Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233322e302f32342d3234203d3e203336323336.roa
File:                     3138352e34302e3233322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          PkAM9MQ+tfu0jHsyF/PB1uUQd5UTLPw6MdSMWcvjGMA=
Subject key identifier:   53:60:0F:61:02:BF:79:F8:3F:E8:4F:AE:22:BC:BA:4B:3D:01:1F:35
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       5364D92193B865B9AE282441CAA32A28092E2707
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233322e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 22:29:09 +0000
ROA not before:           Mon 06 Jul 2026 22:24:09 +0000
ROA not after:            Mon 05 Jul 2027 22:29:09 +0000
asID:                     36236
IP address blocks:        185.40.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:64:d9:21:93:b8:65:b9:ae:28:24:41:ca:a3:2a:28:09:2e:27:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Jul  6 22:24:09 2026 GMT
            Not After : Jul  5 22:29:09 2027 GMT
        Subject: CN=53600F6102BF79F83FE84FAE22BCBA4B3D011F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:86:1e:1b:5a:63:ef:2c:c7:2d:cb:27:17:
                    98:2f:a3:68:a8:ec:ac:60:4d:3d:71:11:5c:54:31:
                    f5:ee:32:7e:a7:2c:12:dd:54:47:3f:9e:c8:e8:df:
                    17:45:55:1b:8c:fa:60:41:b0:03:d6:35:af:9f:8f:
                    13:59:7e:b8:ed:af:f9:30:89:d3:af:8d:85:9c:bc:
                    ea:48:71:71:bf:c1:8a:c3:c0:a5:09:ed:1e:66:1c:
                    53:0f:89:f7:18:bd:a9:4b:ee:8e:5b:d5:3a:9e:00:
                    a8:7c:18:0e:d1:9d:24:9f:77:cb:04:be:c0:92:d1:
                    bb:f5:31:4b:56:a2:71:cc:2c:13:b1:ba:ab:e4:46:
                    97:3f:91:ae:1e:29:da:06:3e:ec:92:56:5b:6a:17:
                    eb:3a:49:ae:62:4d:92:e2:62:1e:f2:05:a5:03:49:
                    e9:80:87:21:d7:1f:a0:b3:6b:2b:1f:34:b1:d0:8f:
                    47:74:a2:17:74:a0:15:55:c2:93:2a:ea:05:7d:fa:
                    25:85:c1:5d:1e:5b:84:4a:fe:0d:1e:d7:7d:78:b6:
                    4c:6b:e6:fd:bf:03:e7:2f:b8:8c:e3:2e:9d:e8:7f:
                    8e:e7:ea:dd:f7:dc:90:5d:03:f3:27:4d:77:f0:f1:
                    4a:90:1c:93:2b:03:f3:7a:26:70:ee:cf:6c:68:26:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:60:0F:61:02:BF:79:F8:3F:E8:4F:AE:22:BC:BA:4B:3D:01:1F:35
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3138352e34302e3233322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.40.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:b1:51:5d:22:f1:33:82:c4:c1:4d:6f:2e:aa:1c:0c:05:d9:
         57:84:82:d8:04:b6:9e:a3:b2:e0:37:f7:82:62:d0:0f:70:9f:
         87:17:89:e3:99:8f:80:46:10:58:37:01:68:0a:23:fd:89:64:
         44:0f:61:6d:9b:02:ea:97:34:6e:a1:bb:ed:e5:7d:ed:30:6e:
         25:92:37:52:5e:0a:6a:2d:78:ab:b3:06:bc:74:99:13:b5:90:
         90:3a:ad:d2:02:4f:92:b9:45:90:d8:a3:0b:1b:a3:3c:ce:3c:
         e8:7d:1a:53:e5:f1:be:23:e0:2c:70:05:12:fa:fc:89:2a:14:
         04:34:5c:b7:5f:9f:42:a1:48:80:26:d5:68:46:14:bd:56:4b:
         9a:ff:67:9c:22:8e:6c:aa:a1:cf:cf:2f:fe:ae:32:8c:70:f4:
         ed:ce:57:e0:91:b1:7d:24:15:aa:c8:91:ed:b9:76:a8:17:f6:
         36:6d:c4:24:c0:1d:1a:98:f4:df:80:18:fa:47:ac:ac:86:7b:
         2d:bc:f3:7f:a8:38:db:a3:39:16:90:01:34:c1:ec:e0:a0:97:
         df:1a:7b:9b:f4:97:e8:7c:91:44:f0:81:8f:da:22:7e:75:c4:
         33:31:bd:b4:f7:4d:35:4e:8e:fe:ca:09:4f:ed:8e:7c:44:53:
         75:97:f5:47
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUU2TZIZO4ZbmuKCRByqMqKAkuJwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWIyYzdlNjI1MDNiMDYzNGViNGFiNTNmODhjMDY5NTBh
Yzc2ZGNkMTAeFw0yNjA3MDYyMjI0MDlaFw0yNzA3MDUyMjI5MDlaMDMxMTAvBgNV
BAMTKDUzNjAwRjYxMDJCRjc5RjgzRkU4NEZBRTIyQkNCQTRCM0QwMTFGMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zIYeG1pj7yzHLcsnF5gvo2io
7KxgTT1xEVxUMfXuMn6nLBLdVEc/nsjo3xdFVRuM+mBBsAPWNa+fjxNZfrjtr/kw
idOvjYWcvOpIcXG/wYrDwKUJ7R5mHFMPifcYvalL7o5b1TqeAKh8GA7RnSSfd8sE
vsCS0bv1MUtWonHMLBOxuqvkRpc/ka4eKdoGPuySVltqF+s6Sa5iTZLiYh7yBaUD
SemAhyHXH6CzaysfNLHQj0d0ohd0oBVVwpMq6gV9+iWFwV0eW4RK/g0e1314tkxr
5v2/A+cvuIzjLp3of47n6t333JBdA/MnTXfw8UqQHJMrA/N6JnDuz2xoJjaRAgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUU2APYQK/efg/6E+uIry6Sz0BHzUwHwYDVR0j
BBgwFoAU6yx+YlA7BjTrSrU/iMBpUKx23NEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEwODRiODYvMS9FQjJDN0U2MjUw
M0IwNjM0RUI0QUI1M0Y4OEMwNjk1MEFDNzZEQ0QxLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNnl4LVlsQTdCalRyU3JVX2lNQnBVS3gyM05FLmNlcjCBogYIKwYB
BQUHAQsEgZUwgZIwgY8GCCsGAQUFBzALhoGCcnN5bmM6Ly9ycGtpLXJwcy5hcmlu
Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2
LzEvMzEzODM1MmUzNDMwMmUzMjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAz
MzM2MzIzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuSjoMA0GCSqGSIb3DQEBCwUAA4IBAQCzsVFd
IvEzgsTBTW8uqhwMBdlXhILYBLaeo7LgN/eCYtAPcJ+HF4njmY+ARhBYNwFoCiP9
iWRED2FtmwLqlzRuobvt5X3tMG4lkjdSXgpqLXirswa8dJkTtZCQOq3SAk+SuUWQ
2KMLG6M8zjzofRpT5fG+I+AscAUS+vyJKhQENFy3X59CoUiAJtVoRhS9Vkua/2ec
Io5sqqHPzy/+rjKMcPTtzlfgkbF9JBWqyJHtuXaoF/Y2bcQkwB0amPTfgBj6R6ys
hnstvPN/qDjbozkWkAE0wezgoJffGnub9JfofJFE8IGP2iJ+dcQzMb209001To7+
yglP7Y58RFN1l/VH
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:05 2026 by rpki-client