Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0f804f-fbac-3d19-9010-024c4c724834.roa
File:                     fc0f804f-fbac-3d19-9010-024c4c724834.roa (raw, json)
Hash identifier:          FusKCQGjO62L60jpPr8zcz0HsmF2nGbQnMuilmFV5Ac=
Subject key identifier:   90:62:20:FA:0A:C0:3E:CC:CA:20:9C:40:AC:3A:44:32:56:62:85:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD6228047BB88B6DA21F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0f804f-fbac-3d19-9010-024c4c724834.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7016
IP address blocks:        23.31.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:62:28:04:7b:b8:8b:6d:a2:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=1c863f9c-259a-4daf-842e-3ea7e599f0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:d5:23:10:36:5f:03:8a:4c:3f:44:a2:f8:
                    5c:59:9b:7d:bc:97:8b:b6:b2:7b:2d:e9:27:9d:2b:
                    76:71:53:00:a1:c5:01:9d:95:f2:38:f3:35:d1:e8:
                    92:c0:71:e8:03:51:e1:75:bf:ce:02:e0:ca:89:b7:
                    fb:ca:64:b3:4d:6f:e4:ce:1b:2e:ab:e5:d1:15:1c:
                    2b:61:f2:28:ad:c3:f5:3a:f2:99:bb:dc:d9:23:10:
                    0d:a2:92:aa:09:86:64:1f:a8:8a:36:82:92:e4:ef:
                    6c:67:77:86:93:59:06:e2:63:9d:93:d5:fd:9a:ad:
                    73:bf:83:57:69:65:3b:2e:89:d0:e0:e4:8c:71:68:
                    63:be:fb:ce:25:32:0f:83:86:b0:70:71:c1:4b:10:
                    4a:a7:ec:eb:15:8c:eb:c4:c0:36:e9:66:af:a2:c7:
                    39:e2:d9:10:cd:79:3d:5e:50:aa:6f:2b:3e:83:8b:
                    d3:14:d0:33:a2:c6:4f:5f:77:d5:24:10:ec:39:09:
                    1f:50:99:40:11:fd:68:d3:c0:8a:70:56:ca:f4:b9:
                    c3:1d:a9:a0:57:76:60:34:8f:c1:e3:4e:8c:6e:30:
                    3b:33:e8:de:fd:a6:5d:04:a4:b0:b5:67:3d:29:ab:
                    96:69:3e:bd:50:ff:2b:35:6f:52:7b:cc:41:87:7d:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:62:20:FA:0A:C0:3E:CC:CA:20:9C:40:AC:3A:44:32:56:62:85:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc0f804f-fbac-3d19-9010-024c4c724834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.31.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d6:96:3e:a6:61:88:56:e4:6c:58:cd:7c:34:43:9a:de:7b:
         99:80:5a:26:26:15:be:82:85:ed:39:60:c6:63:e5:f7:b0:17:
         8b:fb:34:1f:89:d4:85:38:2f:61:f4:38:cb:82:e7:5c:13:21:
         b1:0e:ad:db:22:b3:22:d5:b9:7a:74:13:1e:ed:f6:e8:06:d2:
         39:a1:f0:d8:49:2a:dd:f3:b6:39:1d:09:80:2f:a1:82:f6:37:
         2e:36:d0:53:7d:99:2d:34:3b:ad:2f:d7:dc:93:61:01:90:6f:
         86:b0:4d:32:ed:e0:73:0d:64:60:2c:95:e0:14:91:05:51:47:
         5b:e4:63:8e:60:33:ee:45:ae:4e:b0:26:e7:d9:04:eb:e2:36:
         4b:6a:9a:f3:e3:69:f5:5e:a7:2d:c9:54:7e:45:69:4d:b8:b6:
         7e:2c:58:9d:c6:e8:ca:92:16:77:09:d4:bd:d3:85:6f:54:5a:
         ea:fe:84:a8:b0:c2:c5:59:5d:8c:4a:bd:06:1a:8e:a4:27:4d:
         d1:f5:e7:9e:62:4a:17:68:8c:a9:e0:0c:0b:0f:98:45:38:50:
         cd:d7:1e:fd:f8:69:44:67:e9:42:3e:51:c1:75:c8:27:81:0e:
         e3:7d:88:c5:f8:5b:56:1e:23:af:28:80:60:33:8e:6e:20:cd:
         43:6b:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:49:40 2024 by rpki-client on console-fra.rpki-client.org