Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/e74bfd85-c41b-30e9-b9af-2602cd50bf08.roa
File:                     e74bfd85-c41b-30e9-b9af-2602cd50bf08.roa (raw, json)
Hash identifier:          gPLOJJViFoC+sJ5JyAt8dP+9x7pzkqVAMcOFltd5JhU=
Subject key identifier:   13:7D:6B:3C:28:57:3B:FA:6A:9A:8E:A6:F8:35:AD:0D:55:F6:6B:9E
Certificate issuer:       /CN=51dcdcba-3766-4509-a479-bbf02514719f
Certificate serial:       010D0C9F4328584DAAE02CAF9E46B301F5763580
Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/e74bfd85-c41b-30e9-b9af-2602cd50bf08.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     33387
IP address blocks:        207.90.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:2c:af:9e:46:b3:01:f5:76:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=b04da257-56e5-4d36-8eb9-0daad058c663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:14:49:83:35:97:a4:cd:32:63:34:64:9f:
                    cf:0e:23:2d:c9:86:f3:50:a6:0d:2f:37:5d:22:57:
                    ac:ae:47:c5:49:3c:29:04:9a:5c:a7:62:d1:99:50:
                    44:50:05:92:43:3e:5b:28:fc:49:ec:6f:4c:76:ff:
                    9d:f6:ba:e9:fd:e2:2b:71:c6:0f:56:cd:90:11:1a:
                    3c:c3:25:37:51:41:95:4c:61:d4:8d:4b:68:39:63:
                    8a:cf:7d:95:cb:86:e0:3e:fa:91:8a:9f:c0:0c:a9:
                    b1:fb:a8:30:88:cb:a7:8f:b9:32:cf:9b:3c:df:70:
                    62:4e:3a:2f:b6:85:a4:aa:6a:ad:35:22:d4:8c:ae:
                    05:cd:1f:d0:bf:c9:b5:ec:2d:b3:a8:76:33:7d:23:
                    ca:f1:4d:c1:6d:d3:d4:5e:ff:02:27:c7:5b:ee:2a:
                    21:03:fa:a7:a7:56:d4:19:aa:6f:9e:ca:f7:f4:b5:
                    52:cc:59:40:27:30:24:29:8a:da:fb:aa:5a:c3:1a:
                    f6:e9:3d:a4:dd:08:8e:d2:31:c4:8f:7f:06:41:ba:
                    26:a7:4a:ee:f0:3a:11:08:ac:8d:75:39:1a:c1:2c:
                    9f:d4:b4:40:fd:c7:f8:75:92:00:6f:f4:d0:7e:d3:
                    15:75:6d:cf:f0:07:8c:db:59:8a:63:74:b0:11:6e:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7D:6B:3C:28:57:3B:FA:6A:9A:8E:A6:F8:35:AD:0D:55:F6:6B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/e74bfd85-c41b-30e9-b9af-2602cd50bf08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl

            X509v3 Authority Key Identifier:
                keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:35:78:41:1e:9d:d0:75:ad:c5:87:a1:7b:c4:96:6e:8a:b3:
         01:a4:a7:e4:12:bb:5a:84:66:ae:bb:81:db:9c:6a:e0:e0:67:
         e4:92:d6:9f:61:b7:3d:19:f5:32:62:e4:29:76:ea:fc:17:60:
         53:51:a5:0c:44:d3:c8:1c:d5:0a:93:d0:d6:b2:29:fd:5d:6e:
         8d:d5:3a:b7:74:8e:dd:ea:80:5e:18:5b:dd:ac:3f:6d:23:ee:
         94:88:b5:ca:8b:0d:7b:ff:96:39:0e:0c:10:ab:a0:25:04:28:
         76:9e:56:77:b4:17:d9:85:d7:a3:aa:94:81:5f:b6:a0:7d:be:
         78:e5:c3:8c:f8:d4:a3:17:a0:b4:ca:4c:7e:fa:00:a7:3f:42:
         11:a8:62:41:1b:d2:b1:80:ff:c6:f3:03:85:c2:a7:61:9f:6d:
         4e:2a:78:da:3d:14:ca:96:1d:a3:b0:9a:4b:9c:22:4f:66:5b:
         dc:75:36:67:68:10:ab:00:f4:d0:2e:bf:4e:fa:58:6a:0f:6e:
         54:ef:99:69:1b:82:3a:af:e6:e0:32:97:41:7f:d6:d0:86:97:
         46:5c:55:3b:15:89:8d:84:f7:95:78:b8:94:de:69:0c:1c:25:
         43:53:a0:1f:86:86:20:d9:70:4a:ee:eb:60:b3:26:04:a5:f9:
         94:2e:fa:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4CyvnkazAfV2NYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkY2RjYmEtMzc2Ni00NTA5LWE0NzktYmJmMDI1MTQ3
MTlmMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
YjA0ZGEyNTctNTZlNS00ZDM2LThlYjktMGRhYWQwNThjNjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2wUSYM1l6TNMmM0ZJ/PDiMtyYbzUKYNLzdd
IlesrkfFSTwpBJpcp2LRmVBEUAWSQz5bKPxJ7G9Mdv+d9rrp/eIrccYPVs2QERo8
wyU3UUGVTGHUjUtoOWOKz32Vy4bgPvqRip/ADKmx+6gwiMunj7kyz5s833BiTjov
toWkqmqtNSLUjK4FzR/Qv8m17C2zqHYzfSPK8U3BbdPUXv8CJ8db7iohA/qnp1bU
Gapvnsr39LVSzFlAJzAkKYra+6pawxr26T2k3QiO0jHEj38GQbomp0ru8DoRCKyN
dTkawSyf1LRA/cf4dZIAb/TQftMVdW3P8AeM21mKY3SwEW43SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBN9azwoVzv6apqOpvg1rQ1V9mueMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWRj
ZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYwMjUxNDcxOWYvZTc0YmZkODUtYzQxYi0z
MGU5LWI5YWYtMjYwMmNkNTBiZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkY2RjYmEtMzc2Ni00NTA5LWE0
NzktYmJmMDI1MTQ3MTlmLzUxZGNkY2JhLTM3NjYtNDUwOS1hNDc5LWJiZjAyNTE0
NzE5Zi5jcmwwHwYDVR0jBBgwFoAU7bns8xwSTWh6d3O68CF2ject8m8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWRjZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYw
MjUxNDcxOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1rNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFE1eEEendB1rcWHoXvElm6KswGkp+QSu1qEZq67gducauDgZ+SS1p9h
tz0Z9TJi5Cl26vwXYFNRpQxE08gc1QqT0NayKf1dbo3VOrd0jt3qgF4YW92sP20j
7pSItcqLDXv/ljkODBCroCUEKHaeVne0F9mF16OqlIFftqB9vnjlw4z41KMXoLTK
TH76AKc/QhGoYkEb0rGA/8bzA4XCp2GfbU4qeNo9FMqWHaOwmkucIk9mW9x1Nmdo
EKsA9NAuv076WGoPblTvmWkbgjqv5uAyl0F/1tCGl0ZcVTsViY2E95V4uJTeaQwc
JUNToB+GhiDZcEru62CzJgSl+ZQu+rM=
-----END CERTIFICATE-----
Generated at Wed May 13 11:05:19 2026 by rpki-client