:35:cc:49:8b:
                    80:bd:e5:0b:de:12:82:7e:51:08:d0:30:f5:65:9e:
                    17:b1:49:16:75:60:db:24:ff:33:f2:8b:3d:95:1a:
                    84:28:b1:21:be:e5:42:cf:ee:ec:a2:4a:be:96:74:
                    a7:72:62:52:b0:e8:7d:64:c4:97:fa:91:02:ce:78:
                    04:99:39:94:c1:2c:46:c6:63:73:98:34:d8:6a:02:
                    13:7d:f3:55:7c:b0:d1:ac:cb:9e:39:7a:5e:93:af:
                    3b:dc:91:60:86:8f:d3:27:0e:a0:b4:4c:65:d8:06:
                    0f:12:64:17:5f:34:55:8a:5f:59:d9:3f:2d:6f:a0:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A1:9E:CE:BF:B8:2C:35:C2:A6:A8:E6:ED:FF:0C:60:C0:C0:64:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl

            X509v3 Authority Key Identifier:
                keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6a:a4:a2:ec:13:0a:5c:b0:17:b4:93:07:46:3a:86:86:3f:
         db:12:b1:34:9a:ce:bb:fe:2b:77:51:cb:17:40:83:60:e8:31:
         4d:30:94:0f:17:44:51:f8:b7:29:91:30:2b:f4:aa:16:40:71:
         6f:6c:b6:d8:b7:5e:a2:03:82:8e:39:18:5e:db:e0:db:49:bd:
         51:d2:6a:39:10:27:f9:c0:1f:5e:43:64:e5:cf:41:ba:ac:83:
         d3:2c:f8:cb:25:ec:b0:f6:b3:43:9d:00:80:b9:ac:fb:a1:74:
         b8:2b:99:86:86:aa:2d:ce:8e:5c:a1:81:6d:eb:cd:75:cb:f8:
         73:32:e4:49:e2:08:fa:a4:1d:7a:a6:4f:3e:18:d8:e5:02:87:
         8a:09:c8:84:a5:10:47:ca:84:ad:9c:25:65:86:33:a7:4a:26:
         91:44:99:e8:68:2b:89:e6:e0:73:8c:e5:38:1d:23:e1:8e:0c:
         40:54:77:e7:a7:3c:d3:69:18:d1:60:ac:fd:f1:6a:e5:11:31:
         ea:96:b0:45:ff:c4:33:82:6d:7c:ff:43:ca:a3:38:c2:3d:f0:
         03:66:3f:e6:b3:90:d6:cd:52:38:64:27:c7:2f:b0:31:e4:74:
         37:38:78:54:dd:f4:02:27:d9:be:58:6d:39:7d:96:52:a9:4f:
         97:91:b9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:51:35 2026 by rpki-client