Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38382e302f32342d3234203d3e203336323336.roa
File:                     3137362e35382e38382e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          taLF1TK6H9Ub/CVHs2mk3qW9WqJRchNzoC74HAT3x6g=
Subject key identifier:   CA:51:10:F0:C2:98:5F:C7:BD:BE:63:9B:32:B8:8F:9F:8D:40:DD:87
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       57B504A0F6196AFF76362CBD480A16E3741B570B
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38382e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 23:29:11 +0000
ROA not before:           Mon 06 Jul 2026 23:24:11 +0000
ROA not after:            Mon 05 Jul 2027 23:29:11 +0000
asID:                     36236
IP address blocks:        176.58.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b5:04:a0:f6:19:6a:ff:76:36:2c:bd:48:0a:16:e3:74:1b:57:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Jul  6 23:24:11 2026 GMT
            Not After : Jul  5 23:29:11 2027 GMT
        Subject: CN=CA5110F0C2985FC7BDBE639B32B88F9F8D40DD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9c:3c:36:e7:d9:9d:00:2b:f9:02:c0:60:89:
                    35:12:fb:63:f2:ce:3d:0c:0e:12:0a:4f:6a:ce:5c:
                    de:f4:c8:ed:2a:d2:06:58:9f:2c:96:67:19:3a:f1:
                    5b:11:85:f2:a7:ee:67:91:ed:17:fb:90:03:dd:50:
                    7e:ec:ac:aa:52:45:5a:0c:fe:1f:45:1e:55:be:b3:
                    c4:cd:63:08:2a:e4:bb:d7:36:ba:21:36:29:09:d4:
                    47:e3:84:b9:1d:32:d8:af:6b:32:12:03:15:69:3f:
                    e0:36:9a:2b:0e:61:6e:b3:5a:7b:a1:a1:03:5d:36:
                    51:1d:12:8b:b0:3c:f0:a4:f8:07:a8:96:b4:54:3d:
                    31:6a:7f:20:42:57:53:3f:f6:46:9d:48:ca:82:8b:
                    bd:9c:1a:66:f1:7e:cc:ec:dc:83:27:a2:bb:d2:40:
                    13:c1:6d:ca:90:82:f2:12:74:76:19:00:d6:af:61:
                    d2:67:c8:99:23:ea:0e:e2:2d:dd:8a:80:f1:39:b6:
                    b0:8d:ac:b1:33:84:73:dd:2a:2a:54:a7:42:88:46:
                    5b:44:44:7c:39:7f:6e:4d:00:1e:be:24:44:54:ec:
                    df:8e:4f:a7:14:29:75:00:c1:22:65:f9:80:4a:be:
                    86:57:7e:27:75:80:51:39:de:99:1e:f3:60:0b:66:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:51:10:F0:C2:98:5F:C7:BD:BE:63:9B:32:B8:8F:9F:8D:40:DD:87
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e38382e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.58.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:e0:e1:70:00:7f:5e:82:29:6c:ad:7a:6a:b5:fb:fd:06:
         9d:bd:8b:b6:6e:51:4c:65:32:dc:0b:0f:3f:32:c3:9d:67:52:
         71:95:e9:b0:90:d7:0e:6b:ae:4d:e4:03:aa:cc:32:6e:cb:10:
         f0:70:23:97:8c:a3:08:b4:de:af:72:a9:a9:b7:8c:26:27:d5:
         0b:4b:28:5f:33:97:71:fb:dc:9d:1c:64:1c:45:50:96:f8:e6:
         7d:87:ee:17:c5:05:70:1c:eb:01:3f:23:6f:2a:ca:06:17:0e:
         62:74:7a:ad:08:fb:a3:4e:fe:73:70:fe:86:b6:07:53:cf:08:
         51:c3:7c:da:2a:73:49:65:b6:e2:31:da:53:96:ca:e9:bd:1c:
         69:b7:a2:a3:fc:89:51:47:55:8f:fc:de:84:42:49:89:5a:1a:
         8f:2d:b0:21:ff:bc:2a:0c:ea:f8:9d:98:fb:8e:8d:d2:7c:23:
         bc:1c:0d:5e:ac:df:3e:83:8e:16:ff:98:a2:db:f2:e0:b4:2b:
         31:4b:ff:67:9a:8d:da:1f:0f:6d:93:71:11:1c:ff:cc:e4:4e:
         f3:1f:d3:f7:40:91:44:fd:a3:4e:04:a4:c1:7e:26:05:f9:54:
         74:8f:d7:72:0b:4a:e2:3c:00:97:32:d6:ad:97:98:67:8a:3f:
         8b:33:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:02 2026 by rpki-client