Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb1b154-4b60-3f63-b780-ba12c233b281.roa
File:                     ffb1b154-4b60-3f63-b780-ba12c233b281.roa (raw, json)
Hash identifier:          kDI08Snh4qg7xnlIiAGp8qW9MhyepyFOI1ybD/hOC9I=
Subject key identifier:   93:EE:07:70:63:93:4E:07:B9:2E:D5:78:4B:45:4E:9B:47:00:0A:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B1155373E75CD6A25F0CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb1b154-4b60-3f63-b780-ba12c233b281.roa
Signing time:             Tue 24 Mar 2026 15:44:58 +0000
ROA not before:           Tue 24 Mar 2026 15:44:58 +0000
ROA not after:            Mon 22 Jun 2026 15:44:58 +0000
asID:                     396561
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:15:53:73:e7:5c:d6:a2:5f:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:58 2026 GMT
            Not After : Jun 22 15:44:58 2026 GMT
        Subject: CN=6f1ff5b9-1891-41aa-b371-452307e766ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c3:5d:97:48:69:37:88:0f:56:e8:e6:07:7d:
                    07:2b:0b:b4:c2:87:85:54:b8:53:fb:9c:0b:98:fc:
                    ab:be:be:df:98:31:d2:4a:8a:db:d9:cc:b9:96:a3:
                    67:7b:f2:b9:c9:ac:6a:0b:bf:ae:30:90:72:ff:69:
                    a8:a4:81:a8:38:aa:e7:bd:98:ff:8a:41:9b:89:06:
                    d0:5b:49:03:5a:de:9b:69:c4:55:ce:b0:41:6e:f8:
                    f6:91:36:59:aa:f6:35:8e:4b:6b:df:ca:38:b2:65:
                    42:d2:18:aa:c2:8f:9e:03:76:52:c6:8c:64:f5:37:
                    d8:0b:41:cd:cd:f6:fe:43:eb:11:de:36:b1:57:14:
                    61:5c:94:a4:e8:7b:eb:24:8b:da:85:c2:75:4b:d1:
                    18:d2:7e:de:d9:89:4a:6d:52:94:36:12:3d:c1:16:
                    9e:f5:9b:dc:4d:63:c6:2a:2d:36:db:34:92:15:4e:
                    97:2a:39:d4:36:09:31:a6:6a:54:78:c0:1c:3c:38:
                    1d:9a:22:a8:db:ac:2b:98:af:9b:95:94:17:d5:35:
                    68:32:fc:92:30:95:14:19:92:99:9c:bc:6e:4d:cd:
                    7c:23:f5:02:83:45:a3:f8:59:16:92:b3:10:0b:d3:
                    bb:fa:70:a2:50:26:d2:7d:7b:13:1a:ad:57:75:ab:
                    da:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:07:70:63:93:4E:07:B9:2E:D5:78:4B:45:4E:9B:47:00:0A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb1b154-4b60-3f63-b780-ba12c233b281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f1:48:0c:1e:40:95:bd:70:01:73:c4:6f:5c:0b:eb:ba:9f:
         de:f6:12:eb:2a:57:cc:91:98:48:de:f6:1f:cb:aa:95:78:02:
         96:ee:44:06:cd:5b:7a:60:c6:6a:07:78:97:05:40:ce:1c:50:
         3a:8a:d3:f3:4d:3f:c7:9c:3a:3f:5b:f3:b6:3f:e0:2b:a3:6c:
         74:ee:60:c3:7e:71:ab:1b:cb:18:5c:ec:07:7b:c4:bc:01:3c:
         4b:7f:e7:57:84:a9:26:0a:52:5b:90:2c:26:3f:42:58:44:20:
         0e:dd:67:e1:50:0a:6b:fb:76:d8:5e:4a:1e:03:75:20:f9:1f:
         d0:06:d2:87:58:b0:4a:8b:67:ef:b9:98:5f:62:d4:68:e5:c2:
         3a:a2:c7:6e:50:73:79:4e:c3:77:02:48:c8:e7:24:1b:09:63:
         a2:5f:ab:06:b0:e3:29:fb:4e:ef:f3:28:21:6f:5a:7a:4b:85:
         a3:42:1e:66:70:63:b6:54:e4:71:87:a7:e9:18:e5:98:de:83:
         fe:58:9a:6b:9f:fe:e1:1b:1a:a2:4a:2f:9e:bf:07:53:4a:96:
         fd:81:ff:27:da:2d:ee:c2:e9:b7:cf:92:2f:0b:cd:28:82:ca:
         c0:81:67:13:87:d5:94:9c:5b:38:e7:52:7b:73:05:ba:3c:4b:
         1a:19:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:06 2026 by rpki-client