Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          d9avZmNejXC4T8yE8TaZHCfZUZC4U1l5xQHwMwYKH74=
Subject key identifier:   27:B2:BE:6E:8A:2B:26:E8:26:60:5F:14:19:35:8C:B1:C5:8B:99:F4
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       406ECEE9EFFA3BB4DBFB7096033D41F3D88BD8B3
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS29802.roa
Signing time:             Thu 26 Jun 2025 10:23:20 +0000
ROA not before:           Thu 26 Jun 2025 10:18:20 +0000
ROA not after:            Thu 25 Jun 2026 10:23:20 +0000
asID:                     29802
IP address blocks:        40.223.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 12:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6e:ce:e9:ef:fa:3b:b4:db:fb:70:96:03:3d:41:f3:d8:8b:d8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 26 10:18:20 2025 GMT
            Not After : Jun 25 10:23:20 2026 GMT
        Subject: CN=27B2BE6E8A2B26E826605F1419358CB1C58B99F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:e0:6e:20:0a:5e:9f:e3:9d:a7:25:79:70:
                    69:40:31:59:1d:62:01:a5:e7:17:12:92:be:a4:a3:
                    e0:a6:8d:75:a4:a7:db:08:2c:22:c0:8b:9d:c6:29:
                    aa:b8:ee:f5:3a:b7:57:2b:b5:c2:78:19:02:6a:38:
                    86:c9:b5:78:c3:c6:2f:15:2e:b1:e6:ae:0a:0a:21:
                    68:18:36:58:6d:c9:22:c6:94:ff:4f:bf:18:62:98:
                    4c:e7:7d:56:76:94:e4:ef:3d:32:6e:98:d3:aa:05:
                    87:98:a2:38:95:a0:32:38:55:5c:b4:73:db:c5:f5:
                    ed:90:68:79:48:31:51:81:88:ef:15:a9:d2:6a:8c:
                    4c:d5:9f:71:13:01:44:12:08:fa:1c:3b:50:c6:08:
                    08:24:d9:62:bc:a4:26:5e:b2:1f:c5:04:9d:af:b0:
                    07:a9:85:6b:46:22:f4:95:67:cb:60:50:66:b9:cc:
                    67:58:a2:97:47:90:82:de:05:88:cb:91:b9:b4:e9:
                    42:f1:1f:c6:80:74:20:3f:53:ac:8d:48:0d:ce:be:
                    88:ba:ad:9d:9e:32:33:4a:a3:92:1f:06:86:ed:29:
                    28:d9:e8:17:51:68:cf:29:68:e8:ad:19:fb:75:6e:
                    24:52:cc:9b:ae:a4:37:bd:a3:84:a5:9f:ac:ed:93:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B2:BE:6E:8A:2B:26:E8:26:60:5F:14:19:35:8C:B1:C5:8B:99:F4
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:38:85:e2:50:24:03:72:ac:40:6a:f7:d6:fc:a5:11:19:be:
         ca:74:75:d0:c5:02:e4:33:ee:ae:98:03:dd:c7:ac:2a:5f:5c:
         13:aa:93:e6:a8:e4:ad:d6:bb:52:20:4c:b6:8a:4e:05:67:13:
         c6:91:6c:61:58:f0:1e:22:22:64:ea:6c:58:3e:ad:10:5d:3f:
         2e:cf:fd:17:0e:90:72:35:62:7e:9c:11:a7:8f:66:d1:8a:4a:
         f7:c2:55:fb:a7:16:c2:76:19:3c:ba:fc:aa:81:c0:4e:a9:27:
         cf:8f:7d:6f:9a:32:32:8f:27:79:4f:77:06:bd:6b:5b:93:46:
         fc:f8:e2:a1:ef:e1:9d:22:68:81:d9:96:d7:db:c3:0c:a2:bf:
         3d:22:6a:40:00:18:3b:3b:53:d8:23:c1:c6:f8:6b:cd:38:b1:
         b5:21:90:4d:46:49:17:33:47:00:f6:40:83:d0:a3:81:d1:7b:
         95:51:85:1f:75:55:1a:be:b1:0e:05:60:a2:ec:b4:9b:60:ac:
         78:45:da:77:87:34:8d:b2:2b:a8:66:f7:7f:3a:25:e5:73:50:
         cc:cf:ad:09:6e:0b:91:58:4e:74:0a:a2:2e:10:3d:0f:a6:6b:
         cf:c3:f6:96:7b:cc:fd:b2:01:a9:45:6f:a2:81:be:cf:8d:82:
         64:20:2d:63
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUQG7O6e/6O7Tb+3CWAz1B89iL2LMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjI2MTAxODIwWhcNMjYwNjI1MTAyMzIw
WjAzMTEwLwYDVQQDEygyN0IyQkU2RThBMkIyNkU4MjY2MDVGMTQxOTM1OENCMUM1
OEI5OUY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNLgbiAKXp/j
nacleXBpQDFZHWIBpecXEpK+pKPgpo11pKfbCCwiwIudximquO71OrdXK7XCeBkC
ajiGybV4w8YvFS6x5q4KCiFoGDZYbckixpT/T78YYphM531WdpTk7z0ybpjTqgWH
mKI4laAyOFVctHPbxfXtkGh5SDFRgYjvFanSaoxM1Z9xEwFEEgj6HDtQxggIJNli
vKQmXrIfxQSdr7AHqYVrRiL0lWfLYFBmucxnWKKXR5CC3gWIy5G5tOlC8R/GgHQg
P1OsjUgNzr6Iuq2dnjIzSqOSHwaG7Sko2egXUWjPKWjorRn7dW4kUsybrqQ3vaOE
pZ+s7ZM1ZQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCeyvm6KKyboJmBfFBk1jLHF
i5n0MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKN8MMA0GCSqGSIb3DQEBCwUAA4IB
AQCHOIXiUCQDcqxAavfW/KURGb7KdHXQxQLkM+6umAPdx6wqX1wTqpPmqOSt1rtS
IEy2ik4FZxPGkWxhWPAeIiJk6mxYPq0QXT8uz/0XDpByNWJ+nBGnj2bRikr3wlX7
pxbCdhk8uvyqgcBOqSfPj31vmjIyjyd5T3cGvWtbk0b8+OKh7+GdImiB2ZbX28MM
or89ImpAABg7O1PYI8HG+GvNOLG1IZBNRkkXM0cA9kCD0KOB0XuVUYUfdVUavrEO
BWCi7LSbYKx4Rdp3hzSNsiuoZvd/OiXlc1DMz60JbguRWE50CqIuED0PpmvPw/aW
e8z9sgGpRW+igb7PjYJkIC1j
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:53:48 2025 by rpki-client