Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa
File:                     3137362e35382e39322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          a0n6HSmOinRKsEquNwgfz6HJRnIsmIGgaW5Xnv4KMB4=
Subject key identifier:   B7:38:FF:97:D6:C3:DE:CF:99:E4:F4:31:6F:CC:4D:7D:AC:8F:F9:03
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       517B68FB9D5F6289FB627715C2BF0757F4D126C4
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:41 +0000
ROA not before:           Mon 02 Oct 2023 22:50:41 +0000
ROA not after:            Mon 30 Sep 2024 22:55:41 +0000
asID:                     36236
IP address blocks:        176.58.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 11:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7b:68:fb:9d:5f:62:89:fb:62:77:15:c2:bf:07:57:f4:d1:26:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Oct  2 22:50:41 2023 GMT
            Not After : Sep 30 22:55:41 2024 GMT
        Subject: CN=B738FF97D6C3DECF99E4F4316FCC4D7DAC8FF903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:36:17:e5:cb:9c:1f:3a:72:c0:17:78:73:
                    65:37:f1:a9:58:2c:58:b9:8c:f0:c0:4e:7a:60:48:
                    7f:a4:f4:76:20:b4:e6:16:18:81:94:d5:2a:19:bd:
                    68:d2:46:3f:7f:a8:8e:f8:0f:1b:9e:c7:32:c0:e4:
                    71:6a:8f:35:ce:46:37:da:ab:01:ec:9c:2f:04:92:
                    47:e7:a2:1f:c2:20:ea:6a:37:4f:83:4c:12:c3:71:
                    6e:e6:d5:46:28:3d:6d:39:47:73:a7:e5:3c:bc:d6:
                    c5:d1:64:67:55:63:87:11:c8:b1:73:25:d4:80:e9:
                    e3:6a:89:5c:b4:72:fc:8d:32:6a:33:7f:dd:9a:00:
                    18:67:8f:eb:4b:3c:f0:83:a2:b8:82:fa:c2:67:64:
                    6c:e9:9a:1c:09:f4:52:1b:25:b3:8a:a1:a4:a5:6a:
                    d4:51:c1:52:78:52:bb:26:01:4e:19:9b:0b:6a:d6:
                    d1:f0:be:20:4a:28:16:e4:f3:22:44:9c:b4:67:7e:
                    93:b5:68:fe:61:20:74:90:4e:1e:65:74:5e:90:97:
                    9b:1d:d1:3a:fe:20:f2:b3:58:c2:3e:f2:4c:3d:3f:
                    52:74:5b:29:eb:84:74:65:a4:40:70:11:07:88:35:
                    cb:8a:75:41:d6:9f:d7:47:5f:e0:77:04:f1:ad:b5:
                    7b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:38:FF:97:D6:C3:DE:CF:99:E4:F4:31:6F:CC:4D:7D:AC:8F:F9:03
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.58.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:52:00:89:5d:32:8f:68:97:31:f9:f3:d8:f2:1d:ff:64:b1:
         66:fb:29:00:ee:e1:7d:5a:82:ff:65:64:42:d6:84:63:ee:2d:
         b7:f5:54:b1:d2:d3:93:a8:44:d8:74:04:a1:2f:d6:fb:68:32:
         cd:2b:27:09:65:68:94:7f:75:8d:50:11:66:88:0e:7d:fb:c6:
         94:db:bb:6e:0d:36:df:c8:32:33:8b:01:84:f0:d7:32:17:a9:
         0a:41:2f:c4:e4:11:e0:51:55:36:f6:e7:f4:c9:8c:f8:59:1b:
         8d:82:75:cd:d7:0b:af:f7:d1:9f:ed:c2:19:60:17:69:21:9b:
         d0:ee:c9:f9:7e:4e:56:b1:06:50:5d:0b:f2:76:34:1b:84:8e:
         8f:b0:72:d0:a8:cd:4d:d9:21:8f:80:ed:23:9c:fc:dd:cd:f8:
         db:50:bd:ed:68:fe:32:e3:fe:74:b1:f4:8c:69:be:5c:4b:73:
         9c:89:b5:4e:99:e6:12:4d:eb:f9:dd:f5:19:ce:35:19:9d:74:
         67:df:a1:26:78:6f:54:1a:40:c2:9b:e0:e8:48:d6:e4:36:5d:
         1b:68:5b:7f:45:b1:e8:ea:36:5d:5e:91:f7:53:04:70:01:24:
         5e:8c:80:8c:e1:0a:bc:95:dd:26:11:b8:f5:db:67:30:a5:dd:
         0d:8b:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:25:43 2024 by rpki-client on console-fra.rpki-client.org