Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          n+DMDe9sMGV9IPq+FV/qsNqrBvCTy6SVB0B+lePbHRs=
Subject key identifier:   2C:4D:CA:00:1D:C1:86:6E:A7:0C:CE:1A:5F:2D:59:5D:EC:10:D8:83
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6FD05BF4D5EEA6529D51F1B3CA5925379773BBC6
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
Signing time:             Thu 23 Jul 2026 05:36:50 +0000
ROA not before:           Thu 23 Jul 2026 05:31:50 +0000
ROA not after:            Thu 22 Jul 2027 05:36:50 +0000
asID:                     29802
IP address blocks:        23.94.132.0/24 maxlen: 24
                          23.226.131.0/24 maxlen: 24
                          66.63.172.0/24 maxlen: 24
                          66.212.17.0/24 maxlen: 24
                          72.11.143.0/24 maxlen: 24
                          208.76.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d0:5b:f4:d5:ee:a6:52:9d:51:f1:b3:ca:59:25:37:97:73:bb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 23 05:31:50 2026 GMT
            Not After : Jul 22 05:36:50 2027 GMT
        Subject: CN=2C4DCA001DC1866EA70CCE1A5F2D595DEC10D883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:48:7e:43:3d:36:8a:bf:fb:89:83:f2:f4:d8:
                    0f:84:92:4d:6c:bd:ca:b5:a5:7c:35:01:92:0f:f9:
                    05:84:50:9a:48:57:fb:22:50:cd:39:12:35:72:35:
                    22:a5:94:53:42:7c:af:a6:45:ba:c0:1e:85:56:6c:
                    0b:69:18:ac:69:4b:2a:4e:25:9b:74:ed:ac:83:9e:
                    56:25:4d:25:ab:24:e2:a5:21:19:6d:99:00:f1:4d:
                    17:57:c9:12:e8:f4:32:87:70:94:4f:24:db:26:59:
                    94:ff:78:8b:ba:fb:7f:0d:17:06:a9:89:e8:b1:e9:
                    15:55:40:73:55:2d:03:1e:21:50:80:6b:35:46:6e:
                    b7:2f:6b:76:b0:1f:d7:95:1f:05:4a:ce:84:c0:90:
                    34:30:a9:8e:c7:85:92:d0:4c:58:47:79:fc:e7:56:
                    68:3e:c4:cb:93:c0:5d:41:16:2e:63:19:0e:b7:96:
                    34:a7:f6:ce:ce:47:92:a5:a0:f2:0b:e2:12:c9:5b:
                    ab:9d:82:be:bb:8c:ba:c8:eb:dd:90:8b:fb:eb:a6:
                    ab:48:d7:43:ff:19:17:64:e0:76:07:19:d6:db:04:
                    60:49:6c:a7:c5:48:93:1b:92:63:76:d5:9b:2e:f4:
                    c7:a4:13:97:5d:1a:e3:84:9e:60:c1:e5:16:18:5b:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4D:CA:00:1D:C1:86:6E:A7:0C:CE:1A:5F:2D:59:5D:EC:10:D8:83
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.132.0/24
                  23.226.131.0/24
                  66.63.172.0/24
                  66.212.17.0/24
                  72.11.143.0/24
                  208.76.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:24:81:30:f9:61:bc:28:24:08:6a:a0:ed:50:75:6b:69:65:
         60:1c:e3:5f:e8:41:5b:2f:e8:66:5e:09:d4:47:39:c3:c9:b3:
         8b:61:36:dd:95:19:0d:0d:12:6e:d4:dc:48:c7:a3:4b:f6:78:
         7b:a8:c9:5a:f7:7f:3b:f8:93:3f:9d:a7:f7:d7:ca:e5:c8:f9:
         18:0b:fb:3e:3d:bf:bd:fa:ea:18:5f:7d:8d:ed:a5:60:de:a8:
         cd:8b:76:20:03:f9:37:99:63:f7:15:42:05:2e:e0:7d:96:be:
         5f:d8:73:56:e0:c6:89:36:74:12:b9:4f:76:ab:40:c8:6a:69:
         bc:a5:a3:3d:1f:11:f6:a6:56:b9:ff:c9:c5:87:e6:aa:7c:1c:
         e1:b2:73:a7:21:0c:a4:e3:cf:ea:81:fd:e6:60:17:2b:50:05:
         2f:75:99:f6:1e:1b:b1:a9:c0:03:fd:30:f3:7d:6d:1e:cc:e3:
         89:88:8b:77:df:0c:8a:88:17:e9:b8:ea:9f:a5:76:dd:c6:14:
         fb:70:bb:8a:4a:27:25:09:e7:50:ec:e1:f5:1a:1e:c4:7a:ee:
         02:72:8f:95:e2:13:ec:8a:bd:d3:96:28:13:d2:6a:c7:9f:e2:
         3d:ff:9b:70:cf:4e:c8:e2:f8:18:16:48:60:39:c8:77:ac:90:
         08:f3:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:07:24 2026 by rpki-client