Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33613a3a2f34382d3438203d3e203336323336.roa
File:                     326130303a646438303a33613a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier:          +hkKnlABLVdHnJUxwl5uQFUlJyw7mpSeGkCl1UQEjAs=
Subject key identifier:   59:B0:57:8D:76:53:82:93:7F:6B:50:1D:CC:F5:68:E5:F8:47:F0:4F
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       3FEF5142644C2780AF47B6ED7AB87AAB2309F8D5
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33613a3a2f34382d3438203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 19:55:32 +0000
ROA not before:           Mon 02 Oct 2023 19:50:32 +0000
ROA not after:            Mon 30 Sep 2024 19:55:32 +0000
asID:                     36236
IP address blocks:        2a00:dd80:3a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ef:51:42:64:4c:27:80:af:47:b6:ed:7a:b8:7a:ab:23:09:f8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Oct  2 19:50:32 2023 GMT
            Not After : Sep 30 19:55:32 2024 GMT
        Subject: CN=59B0578D765382937F6B501DCCF568E5F847F04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:38:37:3e:55:af:74:a3:84:20:a6:cd:40:5a:
                    5f:ba:62:a4:6d:2f:53:18:0d:07:68:0d:0f:7d:82:
                    a2:6d:0c:50:21:aa:eb:79:1a:c0:86:0f:df:ba:48:
                    b1:8c:e1:55:2c:5b:38:51:5b:5f:41:64:05:a4:46:
                    2e:d9:d7:18:05:51:cd:14:36:91:15:8a:26:95:7b:
                    3b:b7:f5:55:a5:26:38:cc:85:eb:99:90:e8:72:af:
                    8f:76:b6:97:a8:2d:33:88:07:79:c1:3e:b4:6f:3e:
                    96:3b:c2:83:f4:59:b6:64:cc:d3:8f:37:e7:49:b4:
                    76:14:b6:25:32:dd:a8:81:0b:d0:79:59:34:2d:96:
                    e1:0b:b4:b3:ac:10:ac:01:4d:2f:ab:d8:5f:4c:3e:
                    db:a9:38:ca:86:48:6f:c6:4a:fe:75:6a:ba:d2:38:
                    43:5e:39:67:d1:79:de:66:cf:b4:8b:75:4c:8e:d1:
                    1c:52:b1:c9:29:94:5b:22:80:4c:49:03:91:fc:91:
                    3f:ae:0c:87:f4:62:8d:09:7b:8d:b3:b9:fa:77:85:
                    47:eb:0d:1f:be:97:c1:a4:05:49:af:fb:4d:0e:ee:
                    f5:1c:b0:62:0d:da:d4:37:a4:a6:bf:c7:b4:92:3c:
                    8e:de:bc:4c:f8:0f:81:4d:cf:bd:95:3f:6c:8c:ca:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B0:57:8D:76:53:82:93:7F:6B:50:1D:CC:F5:68:E5:F8:47:F0:4F
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33613a3a2f34382d3438203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:dd80:3a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:b6:0e:fb:cc:b9:a8:b3:5e:2c:99:68:57:1f:01:27:fe:
         49:70:1b:d4:e0:db:91:1b:3b:ac:a2:50:81:06:78:fe:98:ef:
         e4:97:e5:54:f6:08:3a:84:2a:5e:ab:8f:69:a7:36:20:17:94:
         4f:df:59:b4:82:77:1d:d4:f3:09:8b:54:6d:ba:bf:53:08:a2:
         c2:2a:c7:98:61:72:a0:0f:b1:b1:f0:75:86:81:06:db:ad:67:
         29:84:50:d3:a6:32:48:84:52:49:5c:12:47:1d:3b:38:8a:c2:
         ba:8d:d6:a9:ae:aa:df:c3:fa:18:48:81:3e:de:dc:07:16:e0:
         bf:ee:82:e1:59:bf:99:82:9a:ce:9a:13:3a:30:ae:c8:55:7b:
         82:21:e0:90:17:c2:e8:cb:d9:47:38:c3:a2:bf:83:74:28:69:
         a8:8d:0d:2a:7a:9a:80:e3:43:df:d5:0d:cd:81:61:a7:1b:18:
         34:40:ad:c3:36:a1:cf:a0:62:d5:9d:9b:a0:7f:4d:bf:00:52:
         dd:5f:3a:b3:2c:c9:29:3c:28:d3:a7:29:aa:61:0e:b1:62:85:
         7e:49:9e:40:f8:75:93:c1:b3:1d:9d:de:a8:9b:19:60:cb:36:
         cb:46:3a:94:de:99:7c:1b:d7:5b:83:b5:b1:69:97:a2:2f:3f:
         c4:c7:c7:a6
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUP+9RQmRMJ4CvR7bterh6qyMJ+NUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yMzEwMDIxOTUwMzJaFw0yNDA5MzAxOTU1MzJaMDMxMTAvBgNV
BAMTKDU5QjA1NzhENzY1MzgyOTM3RjZCNTAxRENDRjU2OEU1Rjg0N0YwNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnODc+Va90o4Qgps1AWl+6YqRt
L1MYDQdoDQ99gqJtDFAhqut5GsCGD9+6SLGM4VUsWzhRW19BZAWkRi7Z1xgFUc0U
NpEViiaVezu39VWlJjjMheuZkOhyr492tpeoLTOIB3nBPrRvPpY7woP0WbZkzNOP
N+dJtHYUtiUy3aiBC9B5WTQtluELtLOsEKwBTS+r2F9MPtupOMqGSG/GSv51arrS
OENeOWfRed5mz7SLdUyO0RxSsckplFsigExJA5H8kT+uDIf0Yo0Je42zufp3hUfr
DR++l8GkBUmv+00O7vUcsGIN2tQ3pKa/x7SSPI7evEz4D4FNz72VP2yMykgPAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUWbBXjXZTgpN/a1AdzPVo5fhH8E8wHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBpgYIKwYB
BQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzI2MTMwMzAzYTY0NjQzODMwM2EzMzYxM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzMzNjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoA3YAAOjANBgkqhkiG9w0BAQsFAAOC
AQEAe1e2DvvMuaizXiyZaFcfASf+SXAb1ODbkRs7rKJQgQZ4/pjv5JflVPYIOoQq
XquPaac2IBeUT99ZtIJ3HdTzCYtUbbq/UwiiwirHmGFyoA+xsfB1hoEG261nKYRQ
06YySIRSSVwSRx07OIrCuo3Wqa6q38P6GEiBPt7cBxbgv+6C4Vm/mYKazpoTOjCu
yFV7giHgkBfC6MvZRzjDor+DdChpqI0NKnqagOND39UNzYFhpxsYNECtwzahz6Bi
1Z2boH9NvwBS3V86syzJKTwo06cpqmEOsWKFfkmeQPh1k8GzHZ3eqJsZYMs2y0Y6
lN6ZfBvXW4O1sWmXoi8/xMfHpg==
-----END CERTIFICATE-----
Generated at Sun May 19 09:38:09 2024 by rpki-client on console-fra.rpki-client.org