Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/59739138-fe36-3341-b535-cabbce085492.roa
File:                     59739138-fe36-3341-b535-cabbce085492.roa (raw, json)
Hash identifier:          hNRNNP9vKZEHwvtEh+uVyLSiBJZ3tydAKL28e3BIkQs=
Subject key identifier:   CE:0E:2A:4C:F4:61:3E:AD:2B:9D:C5:E2:FB:04:9F:42:4E:BC:02:2D
Certificate issuer:       /CN=51bc191e-8099-456b-a031-887cfe009d4a
Certificate serial:       010D0C9F4328584F374D2CEE531B3264E152A000
Authority key identifier: 27:E8:AB:0E:25:E2:21:38:CD:D5:9B:0F:F5:B0:85:4D:39:26:B6:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/59739138-fe36-3341-b535-cabbce085492.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     398879
IP address blocks:        23.129.80.0/24 maxlen: 24
                          66.118.24.0/22 maxlen: 24
                          158.51.11.0/24 maxlen: 24
                          173.214.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/51bc191e-8099-456b-a031-887cfe009d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/51bc191e-8099-456b-a031-887cfe009d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:2c:ee:53:1b:32:64:e1:52:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc191e-8099-456b-a031-887cfe009d4a
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=928cbeb0-75ef-4e7a-a19f-e44f0d37b0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:63:4a:5e:df:5c:33:5b:e6:9f:c4:0f:db:77:
                    58:34:4e:e2:ca:cf:1f:eb:32:14:3c:36:06:0f:37:
                    f6:82:67:11:f1:62:05:80:ac:a2:82:c0:49:ca:e9:
                    f8:70:01:ca:a5:04:0d:a2:21:56:5d:8e:8c:de:09:
                    81:14:95:9c:9e:3a:92:8c:10:9a:f9:c0:fd:64:22:
                    67:7e:ea:80:cc:1d:9f:19:9a:8e:69:f0:2d:1b:c4:
                    27:e1:45:23:89:2b:39:c7:9f:49:17:14:e6:a2:8b:
                    c7:4b:e1:52:05:32:be:58:9d:53:32:76:70:63:36:
                    8d:b6:82:5f:09:ad:e7:5b:d7:23:14:a0:7f:cc:db:
                    10:9b:06:37:d6:96:b2:d8:c7:4c:f6:44:93:2b:38:
                    a0:20:41:6c:70:90:bf:b6:6c:42:68:35:45:3e:e1:
                    8a:23:7a:30:71:be:19:df:5a:6f:40:48:3e:51:ab:
                    90:5c:17:61:d0:aa:94:5c:c3:b9:e5:1f:a9:62:90:
                    ed:ed:ff:dc:e4:63:ae:0c:05:71:df:c2:7f:66:ef:
                    60:e8:13:42:4e:51:5e:59:b8:d9:b2:ed:ed:25:04:
                    55:d5:95:3f:b2:ce:a0:1e:4e:95:20:9d:07:94:58:
                    77:ee:3b:26:1e:bf:ce:eb:65:8a:b7:9c:16:96:f3:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:2A:4C:F4:61:3E:AD:2B:9D:C5:E2:FB:04:9F:42:4E:BC:02:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/59739138-fe36-3341-b535-cabbce085492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/51bc191e-8099-456b-a031-887cfe009d4a.crl

            X509v3 Authority Key Identifier:
                keyid:27:E8:AB:0E:25:E2:21:38:CD:D5:9B:0F:F5:B0:85:4D:39:26:B6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.80.0/24
