Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa
File:                     326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier:          nFCzmJ3llLvMOceSzC5UDuzdBwP+TKnhNCMgBVP2/+M=
Subject key identifier:   54:EC:96:D2:BA:14:74:F1:89:92:B6:9A:F1:5D:20:C8:9E:6D:F8:22
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       1D0E4073CFF348FC6F869CA2FDBD2C25B264A8F3
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa
Signing time:             Mon 02 Oct 2023 19:55:33 +0000
ROA not before:           Mon 02 Oct 2023 19:50:33 +0000
ROA not after:            Mon 30 Sep 2024 19:55:33 +0000
asID:                     36236
IP address blocks:        2a00:dd80:42::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0e:40:73:cf:f3:48:fc:6f:86:9c:a2:fd:bd:2c:25:b2:64:a8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Oct  2 19:50:33 2023 GMT
            Not After : Sep 30 19:55:33 2024 GMT
        Subject: CN=54EC96D2BA1474F18992B69AF15D20C89E6DF822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:42:30:95:11:10:9c:c6:86:51:8a:9a:c8:
                    b3:5e:58:e5:e9:5e:e7:b5:8f:bc:1b:88:4c:fc:98:
                    ba:6c:99:30:27:be:ff:f3:49:8e:6d:59:38:5b:bd:
                    45:0f:3e:bd:6f:6b:56:15:b5:5e:34:02:0f:18:16:
                    78:ed:60:57:8f:b4:21:03:45:1c:c2:30:92:56:66:
                    b7:80:ac:4a:a6:56:59:8c:9f:ed:15:ca:54:b9:68:
                    4b:64:79:4f:07:60:9e:98:4b:c4:d6:17:24:d0:24:
                    ba:92:e4:a7:c8:0d:85:3a:57:16:7e:e0:68:1c:8e:
                    dd:f0:be:91:43:bb:24:5d:0c:3d:7b:f8:18:64:5e:
                    3f:24:89:1b:ae:3c:24:81:02:3d:a6:56:13:21:f5:
                    d9:78:06:45:95:0a:3f:51:65:ad:61:a7:8b:ef:ac:
                    a1:dd:ce:8c:18:00:d9:25:ca:61:e7:db:fe:29:58:
                    05:cd:a5:c0:0d:25:38:c9:f3:39:cd:ce:a6:b2:fe:
                    ad:bd:fb:23:b0:48:4e:bc:e2:b5:ea:7c:1d:ea:dc:
                    68:3c:38:d8:ba:c1:96:0a:6c:90:82:81:1c:08:70:
                    48:00:cf:ed:94:08:85:29:4a:f8:91:8c:02:4f:b4:
                    cb:5b:b3:f7:db:07:d3:db:12:95:e3:d7:63:c5:1d:
                    de:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:EC:96:D2:BA:14:74:F1:89:92:B6:9A:F1:5D:20:C8:9E:6D:F8:22
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a34323a3a2f34382d3438203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:dd80:42::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:47:ad:12:03:62:46:e3:9c:b5:3f:72:74:72:98:ec:83:
         ad:c0:44:73:f2:f6:d1:87:ef:54:63:6b:4d:b5:85:c5:14:46:
         16:1d:e5:c7:2d:f2:0b:c1:e0:38:ff:4a:58:8b:63:63:bf:f7:
         3a:41:41:20:7e:52:58:da:42:cd:b9:a3:9c:65:bb:f5:9b:be:
         99:ca:8a:78:54:b5:4c:80:cd:ab:b8:99:3e:37:0e:ae:5b:b9:
         f2:6c:d5:cf:21:b6:31:b4:85:c5:64:a4:05:f0:5f:07:18:00:
         30:c6:00:7f:7e:ec:6f:4e:52:c2:3b:b2:f5:b8:a4:be:14:e2:
         c5:ef:f6:be:cf:be:05:3a:41:17:de:d5:81:3f:c5:e3:0b:35:
         af:0d:fa:04:4e:22:c9:4d:31:bf:96:c3:dd:e8:9d:8e:57:a2:
         a7:b2:ab:48:6f:c2:2b:76:fe:30:8a:8b:e7:99:45:89:61:57:
         f2:ab:37:5e:db:21:e5:4d:83:35:5d:5a:33:b9:c8:61:22:bf:
         c0:2f:65:8f:0f:fe:98:1c:9d:0e:f6:11:3d:57:aa:70:91:22:
         a4:db:4c:cf:15:33:6b:22:e1:06:03:be:93:66:54:66:97:39:
         01:75:3a:34:85:78:8b:12:8f:21:82:ba:eb:a5:4b:1e:76:6b:
         6e:d4:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:49:46 2024 by rpki-client on console-fra.rpki-client.org