Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/59739138-fe36-3341-b535-cabbce085492.roa
File:                     59739138-fe36-3341-b535-cabbce085492.roa (raw, json)
Hash identifier:          frao8kRlitoNqNS8s2Wo8RDCoYQOzO+A1RFF0rFzN30=
Subject key identifier:   74:A7:B3:97:D7:E6:9C:9B:A7:33:0D:2F:D4:0E:DA:48:74:66:81:A5
Certificate issuer:       /CN=51bc191e-8099-456b-a031-887cfe009d4a
Certificate serial:       010D0C9F4328584E94EA5DCCC50FF8F8F5B56F00
Authority key identifier: 27:E8:AB:0E:25:E2:21:38:CD:D5:9B:0F:F5:B0:85:4D:39:26:B6:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/59739138-fe36-3341-b535-cabbce085492.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     398879
IP address blocks:        23.129.80.0/24 maxlen: 24
                          66.118.24.0/22 maxlen: 24
                          158.51.11.0/24 maxlen: 24
                          173.214.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/51bc191e-8099-456b-a031-887cfe009d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/51bc191e-8099-456b-a031-887cfe009d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5d:cc:c5:0f:f8:f8:f5:b5:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc191e-8099-456b-a031-887cfe009d4a
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=43901666-e39e-434a-9243-16c1eafd9c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:57:16:11:cd:65:99:e7:b0:97:08:b9:62:90:
                    f5:11:3c:5c:09:88:89:b0:1a:e1:4c:63:64:58:77:
                    2d:31:f0:1a:c6:37:39:9f:34:0f:8a:9e:ee:5e:95:
                    68:57:4e:3e:9f:99:62:b5:80:39:03:0a:7f:fa:39:
                    82:8a:ec:be:66:ca:a8:2d:44:bc:1f:37:a7:a6:47:
                    33:31:a8:af:be:b2:8c:b5:ab:9f:5c:b4:b8:c8:f0:
                    98:2b:86:17:82:e6:0b:3b:86:8e:a2:d2:14:c7:8e:
                    31:53:32:75:5b:81:91:44:0d:b6:5b:fc:a2:78:09:
                    2c:8e:ce:9d:62:48:5b:78:0e:bc:be:e7:f6:36:92:
                    37:e8:33:dd:4b:7d:35:d2:e6:e9:73:a9:96:c4:e5:
                    97:72:d2:aa:d5:f3:1e:6e:4f:b6:c7:53:37:8f:71:
                    80:3e:01:0e:70:e4:d3:90:a7:98:50:86:9a:b0:2b:
                    79:c6:bd:63:ff:28:c0:b8:8a:ea:3b:3c:41:a5:fd:
                    2c:59:35:d7:dc:35:84:40:49:56:8e:00:01:4e:85:
                    f6:6c:1b:94:6b:3c:db:15:ab:39:9e:fd:d3:f9:27:
                    3d:00:4a:39:a5:59:f4:fb:2d:63:9f:18:c2:09:12:
                    3e:a9:6a:25:bd:01:30:c4:c3:68:39:dc:73:11:aa:
                    aa:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A7:B3:97:D7:E6:9C:9B:A7:33:0D:2F:D4:0E:DA:48:74:66:81:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/59739138-fe36-3341-b535-cabbce085492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/51bc191e-8099-456b-a031-887cfe009d4a.crl

            X509v3 Authority Key Identifier:
                keyid:27:E8:AB:0E:25:E2:21:38:CD:D5:9B:0F:F5:B0:85:4D:39:26:B6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.80.0/24
                  66.118.24.0/22
                  158.51.11.0/24
                  173.214.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:75:e7:ce:1f:e9:d0:a7:96:e3:f3:f0:99:66:99:ec:77:ba:
         7a:61:9e:45:d0:31:fe:8d:54:74:5d:3a:d8:bf:20:58:c5:0f:
         ee:9e:dc:19:1b:d9:43:d9:67:6a:51:cb:6a:02:5b:68:98:04:
         53:1e:e9:dc:5d:e3:a3:22:61:09:48:cb:0d:48:15:ea:7b:ea:
         95:86:de:f5:bd:f8:93:6e:1b:3e:8b:93:df:ee:d9:96:cd:4f:
         3d:04:cb:4c:45:5f:25:55:d5:5e:1e:d6:c1:a2:ad:70:30:9f:
         d3:08:91:44:bd:79:f5:d1:29:b5:2e:d4:ad:a7:98:81:6c:47:
         6a:06:87:20:73:fb:91:b4:63:5b:b5:f3:85:d5:5e:62:0c:eb:
         22:8c:38:60:22:ff:c0:ac:31:40:34:3b:18:af:06:cc:ca:cb:
         ba:7b:26:0d:1c:88:18:8e:c9:b5:c1:0e:2b:f1:e0:8b:79:ba:
         02:4d:2e:86:11:4b:8c:e4:d5:e6:fb:1a:29:28:5c:82:45:bc:
         26:37:64:26:4e:f8:d6:18:c4:4d:b1:b5:74:05:5b:46:59:1c:
         a7:3f:7e:05:6d:c7:bf:dd:ec:5c:e8:65:5c:a1:f8:97:8c:a2:
         16:b7:0a:c3:82:46:e4:93:9e:13:a6:15:31:87:39:72:bc:2a:
         e6:85:50:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:26:12 2026 by rpki-client