Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39312e302f32342d3234203d3e203336323336.roa
File:                     3137362e35382e39312e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          /oGoYU+vU45ZzOatEYjxlmw2OviJrZUMbp9AZOQAVbY=
Subject key identifier:   B5:E4:54:7A:40:BD:C7:79:14:12:C8:81:BF:53:74:70:AF:28:AB:1B
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       616E8591264EBC0D6EC95574B1EF897CAB168A89
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39312e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:14 +0000
ROA not before:           Mon 02 Sep 2024 23:08:14 +0000
ROA not after:            Mon 01 Sep 2025 23:13:14 +0000
asID:                     36236
IP address blocks:        176.58.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6e:85:91:26:4e:bc:0d:6e:c9:55:74:b1:ef:89:7c:ab:16:8a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Sep  2 23:08:14 2024 GMT
            Not After : Sep  1 23:13:14 2025 GMT
        Subject: CN=B5E4547A40BDC7791412C881BF537470AF28AB1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:d1:40:b9:7a:91:ba:b6:36:0e:57:28:4c:
                    c7:c2:8b:89:12:a7:45:26:97:be:57:9c:11:72:8f:
                    3b:78:7e:0d:02:48:93:83:2f:51:41:4b:25:ba:d6:
                    07:c2:46:44:bc:d9:93:08:c8:2d:c0:3e:3d:2b:1d:
                    1b:a9:6e:ce:67:ed:01:f9:7d:a8:3c:74:41:83:35:
                    0d:0d:ee:9c:0c:1f:a0:fc:f1:f8:72:c1:d3:20:6f:
                    8c:3c:e6:c0:0a:be:fb:bb:2f:e5:03:83:1c:97:f5:
                    f5:ac:eb:72:0c:f0:dd:ba:b6:4c:c0:01:ed:81:47:
                    44:b7:50:1c:b3:f2:03:18:25:25:ff:25:07:d0:af:
                    66:e2:ee:1c:52:de:db:eb:62:1a:6c:98:28:81:91:
                    1a:41:2e:fd:0e:35:93:49:3b:8c:dd:12:39:0c:35:
                    52:a9:5b:b7:f2:69:e8:06:1f:01:17:b2:af:5e:22:
                    46:72:c8:da:19:25:c6:ef:f0:0f:cb:b7:e2:f1:09:
                    bb:14:c8:ab:51:3f:78:56:bd:8a:d2:92:b0:61:f5:
                    3d:2a:59:61:43:bd:3f:6e:17:c3:e5:2e:95:46:ad:
                    6d:79:67:0f:7f:51:7e:36:a8:ee:de:ab:a9:b6:fa:
                    dc:14:60:45:ba:db:c6:e8:f2:3b:56:f4:a6:7c:f3:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E4:54:7A:40:BD:C7:79:14:12:C8:81:BF:53:74:70:AF:28:AB:1B
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39312e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.58.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4b:a0:3c:42:7e:e0:70:72:25:84:70:57:10:91:e2:02:61:
         16:7c:b1:53:99:9c:0e:b4:2c:bc:c2:c5:11:e3:99:b1:2c:9c:
         73:a9:45:83:4f:60:ca:6f:a8:29:ca:51:9e:ee:7d:df:2a:3d:
         92:75:57:2e:28:13:8b:22:1e:d1:48:a4:20:69:f3:7d:e1:46:
         f5:8b:9a:d4:8b:35:82:c6:7d:70:2a:7a:30:d6:d1:a9:ca:99:
         a2:6c:94:89:a1:a4:12:0f:da:c7:ad:57:cf:67:48:42:b1:f3:
         75:84:7c:cc:fb:ad:f0:1b:dc:ab:32:75:67:92:ac:17:3d:da:
         2e:e0:d7:15:1e:8f:a3:8d:c5:fd:61:d8:d0:79:9c:fb:c7:78:
         f3:f1:b4:31:43:c6:6b:57:47:dc:54:3e:24:16:57:d8:27:76:
         a0:34:a6:b1:cf:9b:5c:5b:b9:48:02:30:44:63:d5:db:b7:e2:
         61:26:fd:23:e3:08:28:05:fa:42:29:e1:c7:40:08:65:22:48:
         9d:8a:12:72:01:68:20:2b:24:c0:c8:6b:2e:2b:3e:6e:01:d3:
         dd:d0:28:32:96:9c:79:1d:cc:d7:b3:31:c8:fe:84:a5:31:69:
         e6:4b:c2:54:57:f5:20:86:63:75:15:98:49:89:1f:af:6c:dd:
         a7:cb:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:36 2024 by rpki-client on console-ams.rpki-client.org