Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38382e302f32342d3234203d3e203336323336.roa
File:                     3137362e35382e38382e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          eUKhYtvd+J48WSN7akLi1J6/N5afexDNyVNkuLc4GWM=
Subject key identifier:   F5:6A:B6:44:FF:4C:9D:72:0A:B1:52:15:5C:F7:B0:FC:4B:B3:4B:8C
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       1F9C9299C12ADBA195E5311DC171F6D0D178970E
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38382e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:14 +0000
ROA not before:           Mon 02 Sep 2024 23:08:14 +0000
ROA not after:            Mon 01 Sep 2025 23:13:14 +0000
asID:                     36236
IP address blocks:        176.58.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9c:92:99:c1:2a:db:a1:95:e5:31:1d:c1:71:f6:d0:d1:78:97:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Sep  2 23:08:14 2024 GMT
            Not After : Sep  1 23:13:14 2025 GMT
        Subject: CN=F56AB644FF4C9D720AB152155CF7B0FC4BB34B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:97:d0:06:ed:aa:4c:f4:6b:07:fd:a5:bb:
                    0d:0a:56:87:cf:f7:05:bd:a1:d1:83:67:1d:d9:c3:
                    45:59:c8:41:ec:7e:23:96:11:f1:72:37:c0:53:73:
                    1f:64:1b:7b:64:9f:db:99:3b:00:b5:65:e0:5b:e1:
                    7f:28:03:fb:7a:6a:46:67:bb:c0:20:b4:5d:50:d7:
                    6a:b6:e4:38:70:d0:4f:d6:a1:9f:4b:03:96:4a:43:
                    c6:d7:8b:8d:77:1a:a4:38:22:a3:61:bd:09:f4:07:
                    4d:09:2e:6d:91:a0:b6:bd:38:d1:81:09:76:f2:c4:
                    2f:2b:3f:2d:ae:b2:4a:cc:8d:9a:87:79:20:4d:b6:
                    d3:e5:95:44:f6:24:8f:06:98:95:e4:56:d3:7d:1f:
                    7c:fb:f3:79:88:f8:b8:31:b2:0c:2b:23:55:d7:61:
                    ca:ac:04:dc:dc:21:fa:27:15:8a:b9:22:59:de:1a:
                    ac:9f:51:ef:5f:ab:7c:b3:6d:68:f0:62:95:3a:d4:
                    71:3a:65:e0:17:e8:2b:c8:8c:5b:24:92:c1:c0:29:
                    2f:a8:db:e5:3a:00:97:25:4b:4b:51:7e:d7:1e:02:
                    90:db:e6:c3:94:c0:b8:59:90:09:a4:99:2d:ad:4f:
                    85:fb:07:37:38:69:cc:c7:8e:62:47:27:91:92:75:
                    4a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:B6:44:FF:4C:9D:72:0A:B1:52:15:5C:F7:B0:FC:4B:B3:4B:8C
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38382e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.58.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:3b:ac:17:ed:e8:54:e0:43:8d:47:02:e6:fb:90:aa:28:66:
         a9:0e:77:0d:48:c9:0e:da:2d:90:91:38:b7:58:82:a5:b0:32:
         ca:b4:7e:88:0c:13:89:30:4a:6d:b6:a6:f9:ea:a6:48:c3:5c:
         10:ce:d2:59:19:b7:d8:f9:4c:2d:23:aa:07:7f:6f:dd:67:f9:
         07:ae:fc:b3:85:5b:93:2d:e5:c8:0a:09:5a:b8:e5:bd:6e:15:
         31:e2:e3:e2:7a:e1:b9:a2:b5:f2:2a:54:f4:08:4d:67:42:dc:
         3b:49:f5:7c:66:f9:c3:b7:34:dc:bf:2f:88:47:fd:e3:10:9b:
         c0:3e:e1:19:f1:b7:c4:04:05:4f:3d:ad:f2:a3:95:cd:bb:75:
         b1:dc:35:6b:d5:58:16:ef:f9:a8:ad:87:ae:03:f4:c5:a4:f9:
         47:cc:66:fa:6d:1e:58:33:6e:03:35:11:4a:dd:70:bc:b6:8a:
         cb:ea:fe:1c:eb:b7:d4:55:33:0e:6a:bc:51:77:ca:64:f2:89:
         f3:aa:4c:c6:d5:f0:2f:44:ee:f1:93:4e:8f:12:55:6c:3b:7c:
         70:67:54:19:ff:f1:f3:4c:53:a0:ea:24:5a:b8:30:56:3e:76:
         d6:9b:13:2f:36:0c:97:08:53:c3:ba:24:e5:2a:6d:63:4f:51:
         1d:da:f5:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUH5ySmcEq26GV5TEdwXH20NF4lw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNDA5MDIyMzA4MTRaFw0yNTA5MDEyMzEzMTRaMDMxMTAvBgNV
BAMTKEY1NkFCNjQ0RkY0QzlENzIwQUIxNTIxNTVDRjdCMEZDNEJCMzRCOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxJfQBu2qTPRrB/2luw0KVofP
9wW9odGDZx3Zw0VZyEHsfiOWEfFyN8BTcx9kG3tkn9uZOwC1ZeBb4X8oA/t6akZn
u8AgtF1Q12q25Dhw0E/WoZ9LA5ZKQ8bXi413GqQ4IqNhvQn0B00JLm2RoLa9ONGB
CXbyxC8rPy2uskrMjZqHeSBNttPllUT2JI8GmJXkVtN9H3z783mI+LgxsgwrI1XX
YcqsBNzcIfonFYq5IlneGqyfUe9fq3yzbWjwYpU61HE6ZeAX6CvIjFskksHAKS+o
2+U6AJclS0tRftceApDb5sOUwLhZkAmkmS2tT4X7Bzc4aczHjmJHJ5GSdUrNAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQU9Wq2RP9MnXIKsVIVXPew/EuzS4wwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBoAYIKwYB
BQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzEzNzM2MmUzNTM4MmUzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMz
NjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALA6WDANBgkqhkiG9w0BAQsFAAOCAQEAWjusF+3o
VOBDjUcC5vuQqihmqQ53DUjJDtotkJE4t1iCpbAyyrR+iAwTiTBKbbam+eqmSMNc
EM7SWRm32PlMLSOqB39v3Wf5B678s4Vbky3lyAoJWrjlvW4VMeLj4nrhuaK18ipU
9AhNZ0LcO0n1fGb5w7c03L8viEf94xCbwD7hGfG3xAQFTz2t8qOVzbt1sdw1a9VY
Fu/5qK2HrgP0xaT5R8xm+m0eWDNuAzURSt1wvLaKy+r+HOu31FUzDmq8UXfKZPKJ
86pMxtXwL0Tu8ZNOjxJVbDt8cGdUGf/x80xToOokWrgwVj521psTLzYMlwhTw7ok
5SptY09RHdr15g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:33 2024 by rpki-client on console-fra.rpki-client.org