Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa
File:                     3137362e35382e39322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          +I90sj902TiINYWbDka209BS8ADNy3Wq3WZs0fQYg6g=
Subject key identifier:   F8:C0:BB:7F:0E:B2:6C:DE:D8:CD:14:11:CC:67:A8:0E:B4:B2:5E:D6
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       3C2F4CE1853FC22E73E1AB02886587F13355D8A8
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Sep 2024 23:13:14 +0000
ROA not before:           Mon 02 Sep 2024 23:08:14 +0000
ROA not after:            Mon 01 Sep 2025 23:13:14 +0000
asID:                     36236
IP address blocks:        176.58.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2f:4c:e1:85:3f:c2:2e:73:e1:ab:02:88:65:87:f1:33:55:d8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Sep  2 23:08:14 2024 GMT
            Not After : Sep  1 23:13:14 2025 GMT
        Subject: CN=F8C0BB7F0EB26CDED8CD1411CC67A80EB4B25ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:9f:50:1a:82:c7:fe:50:91:23:14:4c:6e:
                    84:bd:60:d5:c6:2a:d4:5b:d8:63:c5:77:2b:00:75:
                    1b:a1:01:97:cc:32:f9:31:de:26:fd:70:83:b4:e5:
                    4b:31:7b:8d:2b:14:cf:17:8d:4b:7e:68:a2:02:3c:
                    b9:b0:27:8c:c8:93:c4:4f:21:a0:85:cf:e8:e0:5e:
                    ae:3d:6b:25:11:5a:a8:cf:8d:25:47:31:cc:25:47:
                    72:ea:23:d0:6c:ef:88:a8:ff:8a:ad:8a:6a:d2:0b:
                    6d:81:95:26:5f:9f:0a:7b:ef:73:3b:04:12:00:13:
                    58:56:3b:c7:b0:7e:54:4c:17:40:1b:d0:3d:15:31:
                    94:ca:4e:ba:a4:49:87:f5:37:78:0e:30:13:61:f9:
                    7d:11:32:ff:57:9b:30:85:6f:5b:7b:61:3c:dc:7e:
                    65:ce:50:e7:d0:54:85:85:28:3c:3f:13:4e:64:f9:
                    51:f5:1d:22:e8:18:b5:19:72:ac:3d:46:1b:f3:45:
                    19:e7:53:32:49:3a:93:65:02:5f:56:56:97:3a:3c:
                    71:66:30:47:f0:c0:ae:18:09:e1:4e:0b:8f:c0:b2:
                    1f:65:7f:46:a8:e0:eb:5d:49:22:90:99:d8:3f:82:
                    5c:71:f9:f1:cb:6c:83:e0:f0:58:da:47:9b:d8:95:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C0:BB:7F:0E:B2:6C:DE:D8:CD:14:11:CC:67:A8:0E:B4:B2:5E:D6
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.58.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:43:9c:a6:73:3d:f2:44:ce:5d:89:24:cc:f1:7e:41:15:a0:
         7e:0a:fd:6e:91:54:56:a1:8d:27:35:ac:e6:b5:35:80:31:31:
         34:07:52:3d:9e:bd:b0:33:6a:2e:cc:87:9b:9f:8b:5b:4a:d7:
         fd:12:eb:b9:22:48:27:64:ee:ee:08:a8:8a:7a:3d:48:a2:8b:
         fe:0c:88:8a:b7:76:17:72:1a:b6:5e:46:63:a0:02:f1:ec:bf:
         44:9c:0c:67:31:99:8f:b1:7c:9a:00:f4:77:4b:b1:9a:68:39:
         98:9d:f2:cb:df:80:f8:69:6e:7f:5f:49:2c:27:c0:52:1a:63:
         cf:37:a4:73:a7:90:d7:7d:3d:a0:5e:ca:3b:07:14:34:a6:23:
         63:7a:27:a1:01:48:6c:8b:58:27:ba:8f:48:24:f0:c2:77:d4:
         81:cd:d1:27:02:7c:68:9c:22:e5:04:be:0a:44:30:a3:45:e2:
         ef:e0:02:35:0c:82:2f:3f:58:27:fa:cf:76:c2:a0:e4:d6:4b:
         35:fa:59:1f:f1:54:69:e2:fc:0d:5b:b5:2e:fe:9a:72:c8:44:
         66:e7:4c:22:01:2d:81:b5:4e:c5:d3:ee:72:14:b4:07:70:48:
         86:f2:c0:ab:50:4b:02:80:ac:62:6b:bd:91:f2:4f:32:0e:0c:
         bb:7f:e0:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUPC9M4YU/wi5z4asCiGWH8TNV2KgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNDA5MDIyMzA4MTRaFw0yNTA5MDEyMzEzMTRaMDMxMTAvBgNV
BAMTKEY4QzBCQjdGMEVCMjZDREVEOENEMTQxMUNDNjdBODBFQjRCMjVFRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR1Z9QGoLH/lCRIxRMboS9YNXG
KtRb2GPFdysAdRuhAZfMMvkx3ib9cIO05Usxe40rFM8XjUt+aKICPLmwJ4zIk8RP
IaCFz+jgXq49ayURWqjPjSVHMcwlR3LqI9Bs74io/4qtimrSC22BlSZfnwp773M7
BBIAE1hWO8ewflRMF0Ab0D0VMZTKTrqkSYf1N3gOMBNh+X0RMv9XmzCFb1t7YTzc
fmXOUOfQVIWFKDw/E05k+VH1HSLoGLUZcqw9RhvzRRnnUzJJOpNlAl9WVpc6PHFm
MEfwwK4YCeFOC4/Ash9lf0ao4OtdSSKQmdg/glxx+fHLbIPg8FjaR5vYldGBAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQU+MC7fw6ybN7YzRQRzGeoDrSyXtYwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBoAYIKwYB
BQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzEzNzM2MmUzNTM4MmUzOTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMz
NjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALA6XDANBgkqhkiG9w0BAQsFAAOCAQEAnEOcpnM9
8kTOXYkkzPF+QRWgfgr9bpFUVqGNJzWs5rU1gDExNAdSPZ69sDNqLsyHm5+LW0rX
/RLruSJIJ2Tu7gioino9SKKL/gyIird2F3Iatl5GY6AC8ey/RJwMZzGZj7F8mgD0
d0uxmmg5mJ3yy9+A+Gluf19JLCfAUhpjzzekc6eQ1309oF7KOwcUNKYjY3onoQFI
bItYJ7qPSCTwwnfUgc3RJwJ8aJwi5QS+CkQwo0Xi7+ACNQyCLz9YJ/rPdsKg5NZL
NfpZH/FUaeL8DVu1Lv6acshEZudMIgEtgbVOxdPuchS0B3BIhvLAq1BLAoCsYmu9
kfJPMg4Mu3/gdw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:57:11 2024 by rpki-client on console-fra.rpki-client.org