Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39342e302f32342d3234203d3e203336323336.roa
File:                     3137362e35382e39342e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          ytkamcwgcqpB3TN8Vc1CcAqAgZ9VrOnJ2LocGTJc3Jc=
Subject key identifier:   4F:69:8B:3D:9D:E0:F8:F6:1D:8E:07:C9:1E:D6:4F:09:D6:7C:E8:7A
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       594AEC759209E02FD7B365A8C09FAEA5CAA5D9E4
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39342e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 22:55:41 +0000
ROA not before:           Mon 02 Oct 2023 22:50:41 +0000
ROA not after:            Mon 30 Sep 2024 22:55:41 +0000
asID:                     36236
IP address blocks:        176.58.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4a:ec:75:92:09:e0:2f:d7:b3:65:a8:c0:9f:ae:a5:ca:a5:d9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Oct  2 22:50:41 2023 GMT
            Not After : Sep 30 22:55:41 2024 GMT
        Subject: CN=4F698B3D9DE0F8F61D8E07C91ED64F09D67CE87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:15:c3:eb:aa:3f:59:2b:02:c9:66:41:2f:
                    54:ba:5b:f4:57:2e:b9:6b:c1:f9:1d:8b:86:10:d1:
                    ed:fd:c9:06:0c:f4:08:bb:2e:ba:cc:2b:5a:05:dd:
                    96:95:ca:18:2f:41:f4:27:78:aa:73:56:34:0d:eb:
                    1e:b4:bc:58:13:69:38:6f:75:d2:e4:f3:db:2c:9a:
                    9e:ba:9c:c6:95:ec:2f:46:f2:5d:2e:4e:2f:39:28:
                    42:bf:45:38:dd:31:95:eb:a4:35:ff:ec:fe:d2:d3:
                    49:1b:75:2d:72:2d:84:1d:2b:b3:a1:2b:f1:e4:88:
                    8f:5c:70:09:32:11:73:e6:3f:f7:2c:e9:a8:66:34:
                    5f:d9:de:2e:35:0e:e5:d6:9f:04:b0:e3:49:8a:e2:
                    28:96:7a:67:51:3b:00:3c:09:b7:c3:22:bc:97:78:
                    4c:a5:88:2c:cd:d5:95:2a:88:b7:d2:77:50:19:0c:
                    cf:eb:39:d2:25:c1:16:1c:0d:e5:02:ca:bc:8f:0b:
                    a1:e5:3b:9c:72:2f:d6:6d:30:0f:db:52:17:8a:5f:
                    c3:70:62:6f:c5:70:91:d2:1d:22:39:c1:71:81:e6:
                    73:73:7f:97:2a:01:70:d5:e2:5e:21:ce:91:89:db:
                    0e:d0:57:72:44:3d:fc:b4:c5:5d:ec:03:8c:08:4b:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:69:8B:3D:9D:E0:F8:F6:1D:8E:07:C9:1E:D6:4F:09:D6:7C:E8:7A
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39342e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.58.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:a4:5b:a6:10:c9:32:98:d6:b2:d8:b7:62:f2:28:8d:15:
         74:ec:fd:9c:dd:45:f2:67:a4:f8:08:18:3f:92:20:09:05:d4:
         e2:74:1f:cd:25:81:dd:de:96:15:4e:23:1a:a0:a0:5f:f3:4a:
         74:bc:cd:72:0b:6f:49:8e:9c:20:d1:e3:3e:f1:ad:31:35:54:
         a4:fc:62:ac:6d:23:95:59:e5:0c:98:b8:83:b0:3d:b5:73:c3:
         3f:29:ff:6e:ae:22:dd:10:38:a5:5a:f6:55:83:dc:5a:1b:e9:
         a3:e9:44:e7:ae:63:17:ed:69:dc:d4:88:b6:96:58:59:e4:ae:
         f5:b3:9e:39:cd:a1:fc:6e:82:01:d0:ff:fe:f3:80:b3:ce:d8:
         86:05:09:fe:eb:7d:d7:24:8f:b1:ba:18:96:5d:47:00:ac:c6:
         77:3b:f2:00:52:ca:a1:ac:e7:8a:84:0d:ab:f8:6b:bf:a0:41:
         33:f5:64:1e:5c:8e:00:2f:fb:b9:80:63:b0:db:96:84:c8:11:
         32:d8:49:4b:76:d3:29:02:dd:4e:a8:c5:06:58:76:af:71:ed:
         6b:ce:df:b2:9a:0a:82:74:a0:87:c3:a7:e9:0f:d4:3c:a0:0e:
         4f:b0:3d:cb:31:f5:a4:73:a5:83:0d:a8:0c:4d:c1:86:4d:a5:
         17:1e:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 09:31:58 2024 by rpki-client on console-ams.rpki-client.org