Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
File:                     d4129661-2570-39b6-8a42-e8a60bf56818.roa (raw, json)
Hash identifier:          TaQqDa6cAPJQ12KMiAmSnC32QxULrJmw5dvSm09Tnug=
Subject key identifier:   D2:6A:BE:D5:D4:AC:97:F9:D2:85:50:41:95:F8:39:73:08:BB:17:1A
Certificate issuer:       /CN=fe8b65a3-820c-495e-8142-f185c536467c
Certificate serial:       010D0C9F432858477EC109CF184C40184BF8C680
Authority key identifier: C9:DA:C4:3E:33:C9:7C:A7:7E:13:91:75:9B:C6:CF:D0:04:C8:D4:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     8075
IP address blocks:        208.80.20.0/24 maxlen: 24
                          208.80.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/fe8b65a3-820c-495e-8142-f185c536467c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/fe8b65a3-820c-495e-8142-f185c536467c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:09:cf:18:4c:40:18:4b:f8:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8b65a3-820c-495e-8142-f185c536467c
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=a1688789-36e8-4d24-883c-ab1e2f19b32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:10:2d:a6:4c:5a:4a:9e:d7:0e:89:7b:0d:7a:
                    e4:0c:bf:ce:df:30:68:3c:a4:2c:0d:8d:52:2f:e1:
                    c6:d0:d3:69:e2:8b:aa:8f:81:cd:92:99:5d:2e:57:
                    11:3c:83:53:eb:66:95:84:c9:45:4f:f0:96:6e:69:
                    83:76:99:80:31:b8:60:55:5f:57:14:50:79:52:3b:
                    16:09:01:ad:15:bd:b7:2d:a4:e3:45:61:05:bf:89:
                    d2:72:ba:e6:a1:dc:90:1c:11:41:b5:ab:21:d2:85:
                    94:05:8e:51:48:e9:4b:49:04:0d:86:dd:a6:04:96:
                    4d:d2:16:07:4d:1d:d6:90:74:37:49:db:ed:00:e9:
                    97:0b:6c:24:e7:0c:00:ee:91:2e:83:b6:c2:a6:d4:
                    89:9e:68:9c:da:c9:88:5f:15:6b:6e:d0:31:73:4b:
                    99:e9:24:3b:23:6d:b6:a8:fb:da:ee:e2:18:a1:b9:
                    a7:3c:e1:9e:ce:91:79:9c:4e:01:3f:0e:0c:34:50:
                    b5:2e:cd:3f:10:bb:0a:69:db:bf:20:82:44:86:a7:
                    c2:98:a3:8b:fc:f8:24:b7:eb:9b:61:ea:d8:98:5b:
                    83:71:0c:02:9d:4f:b8:fb:54:29:9b:9d:42:52:91:
                    82:77:d4:04:ff:fd:11:ae:10:78:72:b3:9d:74:71:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6A:BE:D5:D4:AC:97:F9:D2:85:50:41:95:F8:39:73:08:BB:17:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/fe8b65a3-820c-495e-8142-f185c536467c.crl

            X509v3 Authority Key Identifier:
                keyid:C9:DA:C4:3E:33:C9:7C:A7:7E:13:91:75:9B:C6:CF:D0:04:C8:D4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f2:aa:54:f7:bf:f5:d6:2a:07:7c:1b:ec:1f:a4:a0:f0:7c:
         d7:37:e6:13:42:a1:14:1e:20:11:23:ec:c1:ce:73:d2:3a:12:
         0f:ad:68:6c:c4:ba:aa:44:78:9d:de:e5:28:91:1b:b6:9b:6d:
         bc:81:52:7b:dd:34:56:ae:45:84:26:a8:39:3d:62:7c:54:42:
         f1:ae:65:df:3f:3f:8a:fb:1e:69:43:2c:7e:03:37:29:9a:45:
         39:15:64:1d:a5:4e:41:6f:81:fa:68:b1:69:21:ff:ad:77:83:
         a1:5e:99:41:37:67:f2:f6:b1:bf:20:b8:03:75:8a:73:e7:57:
         50:43:28:7c:3f:04:20:02:cc:8e:a2:7a:9d:2a:1d:bb:da:fb:
         bd:ba:9e:f5:ac:e2:69:40:c0:7b:d3:3d:fc:ae:c6:da:8a:06:
         4a:13:96:74:84:11:f5:4a:70:61:8a:4f:d8:d1:27:f7:23:09:
         b5:f5:3b:df:ff:e2:cd:b5:f4:2b:23:1c:72:51:2b:99:84:04:
         1d:94:a0:46:e7:52:02:0b:f3:ec:21:e5:14:ed:e5:d0:9a:6a:
         cb:7e:87:8f:54:b0:e3:c1:52:af:6e:47:9f:b9:07:d9:d3:00:
         85:cc:19:3b:7d:28:c2:56:71:0e:b6:a8:06:86:c8:d3:8c:4d:
         df:3f:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:18 2024 by rpki-client on console-fra.rpki-client.org