Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa
File:                     AS29997.roa (raw, json)
Hash identifier:          FpFXK6jixG21+JXRysBhfLJDbud5hQbY8vhDkqlmbDs=
Subject key identifier:   0E:F1:05:23:F9:77:EC:F7:80:A4:E0:EA:6F:E4:6A:F8:03:D6:34:CE
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       36F57E78D56AE233BB93D1361E91B198227033CA
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa
Signing time:             Mon 04 Aug 2025 22:13:57 +0000
ROA not before:           Mon 04 Aug 2025 22:08:57 +0000
ROA not after:            Mon 03 Aug 2026 22:13:57 +0000
asID:                     29997
IP address blocks:        45.54.64.0/24 maxlen: 24
                          2607:f740:e626::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 19:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f5:7e:78:d5:6a:e2:33:bb:93:d1:36:1e:91:b1:98:22:70:33:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Aug  4 22:08:57 2025 GMT
            Not After : Aug  3 22:13:57 2026 GMT
        Subject: CN=0EF10523F977ECF780A4E0EA6FE46AF803D634CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:2a:7f:b8:0c:3b:01:34:12:70:3c:10:81:
                    ed:d9:b8:0b:84:9a:4b:bb:1f:9a:f1:b5:7f:9f:c5:
                    07:f1:26:00:f2:2f:13:e1:a5:55:5f:15:80:0c:41:
                    68:0d:69:f6:39:40:7a:68:ef:93:c2:7f:a3:03:21:
                    27:9d:31:19:d9:30:dd:d1:bb:fa:f5:3a:09:21:df:
                    3d:dc:83:ee:2f:46:ff:c8:fe:a9:59:bc:56:3b:2f:
                    f1:c5:d5:8b:7e:1b:4e:b4:46:4f:d0:24:75:10:8b:
                    dc:e7:e0:31:2b:0a:b0:63:de:eb:76:d3:9e:b9:82:
                    7b:b1:55:c6:0a:3e:36:28:0f:ca:91:0a:b3:30:37:
                    ef:93:af:88:e4:cf:4d:e8:c1:f1:4c:1e:d9:b3:88:
                    9f:2c:63:7f:cb:48:a0:4f:4c:17:89:f8:bd:ed:ed:
                    7d:b3:98:b9:84:db:8f:22:00:2c:e5:fa:13:39:87:
                    c0:47:f4:ac:3c:de:df:0e:7e:26:01:84:bf:dd:80:
                    f9:b7:c8:4e:d5:a9:f7:cb:e9:d8:3d:dd:b3:dc:31:
                    f2:e0:ed:80:9a:11:86:bd:b3:bb:58:7a:7b:80:77:
                    78:19:34:0b:a6:2b:48:67:e6:81:76:70:ba:e2:52:
                    33:40:6f:39:45:da:3d:4e:df:73:58:4f:2e:95:e4:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F1:05:23:F9:77:EC:F7:80:A4:E0:EA:6F:E4:6A:F8:03:D6:34:CE
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS29997.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.64.0/24
                IPv6:
                  2607:f740:e626::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:7a:20:c6:fc:9a:53:cb:b0:33:e0:d8:48:02:ff:8b:fd:
         cd:8d:ea:4a:30:c1:2f:cc:8c:a8:5a:2b:88:f8:de:36:62:80:
         dc:9c:fa:94:06:b8:72:05:38:f4:60:70:41:f0:01:2a:72:ff:
         36:2e:d6:2b:57:7e:77:64:2a:43:5d:22:1d:9f:63:96:5a:84:
         0c:ff:d2:57:ba:a0:9a:d6:01:a7:34:2d:45:c7:71:93:39:d0:
         7c:fe:dc:6a:28:61:ed:94:ce:e2:d9:37:0f:87:40:fa:a4:85:
         c4:48:b5:14:2c:1a:49:6e:f2:0b:84:ce:f6:a5:62:7f:d5:fb:
         59:2b:f3:ee:57:c7:ce:f2:a8:ca:db:75:c8:89:e2:b3:31:3d:
         18:ae:cd:17:e0:50:47:67:dd:23:1c:7b:ce:aa:58:2b:39:a8:
         18:ed:85:3a:87:9d:2e:78:04:7a:15:96:fa:d0:bb:1a:38:a2:
         03:4a:25:64:9c:bc:46:82:a1:9d:fd:23:b5:bf:9f:47:d2:79:
         10:ae:3a:25:22:54:05:34:7b:d0:30:d0:a1:5a:6c:94:c5:8c:
         a9:e1:e8:e2:52:88:9f:f8:bb:2d:c1:3f:7c:ba:5b:fd:eb:8f:
         58:fe:39:35:57:79:67:d5:d3:5b:9f:8a:0f:22:dc:d6:cd:83:
         a0:b2:a7:6a
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUNvV+eNVq4jO7k9E2HpGxmCJwM8owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjUwODA0MjIwODU3WhcNMjYwODAzMjIxMzU3
WjAzMTEwLwYDVQQDEygwRUYxMDUyM0Y5NzdFQ0Y3ODBBNEUwRUE2RkU0NkFGODAz
RDYzNENFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+wqf7gMOwE0
EnA8EIHt2bgLhJpLux+a8bV/n8UH8SYA8i8T4aVVXxWADEFoDWn2OUB6aO+Twn+j
AyEnnTEZ2TDd0bv69ToJId893IPuL0b/yP6pWbxWOy/xxdWLfhtOtEZP0CR1EIvc
5+AxKwqwY97rdtOeuYJ7sVXGCj42KA/KkQqzMDfvk6+I5M9N6MHxTB7Zs4ifLGN/
y0igT0wXifi97e19s5i5hNuPIgAs5foTOYfAR/SsPN7fDn4mAYS/3YD5t8hO1an3
y+nYPd2z3DHy4O2AmhGGvbO7WHp7gHd4GTQLpitIZ+aBdnC64lIzQG85Rdo9Tt9z
WE8uleRpAwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFA7xBSP5d+z3gKTg6m/kavgD
1jTOMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzI5OTk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAG
CCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALTZAMA8EAgACMAkDBwAmB/dA5iYw
DQYJKoZIhvcNAQELBQADggEBAF/neiDG/JpTy7Az4NhIAv+L/c2N6kowwS/MjKha
K4j43jZigNyc+pQGuHIFOPRgcEHwASpy/zYu1itXfndkKkNdIh2fY5ZahAz/0le6
oJrWAac0LUXHcZM50Hz+3GooYe2UzuLZNw+HQPqkhcRItRQsGklu8guEzvalYn/V
+1kr8+5Xx87yqMrbdciJ4rMxPRiuzRfgUEdn3SMce86qWCs5qBjthTqHnS54BHoV
lvrQuxo4ogNKJWScvEaCoZ39I7W/n0fSeRCuOiUiVAU0e9Aw0KFabJTFjKnh6OJS
iJ/4uy3BP3y6W/3rj1j+OTVXeWfV01ufig8i3NbNg6Cyp2o=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:27 2025 by rpki-client