Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          7DLui9hvUBtm9rAZaDzmp1TnEh4rfbU2nkpKULV2VZc=
Subject key identifier:   AF:36:80:9A:92:B5:8D:09:55:4F:CF:35:0B:8C:AC:99:04:C9:5A:81
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       5AC316591E03311BF54314A3E9342D1101CA78A7
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS29802.roa
Signing time:             Tue 10 Nov 2026 10:02:02 +0000
ROA not before:           Tue 10 Nov 2026 09:57:02 +0000
ROA not after:            Tue 09 Nov 2027 10:02:02 +0000
asID:                     29802
IP address blocks:        2602:ff62:f::/48 maxlen: 48
                          2602:ff62:11::/48 maxlen: 48
                          2602:ff62:12::/48 maxlen: 48
                          2602:ff62:13::/48 maxlen: 48
                          2602:ff62:14::/48 maxlen: 48
                          2602:ff62:15::/48 maxlen: 48
                          2602:ff62:16::/48 maxlen: 48
                          2602:ff62:17::/48 maxlen: 48
                          2602:ff62:18::/48 maxlen: 48
                          2602:ff62:19::/48 maxlen: 48
                          2602:ff62:1a::/48 maxlen: 48
                          2602:ff62:1c::/48 maxlen: 48
                          2602:ff62:103::/48 maxlen: 48
                          2602:ff62:108::/48 maxlen: 48
                          2602:ff62:109::/48 maxlen: 48
                          2602:ff62:10a::/48 maxlen: 48
                          2602:ff62:10b::/48 maxlen: 48
                          2602:ff62:10c::/48 maxlen: 48
                          2602:ff62:10d::/48 maxlen: 48
                          2602:ff62:10e::/48 maxlen: 48
                          2602:ff62:10f::/48 maxlen: 48
                          2602:ff62:110::/48 maxlen: 48
                          2602:ff62:111::/48 maxlen: 48
                          2602:ff62:112::/48 maxlen: 48
                          2602:ff62:113::/48 maxlen: 48
                          2602:ff62:114::/48 maxlen: 48
                          2602:ff62:115::/48 maxlen: 48
                          2602:ff62:116::/48 maxlen: 48
                          2602:ff62:124::/48 maxlen: 48
                          2602:ff62:125::/48 maxlen: 48
                          2602:ff62:126::/48 maxlen: 48
                          2602:ff62:127::/48 maxlen: 48
                          2602:ff62:128::/48 maxlen: 48
                          2602:ff62:129::/48 maxlen: 48
                          2602:ff62:12a::/48 maxlen: 48
                          2602:ff62:12b::/48 maxlen: 48
                          2602:ff62:12c::/48 maxlen: 48
                          2602:ff62:12d::/48 maxlen: 48
                          2602:ff62:12e::/48 maxlen: 48
                          2602:ff62:12f::/48 maxlen: 48
                          2602:ff62:184::/48 maxlen: 48
                          2602:ff62:185::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Nov 2026 08:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c3:16:59:1e:03:31:1b:f5:43:14:a3:e9:34:2d:11:01:ca:78:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Nov 10 09:57:02 2026 GMT
            Not After : Nov  9 10:02:02 2027 GMT
        Subject: CN=AF36809A92B58D09554FCF350B8CAC9904C95A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:16:75:01:5e:ab:51:a3:b7:b2:9e:5f:d1:
                    0f:00:2e:80:93:e5:58:08:fe:e7:12:5d:d2:c1:f5:
                    34:45:6b:48:c2:b3:ab:74:c1:3c:5e:68:b4:a4:00:
                    b4:9a:f9:03:3a:61:f5:8a:b5:d3:96:68:41:5d:7d:
                    c1:a5:1f:65:e2:6d:4c:db:ab:f5:7c:d2:4e:1c:05:
                    95:37:e1:f0:9e:ae:7f:3a:02:4e:b6:06:b4:a4:5a:
