Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/59739138-fe36-3341-b535-cabbce085492.roa
File:                     59739138-fe36-3341-b535-cabbce085492.roa (raw, json)
Hash identifier:          Qb1Wi4zqZ1cbqK8cjrRVgmRdDXm2LnTw1Ulrm9AEwRk=
Subject key identifier:   00:95:AC:19:8B:CB:EE:DB:7C:8A:A2:2B:0C:0A:CD:60:1C:02:E5:60
Certificate issuer:       /CN=51bc191e-8099-456b-a031-887cfe009d4a
Certificate serial:       010D0C9F43285848748B218EAB4F324B559C19C0
Authority key identifier: 27:E8:AB:0E:25:E2:21:38:CD:D5:9B:0F:F5:B0:85:4D:39:26:B6:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/59739138-fe36-3341-b535-cabbce085492.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     398879
IP address blocks:        23.129.80.0/24 maxlen: 24
                          66.118.24.0/22 maxlen: 24
                          158.51.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/51bc191e-8099-456b-a031-887cfe009d4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/51bc191e-8099-456b-a031-887cfe009d4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:21:8e:ab:4f:32:4b:55:9c:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc191e-8099-456b-a031-887cfe009d4a
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=75155ae4-9ead-4e71-b58f-52c4cda7414f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:c9:60:5d:a7:1a:4b:fc:20:98:bb:07:ce:
                    c6:97:5c:db:8b:10:0f:25:cb:3b:d5:c3:4f:72:6a:
                    56:6e:39:7d:d3:85:34:52:7b:83:57:c5:f2:82:a2:
                    15:2a:0a:0d:7e:9e:05:c5:19:65:c1:41:b0:71:0f:
                    e3:30:bd:66:8f:4a:ff:ce:c1:62:30:0d:75:1d:7d:
                    17:83:35:95:31:d6:f9:60:de:37:f4:48:71:49:83:
                    b0:47:02:7b:78:e9:c0:8d:6b:ae:d4:e1:6e:82:1c:
                    f6:59:de:bc:82:96:e3:77:bd:a4:96:a3:7c:0f:4c:
                    5b:58:bc:5f:4a:e9:92:3c:75:8b:db:37:4e:4c:c9:
                    ee:45:7c:14:99:ec:2e:a9:6f:c5:35:64:e8:8e:aa:
                    87:e5:7c:94:14:6c:6d:20:02:84:fb:2a:b4:95:33:
                    98:4e:08:b1:d6:97:14:3f:c0:a7:6d:8c:97:9f:7d:
                    e8:06:00:33:51:7a:2d:7a:c1:81:9f:2e:5f:49:a7:
                    7f:f9:72:75:a4:07:0a:9d:b0:85:e9:51:e1:a5:0e:
                    4e:33:2b:0d:e0:eb:13:e6:72:62:a0:05:d9:d5:d6:
                    98:70:3c:a0:d8:64:1d:a0:b2:da:76:37:55:38:19:
                    83:ec:78:23:55:b6:41:1d:97:dc:31:52:72:03:db:
                    ae:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:95:AC:19:8B:CB:EE:DB:7C:8A:A2:2B:0C:0A:CD:60:1C:02:E5:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/59739138-fe36-3341-b535-cabbce085492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a/51bc191e-8099-456b-a031-887cfe009d4a.crl

            X509v3 Authority Key Identifier:
                keyid:27:E8:AB:0E:25:E2:21:38:CD:D5:9B:0F:F5:B0:85:4D:39:26:B6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/51bc191e-8099-456b-a031-887cfe009d4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.80.0/24
                  66.118.24.0/22
                  158.51.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:80:b6:2f:f7:af:33:dc:70:27:cc:6d:46:c2:e0:61:e8:0b:
         2d:26:94:e4:d1:39:58:67:96:63:a6:4c:d0:28:0f:91:da:ce:
         3b:2a:2b:60:2a:46:00:0c:68:cb:67:8b:0e:19:c6:fd:7c:d0:
         f6:e3:dc:6c:84:96:8e:1e:1c:05:e7:af:6c:2b:64:da:48:e7:
         93:19:40:59:11:03:54:c7:7f:b3:fa:c2:19:45:e9:31:b8:d0:
         5e:88:ac:f0:da:70:0b:a4:92:a5:9b:4c:f1:7c:dd:ca:86:ef:
         83:d6:38:3a:ae:c3:ff:33:21:9d:cd:d8:30:e6:12:54:a0:32:
         59:20:f9:e0:03:f8:bd:a2:22:b0:61:93:98:60:79:d0:b6:7d:
         9c:da:e2:f8:fa:8e:69:2b:b4:56:73:e7:ae:b0:1e:a5:0c:f8:
         c4:2a:7b:6a:13:e4:66:04:3f:07:7e:f0:13:59:3a:f4:cb:68:
         4e:c4:e0:06:a4:fc:6c:36:8d:4d:6c:51:76:c4:fa:2b:e4:36:
         43:3a:c4:08:d7:25:b6:65:6b:e0:e0:05:b3:b7:6f:68:d1:48:
         1d:fa:99:9b:8d:1f:fd:6c:17:94:59:25:5e:a1:c4:95:67:6b:
         0c:1c:53:e9:27:b1:53:3a:be:6c:7c:ba:e0:ab:3a:fc:42:71:
         63:d9:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:58 2025 by rpki-client