                  66.118.24.0/22
                  158.51.11.0/24
                  173.214.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:46:0b:57:66:56:a2:f2:92:84:b7:04:9d:2f:ef:f3:e7:a0:
         22:61:5e:95:5b:92:90:0f:11:c1:84:7a:e8:83:57:3f:e8:a5:
         b0:a4:86:ff:8e:6a:9e:a9:c9:5a:f0:3d:c0:10:5b:e7:50:da:
         da:11:ac:c9:2b:5d:83:a5:19:7a:82:7d:b0:28:a0:e5:c8:79:
         78:42:51:62:b5:a8:cb:dd:03:e8:9f:7f:31:dd:6f:b7:66:23:
         a8:2f:56:42:66:af:70:57:4a:c3:20:f7:c9:00:27:39:54:66:
         95:64:87:7c:9a:8b:94:e0:3a:96:e9:35:59:69:bb:3a:da:f2:
         03:68:98:1e:b1:86:be:74:80:fe:f2:fa:72:ab:ff:24:42:52:
         05:6d:0c:b4:da:7e:e8:f4:a5:06:65:44:9f:08:d8:0a:5c:94:
         c2:6b:c5:f8:98:f9:1c:15:09:f3:aa:66:47:4d:42:0d:0d:a7:
         d2:96:42:d4:6a:9c:7e:32:04:2d:52:70:e5:81:9a:8c:ec:f0:
         a4:99:8e:87:9f:8a:d1:91:c6:c5:82:1f:25:01:d0:6c:be:aa:
         f1:af:7e:b4:99:e3:95:d4:f6:dc:4e:cb:a2:9c:c8:c4:f9:41:
         e3:f8:8f:2f:2b:2f:ee:91:ff:0b:8c:cc:82:08:ec:9e:4b:1d:
         31:c4:ec:7c
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE83TSzuUxsyZOFSoAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFiYzE5MWUtODA5OS00NTZiLWEwMzEtODg3Y2ZlMDA5
ZDRhMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
OTI4Y2JlYjAtNzVlZi00ZTdhLWExOWYtZTQ0ZjBkMzdiMGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2NKXt9cM1vmn8QP23dYNE7iys8f6zIUPDYG
Dzf2gmcR8WIFgKyigsBJyun4cAHKpQQNoiFWXY6M3gmBFJWcnjqSjBCa+cD9ZCJn
fuqAzB2fGZqOafAtG8Qn4UUjiSs5x59JFxTmoovHS+FSBTK+WJ1TMnZwYzaNtoJf
Ca3nW9cjFKB/zNsQmwY31pay2MdM9kSTKzigIEFscJC/tmxCaDVFPuGKI3owcb4Z
31pvQEg+UauQXBdh0KqUXMO55R+pYpDt7f/c5GOuDAVx38J/Zu9g6BNCTlFeWbjZ
su3tJQRV1ZU/ss6gHk6VIJ0HlFh37jsmHr/O62WKt5wWlvPQ8wIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFM4OKkz0YT6tK53F4vsEn0JOvAItMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MWJj
MTkxZS04MDk5LTQ1NmItYTAzMS04ODdjZmUwMDlkNGEvNTk3MzkxMzgtZmUzNi0z
MzQxLWI1MzUtY2FiYmNlMDg1NDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTFiYzE5MWUtODA5OS00NTZiLWEw
MzEtODg3Y2ZlMDA5ZDRhLzUxYmMxOTFlLTgwOTktNDU2Yi1hMDMxLTg4N2NmZTAw
OWQ0YS5jcmwwHwYDVR0jBBgwFoAUJ+irDiXiITjN1ZsP9bCFTTkmttUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81MWJjMTkxZS04MDk5LTQ1NmItYTAzMS04ODdj
ZmUwMDlkNGEuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF4FQAwQC
QnYYAwQAnjMLAwQBrdbcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEFGC1dmVqLykoS3BJ0v7/PnoCJhXpVb
kpAPEcGEeuiDVz/opbCkhv+Oap6pyVrwPcAQW+dQ2toRrMkrXYOlGXqCfbAooOXI
eXhCUWK1qMvdA+iffzHdb7dmI6gvVkJmr3BXSsMg98kAJzlUZpVkh3yai5TgOpbp
NVlpuzra8gNomB6xhr50gP7y+nKr/yRCUgVtDLTafuj0pQZlRJ8I2ApclMJrxfiY
+RwVCfOqZkdNQg0Np9KWQtRqnH4yBC1ScOWBmozs8KSZjoefitGRxsWCHyUB0Gy+
qvGvfrSZ45XU9txOy6KcyMT5QeP4jy8rL+6R/wuMzIII7J5LHTHE7Hw=
-----END CERTIFICATE-----
Generated at Tue Sep 29 03:55:36 2026 by rpki-client