                    a2:76:5c:55:a9:fe:bc:1a:57:ed:ea:00:e6:2d:c6:
                    4b:4f:23:cb:78:0c:36:ba:da:09:99:28:39:2e:fc:
                    89:90:94:02:b1:d0:32:65:b1:26:33:57:89:48:fc:
                    89:62:58:34:b2:ff:33:3d:1b:52:a7:4e:9a:28:43:
                    b9:de:7d:bc:d4:a8:99:c9:cb:90:0c:94:a6:af:d6:
                    2c:73:5d:ce:d6:f6:fa:c4:b1:8e:b0:66:42:39:d1:
                    de:c3:e0:b5:bb:89:d7:f5:c1:ec:a3:ff:b1:c9:14:
                    95:d9:20:61:65:b8:d9:2b:76:b9:a5:e1:f8:21:ec:
                    c5:5b:a3:62:14:21:1f:16:ed:87:61:bc:52:2b:cb:
                    d9:b1:91:d0:d4:21:e3:65:7f:13:14:15:4d:dc:dd:
                    51:32:8d:c2:57:82:4c:36:a9:55:38:98:b3:48:7f:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:80:9A:92:B5:8D:09:55:4F:CF:35:0B:8C:AC:99:04:C9:5A:81
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:f::/48
                  2602:ff62:11::-2602:ff62:1a:ffff:ffff:ffff:ffff:ffff
                  2602:ff62:1c::/48
                  2602:ff62:103::/48
                  2602:ff62:108::-2602:ff62:116:ffff:ffff:ffff:ffff:ffff
                  2602:ff62:124::-2602:ff62:12f:ffff:ffff:ffff:ffff:ffff
                  2602:ff62:184::/47

    Signature Algorithm: sha256WithRSAEncryption
         b6:84:6a:8e:39:4a:33:88:d4:1f:cc:36:ba:1a:d9:96:7b:a6:
         af:c8:62:bb:e8:c9:0b:d2:6f:42:02:13:a9:a4:26:28:30:e1:
         9c:9b:7c:61:99:a9:4d:45:0a:0b:56:c6:75:5a:04:27:4c:85:
         32:54:28:30:b7:65:f2:d4:c1:10:2e:44:ad:e6:2c:5d:cd:e7:
         44:8d:5d:ad:21:a9:50:b4:5b:76:92:24:fc:61:a4:1d:8b:0d:
         33:89:c5:37:3b:dc:f4:d8:e5:96:39:0a:a9:33:54:29:65:71:
         99:4e:b6:30:88:a0:35:4a:29:61:cc:87:4d:af:c5:33:56:84:
         f3:d1:1a:66:e0:ef:be:b6:f4:c8:b8:4f:b4:42:32:85:fc:d5:
         d7:79:27:e0:46:8c:85:c3:1e:7b:0a:1a:de:b3:aa:18:ca:a7:
         e3:ca:9d:ad:06:2e:4e:dd:c2:8d:2c:33:6c:a1:19:2c:c3:64:
         a3:29:5a:0c:1f:57:34:4c:32:50:5f:cf:da:6b:64:b7:b0:4c:
         af:ec:22:6b:26:1d:ac:1d:a4:f3:b0:25:18:16:d0:21:d8:88:
         69:26:12:c7:0b:f8:58:f5:44:0c:fc:cb:b1:64:77:d4:84:30:
         61:51:96:bb:69:2f:e9:8f:50:76:c7:19:bb:35:26:d7:86:31:
         26:72:bc:af
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgIUWsMWWR4DMRv1QxSj6TQtEQHKeKcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYxMTEwMDk1NzAyWhcNMjcxMTA5MTAwMjAy
WjAzMTEwLwYDVQQDEyhBRjM2ODA5QTkyQjU4RDA5NTU0RkNGMzUwQjhDQUM5OTA0
Qzk1QTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEkWdQFeq1Gj
t7KeX9EPAC6Ak+VYCP7nEl3SwfU0RWtIwrOrdME8Xmi0pAC0mvkDOmH1irXTlmhB
XX3BpR9l4m1M26v1fNJOHAWVN+Hwnq5/OgJOtga0pFqidlxVqf68Glft6gDmLcZL
TyPLeAw2utoJmSg5LvyJkJQCsdAyZbEmM1eJSPyJYlg0sv8zPRtSp06aKEO53n28
1KiZycuQDJSmr9Ysc13O1vb6xLGOsGZCOdHew+C1u4nX9cHso/+xyRSV2SBhZbjZ
K3a5peH4IezFW6NiFCEfFu2HYbxSK8vZsZHQ1CHjZX8TFBVN3N1RMo3CV4JMNqlV
OJizSH+b4wIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFK82gJqStY0JVU/PNQuMrJkE
yVqBMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGFlOTFkZjAxODBkYmQ0MzBj
ODIyZmEvMy9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHkG
CCsGAQUFBwEHAQH/BGowaDBmBAIAAjBgAwcAJgL/YgAPMBIDBwAmAv9iABEDBwAm
Av9iABoDBwAmAv9iABwDBwAmAv9iAQMwEgMHAyYC/2IBCAMHACYC/2IBFjASAwcC
JgL/YgEkAwcEJgL/YgEgAwcBJgL/YgGEMA0GCSqGSIb3DQEBCwUAA4IBAQC2hGqO
OUoziNQfzDa6GtmWe6avyGK76MkL0m9CAhOppCYoMOGcm3xhmalNRQoLVsZ1WgQn
TIUyVCgwt2Xy1MEQLkSt5ixdzedEjV2tIalQtFt2kiT8YaQdiw0zicU3O9z02OWW
OQqpM1QpZXGZTrYwiKA1SilhzIdNr8UzVoTz0Rpm4O++tvTIuE+0QjKF/NXXeSfg
RoyFwx57Chres6oYyqfjyp2tBi5O3cKNLDNsoRksw2SjKVoMH1c0TDJQX8/aa2S3
sEyv7CJrJh2sHaTzsCUYFtAh2IhpJhLHC/hY9UQM/MuxZHfUhDBhUZa7aS/pj1B2
xxm7NSbXhjEmcryv
-----END CERTIFICATE-----
Generated at Wed Nov 11 15:13:56 2026 by rpki-client