Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          UyG6WViBLcVn3+g4P+9OS2edih0/u/EgpK424sCvUCk=
Subject key identifier:   80:D8:AC:FB:FA:1F:E8:AB:B2:4D:D2:6C:E7:A0:CB:D1:69:C8:5E:5D
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       30CB2A6AD73A89EDB1631CBC90EDB4A7B8EE92BE
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29802.roa
Signing time:             Sun 01 Feb 2026 00:12:20 +0000
ROA not before:           Sun 01 Feb 2026 00:07:20 +0000
ROA not after:            Sun 31 Jan 2027 00:12:20 +0000
asID:                     29802
IP address blocks:        140.99.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cb:2a:6a:d7:3a:89:ed:b1:63:1c:bc:90:ed:b4:a7:b8:ee:92:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb  1 00:07:20 2026 GMT
            Not After : Jan 31 00:12:20 2027 GMT
        Subject: CN=80D8ACFBFA1FE8ABB24DD26CE7A0CBD169C85E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7f:02:c2:3f:3c:ba:fa:9f:0f:82:f7:ee:59:
                    d9:3a:4b:05:16:2d:65:bc:6b:cd:c8:05:94:a3:87:
                    4f:78:8c:06:5e:03:5d:aa:63:c6:67:7c:9d:9e:ce:
                    b4:6e:b6:9c:60:cf:53:5d:a2:3e:2c:1b:1e:39:61:
                    53:2a:8a:31:d5:d0:e1:65:67:3c:35:97:13:83:b2:
                    93:f8:20:e9:b2:cc:94:65:b4:39:da:55:c6:c2:42:
                    ff:cf:cb:73:ad:4e:0d:df:33:90:35:69:ad:55:6a:
                    ac:0a:ef:2a:80:15:94:1d:59:23:8b:08:2b:e1:3e:
                    4b:4d:ca:4f:b9:22:41:e7:0a:61:18:ee:5e:d4:81:
                    43:9b:26:18:2a:db:27:5e:bf:80:f2:0a:d7:00:36:
                    b5:2f:48:15:00:13:e6:a7:84:43:c1:bf:e4:0d:63:
                    4b:c4:68:5e:a3:12:5d:2e:4b:15:e2:f0:e7:c6:cf:
                    0c:ed:77:7c:49:92:97:6d:f3:72:62:21:1b:e9:f9:
                    99:72:b2:89:6a:f9:27:ae:ad:09:b8:8f:35:99:1c:
                    d3:ab:93:29:4d:1e:ea:a5:41:73:fc:f2:7a:ec:5f:
                    a5:23:d1:e5:0e:e3:5d:3e:6b:aa:51:f5:ea:e4:6b:
                    ca:ea:cb:52:7b:4b:f8:68:5f:27:e1:71:2d:29:e3:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D8:AC:FB:FA:1F:E8:AB:B2:4D:D2:6C:E7:A0:CB:D1:69:C8:5E:5D
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:2f:ee:ab:af:5a:b8:35:e1:01:99:84:07:dd:88:9d:ab:43:
         cc:96:d4:c3:21:da:6a:f6:fe:8e:e0:bb:ff:08:6e:b3:69:4f:
         b2:00:a1:7f:13:d6:04:c8:6e:ad:20:ea:75:01:53:80:c2:7d:
         63:1c:12:25:68:db:41:54:35:d4:2f:08:40:e3:e5:01:7d:4e:
         31:67:55:91:43:36:6f:39:56:55:d0:79:03:52:fd:ee:72:6f:
         84:72:32:58:d7:7f:3d:fd:ee:24:2d:29:20:11:a9:f3:33:94:
         32:f9:15:63:25:bf:2d:a6:f1:fb:dc:da:c4:70:87:2a:f2:a9:
         26:5e:f6:3d:9f:15:60:6b:5a:86:ca:13:a8:d2:84:24:30:e5:
         ab:69:84:d7:9e:53:5a:a4:49:9a:d5:8f:d8:bd:45:a8:ac:82:
         b3:73:92:13:ef:0d:57:ef:f1:d6:42:5f:fb:c2:07:04:23:f3:
         fd:24:3a:02:0e:79:7a:72:d2:d6:1f:85:ce:8f:4b:b9:fe:76:
         95:97:7b:f4:66:3d:b4:a2:cd:8d:ef:ad:92:16:81:aa:a5:42:
         8a:6d:9c:84:e1:47:6f:f6:08:78:2a:bf:e8:71:6b:e1:38:95:
         ca:40:a6:b6:5d:b8:e3:f7:fb:4b:88:41:a6:01:d5:c2:fd:98:
         a3:13:bb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:59:49 2026 by rpki-client