Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb5d9ce-68d4-3960-bbb2-34b4600647eb.roa
File:                     cfb5d9ce-68d4-3960-bbb2-34b4600647eb.roa (raw, json)
Hash identifier:          3KHMYtmvFGZXmlvrxcWWrNuHWy19yZUgvvkecb/mQ+M=
Subject key identifier:   62:3D:C3:37:C9:E0:BA:51:9A:9C:52:DC:4E:01:5C:AA:F6:65:23:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAEA23CC09703BAA9F55D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb5d9ce-68d4-3960-bbb2-34b4600647eb.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33652
IP address blocks:        23.31.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:a2:3c:c0:97:03:ba:a9:f5:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=3816a94d-21b0-4537-b3b5-ad2cd135a265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:14:22:75:6e:75:1a:eb:cf:6c:ff:f5:02:
                    da:bc:2b:c5:37:92:78:0e:47:2f:53:a1:c1:bc:12:
                    d5:9a:54:02:84:0f:3b:a0:db:8c:84:60:30:26:5b:
                    1e:98:4e:23:4f:fb:4f:a9:67:b5:43:b2:7f:54:2d:
                    10:0c:c1:79:43:ae:a4:98:28:48:98:55:a8:6f:c7:
                    5d:da:21:af:57:5d:c6:49:8d:18:6a:e8:04:41:e5:
                    f8:d2:68:9e:6c:a8:a6:40:e9:90:fc:8a:ac:06:73:
                    37:83:73:36:e8:fd:b3:6c:07:60:98:b0:86:22:67:
                    61:5c:11:e5:ad:37:2e:a4:7a:8c:4d:21:bd:2d:6c:
                    28:da:7e:59:c3:32:2c:63:24:59:11:b5:13:a9:5a:
                    9e:51:39:ab:52:c8:21:07:9d:5c:06:66:99:0f:25:
                    ca:e8:1a:77:d3:a6:78:71:69:4e:1b:b2:ee:0a:a1:
                    f7:c3:f0:65:de:7e:8b:5c:24:1a:ec:db:c8:9a:20:
                    63:d6:a5:17:93:c7:b6:35:28:90:f5:de:98:64:c7:
                    7d:61:61:46:4e:ae:8c:9c:35:43:93:b4:1c:9a:3c:
                    28:61:cd:9f:cc:57:d0:0b:f2:a4:51:1f:19:c3:26:
                    40:41:66:a6:b5:2a:11:a8:d8:92:77:37:20:36:ff:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3D:C3:37:C9:E0:BA:51:9A:9C:52:DC:4E:01:5C:AA:F6:65:23:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfb5d9ce-68d4-3960-bbb2-34b4600647eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.31.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0b:a0:87:63:52:3d:15:af:85:9e:56:b9:fc:2f:52:71:c1:
         d4:bb:ba:31:70:9e:fe:bf:80:8d:99:4d:f1:0d:27:1d:43:0f:
         35:f3:ae:e6:22:d6:23:e1:68:c0:5f:73:5a:73:c3:86:11:86:
         29:77:45:1d:f1:99:47:77:97:29:d3:9c:52:35:56:b9:a5:eb:
         06:b7:a8:a5:73:44:92:f2:a5:92:ee:e1:bc:b5:fa:cb:e3:a9:
         8d:fc:b1:4e:25:ef:7e:b5:2c:93:1a:e4:5e:0c:ab:18:63:c3:
         58:00:48:7f:1c:8f:a2:51:8a:e9:4d:6b:57:27:59:40:5f:ca:
         f0:78:10:7c:80:fa:3b:76:6c:b7:b6:1a:da:ae:a9:c8:e8:ff:
         94:e3:35:ed:81:bf:cd:bc:e6:04:f5:63:09:f4:7a:94:22:94:
         7d:6a:d7:4f:7c:a0:ef:fd:86:5a:43:4b:ba:9a:b5:1c:05:31:
         93:d8:a0:7d:07:2c:e0:e2:e9:b6:17:10:33:c4:c9:46:1f:76:
         3f:7d:c4:bd:03:d1:eb:c2:94:b8:2b:48:b5:b1:fe:1c:7a:72:
         82:9f:df:23:6f:16:91:90:fe:25:07:cb:e7:e2:d7:20:dc:d6:
         19:9c:b5:de:76:1d:f5:64:36:97:07:b7:bc:32:78:a5:e9:13:
         5a:dc:f3:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrqI8wJcDuqn1XYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MzgxNmE5NGQtMjFiMC00NTM3LWIzYjUtYWQyY2QxMzVhMjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGYUInVudRrrz2z/9QLavCvFN5J4DkcvU6HB
vBLVmlQChA87oNuMhGAwJlsemE4jT/tPqWe1Q7J/VC0QDMF5Q66kmChImFWob8dd
2iGvV13GSY0YaugEQeX40miebKimQOmQ/IqsBnM3g3M26P2zbAdgmLCGImdhXBHl
rTcupHqMTSG9LWwo2n5ZwzIsYyRZEbUTqVqeUTmrUsghB51cBmaZDyXK6Bp306Z4
cWlOG7LuCqH3w/Bl3n6LXCQa7NvImiBj1qUXk8e2NSiQ9d6YZMd9YWFGTq6MnDVD
k7QcmjwoYc2fzFfQC/KkUR8ZwyZAQWamtSoRqNiSdzcgNv94iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGI9wzfJ4LpRmpxS3E4BXKr2ZSO/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZiNWQ5Y2UtNjhkNC0z
OTYwLWJiYjItMzRiNDYwMDY0N2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFx9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQLoIdjUj0Vr4WeVrn8L1JxwdS7ujFwnv6/gI2ZTfENJx1DDzXzruYi
1iPhaMBfc1pzw4YRhil3RR3xmUd3lynTnFI1Vrml6wa3qKVzRJLypZLu4by1+svj
qY38sU4l7361LJMa5F4Mqxhjw1gASH8cj6JRiulNa1cnWUBfyvB4EHyA+jt2bLe2
Gtquqcjo/5TjNe2Bv8285gT1Ywn0epQilH1q1098oO/9hlpDS7qatRwFMZPYoH0H
LODi6bYXEDPEyUYfdj99xL0D0evClLgrSLWx/hx6coKf3yNvFpGQ/iUHy+fi1yDc
1hmctd52HfVkNpcHt7wyeKXpE1rc84I=
-----END CERTIFICATE-----
Generated at Sun May 5 02:22:23 2024 by rpki-client on console-ams.rpki-client.org