Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa
File:                     3137362e35382e39322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          KpS18TQE4WtpeFfh9x+F9CM77yd9QfgaT5ce8Je16OI=
Subject key identifier:   59:5B:3B:AB:69:2C:C0:84:26:7A:CA:0D:1D:5B:5E:63:50:21:57:0E
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       1772728104EAF0B8F3BA08A94BE3589E233AD6E4
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 23:29:11 +0000
ROA not before:           Mon 06 Jul 2026 23:24:11 +0000
ROA not after:            Mon 05 Jul 2027 23:29:11 +0000
asID:                     36236
IP address blocks:        176.58.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 02:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:72:72:81:04:ea:f0:b8:f3:ba:08:a9:4b:e3:58:9e:23:3a:d6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Jul  6 23:24:11 2026 GMT
            Not After : Jul  5 23:29:11 2027 GMT
        Subject: CN=595B3BAB692CC084267ACA0D1D5B5E635021570E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:36:8f:ba:81:2e:e8:67:d4:be:8c:97:af:3c:
                    e5:fc:33:be:0d:7b:44:0c:11:eb:89:da:1c:5a:35:
                    43:1e:ff:07:99:26:4c:4f:d2:09:20:01:d7:f8:80:
                    d6:bc:76:4d:df:61:a1:f6:1d:26:da:e3:cb:8c:c1:
                    4b:08:68:87:c9:d9:fc:ac:c3:27:c8:66:99:c2:de:
                    38:98:c0:e8:7c:a6:a1:d3:12:e7:28:ff:e5:98:a8:
                    2a:26:71:b2:b7:1e:da:5a:80:c1:f5:27:16:6c:4e:
                    6a:1f:9c:47:7d:82:ca:e1:9b:fc:df:09:41:34:d4:
                    bd:b4:b1:d0:33:8c:30:95:3b:61:b5:37:5a:86:fd:
                    f6:c6:01:ca:22:ec:02:8d:4d:3b:3a:b0:d3:a3:62:
                    74:32:7f:ee:a3:81:72:8d:17:8d:5d:09:77:79:2d:
                    e9:e6:66:05:32:4d:1f:a8:fc:c5:0e:58:7c:16:b0:
                    5f:ec:f8:f4:8e:ad:70:93:24:80:89:7e:cd:2c:32:
                    6e:42:76:2d:a6:d8:e1:37:9c:b2:e3:26:97:9c:48:
                    ed:7a:3f:c2:3b:07:35:e8:8e:62:17:f2:f4:5b:9c:
                    6f:60:88:e5:e6:76:a1:7a:d1:4a:5c:47:44:be:34:
                    68:f1:3a:3a:f5:c5:09:d9:2a:17:23:1d:4d:e2:d2:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5B:3B:AB:69:2C:C0:84:26:7A:CA:0D:1D:5B:5E:63:50:21:57:0E
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.58.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ce:61:5a:1b:72:c4:3b:94:17:e8:2d:71:de:60:bb:31:23:
         8b:52:b7:a3:57:50:9f:58:b9:40:13:08:7c:ca:70:9a:ef:32:
         eb:68:d9:90:2a:c7:78:b5:85:31:c2:b5:17:1a:bb:4f:49:66:
         0d:de:13:1d:2e:6b:70:05:d7:46:1b:b3:73:cb:8f:46:5c:4e:
         dd:14:d6:e8:d1:3e:32:33:ff:de:69:37:f4:cf:e2:11:6e:c6:
         58:2b:56:4e:e4:76:87:a6:9e:87:73:8f:19:44:1f:bd:9b:f4:
         b2:33:df:3d:cd:13:79:6f:72:dd:12:dc:8c:8f:eb:5f:d2:2c:
         75:a1:8f:7d:4f:48:f0:8f:8f:fc:35:18:b7:f6:b6:be:92:ec:
         ff:41:3e:07:1e:6e:b8:76:6b:c9:e0:f0:0b:21:b6:2e:b3:cc:
         95:c8:dd:58:a0:f3:a1:bd:65:15:14:ca:29:70:a4:1a:ff:5f:
         c8:e4:61:8f:b3:29:f8:e2:1f:48:d2:a3:52:67:3f:2b:e4:7e:
         e7:3a:ca:ba:e3:a2:fb:45:c4:65:c9:a1:de:a7:02:55:f1:fd:
         15:0f:3d:1f:5d:44:7b:ed:cf:26:6c:4c:03:bc:26:d3:5f:d7:
         b6:f4:60:58:fa:28:94:a3:47:7c:5a:d9:3d:7c:78:32:cf:db:
         ea:0f:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:32:46 2026 by rpki-client