Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          vYGH52BXmlVR8QbPCmxhE173D6RIZbpzwWZ+Bd3Hios=
Subject key identifier:   46:1C:BD:FB:68:75:FE:53:3E:27:CE:0A:BA:6C:60:AF:D6:5D:B6:C9
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       0735524555C836FE4552A0B2C66CC923B2CA0915
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS29802.roa
Signing time:             Wed 20 May 2026 20:44:34 +0000
ROA not before:           Wed 20 May 2026 20:39:34 +0000
ROA not after:            Wed 19 May 2027 20:44:34 +0000
asID:                     29802
IP address blocks:        40.27.51.0/24 maxlen: 24
                          40.27.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:35:52:45:55:c8:36:fe:45:52:a0:b2:c6:6c:c9:23:b2:ca:09:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May 20 20:39:34 2026 GMT
            Not After : May 19 20:44:34 2027 GMT
        Subject: CN=461CBDFB6875FE533E27CE0ABA6C60AFD65DB6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:fa:a4:e9:9f:11:c5:5e:81:19:1e:2a:24:
                    fd:d1:22:3b:2f:77:6b:69:73:e0:3b:ee:78:bf:37:
                    a2:4a:e1:44:3b:17:27:ed:8d:f8:33:6a:ee:2a:d1:
                    a4:c1:63:70:10:52:29:2e:fb:f0:e7:99:c0:e7:de:
                    95:a2:5f:1f:22:7e:40:33:14:bf:8f:17:04:88:bb:
                    c3:53:e3:db:a4:21:f2:ef:b2:62:a3:17:a7:c6:e0:
                    0f:ab:b6:1a:75:05:c2:34:ac:84:2c:96:54:d1:17:
                    35:80:0d:3f:87:69:60:13:6e:e6:ad:91:bd:86:78:
                    0d:14:9c:4b:78:61:df:4d:db:63:51:0b:72:59:ee:
                    4f:60:cb:f8:6f:5c:31:91:d6:b4:9e:db:1a:ae:62:
                    c8:18:38:5c:ba:36:9e:2b:d9:6c:f6:ba:0d:92:41:
                    39:a4:a7:57:53:39:ff:81:db:e3:ff:45:60:69:af:
                    73:87:ef:ff:90:ab:eb:32:09:2a:b2:d7:e8:f4:1c:
                    c6:cf:28:57:ae:22:38:e3:98:84:ff:82:e8:38:99:
                    bb:9c:68:dc:2b:98:e7:f7:61:17:92:94:de:8b:87:
                    9a:b6:e3:7a:f9:2d:d0:43:9c:4b:73:9d:bf:cb:ca:
                    04:f5:72:2d:80:b1:24:93:fd:5e:10:1c:63:23:16:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1C:BD:FB:68:75:FE:53:3E:27:CE:0A:BA:6C:60:AF:D6:5D:B6:C9
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.51.0/24
                  40.27.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:b6:ce:95:96:06:4d:62:7d:17:bd:80:4b:b3:22:fc:fc:53:
         51:7d:74:b4:73:e7:f9:76:a7:3d:5c:f4:ab:f7:df:e9:91:44:
         f2:d1:b1:80:33:7b:68:9f:17:53:72:8b:b1:1f:b4:4e:d2:41:
         37:2d:89:e2:65:21:26:21:7a:31:21:55:13:b4:51:50:dc:06:
         57:df:ef:52:ad:ce:d4:b9:1a:a3:7d:bb:86:55:68:3f:66:d8:
         f7:91:b6:40:d8:3e:01:85:c8:c3:65:b5:a3:e8:00:a9:9e:00:
         a6:cf:d9:83:af:ba:b9:62:66:55:37:a6:98:d5:2a:2c:1b:7b:
         72:5f:06:b9:c1:96:62:70:b7:72:b6:87:f7:2f:49:e3:2f:93:
         f7:c7:ae:b4:bc:8e:33:3e:35:c5:37:90:6e:08:8d:e0:af:91:
         5e:0d:a3:a6:48:31:d8:fd:0a:91:be:bd:8e:5d:5a:e2:29:65:
         fc:40:c8:6c:28:0f:d0:c7:8d:23:db:00:c2:f9:4d:98:67:cc:
         04:62:f7:83:3a:3f:1a:f0:25:27:d8:db:2c:f5:c1:7a:c3:a1:
         dc:db:8e:d5:23:72:24:06:3f:8e:97:0f:35:45:77:9c:3d:19:
         63:16:47:82:9f:2d:36:9b:ba:5f:43:7c:2d:dc:b8:6e:7a:97:
         82:b4:3e:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUBzVSRVXINv5FUqCyxmzJI7LKCRUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNTIwMjAzOTM0WhcNMjcwNTE5MjA0NDM0
WjAzMTEwLwYDVQQDEyg0NjFDQkRGQjY4NzVGRTUzM0UyN0NFMEFCQTZDNjBBRkQ2
NURCNkM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1j6pOmfEcVe
gRkeKiT90SI7L3draXPgO+54vzeiSuFEOxcn7Y34M2ruKtGkwWNwEFIpLvvw55nA
596Vol8fIn5AMxS/jxcEiLvDU+PbpCHy77JioxenxuAPq7YadQXCNKyELJZU0Rc1
gA0/h2lgE27mrZG9hngNFJxLeGHfTdtjUQtyWe5PYMv4b1wxkda0ntsarmLIGDhc
ujaeK9ls9roNkkE5pKdXUzn/gdvj/0Vgaa9zh+//kKvrMgkqstfo9BzGzyhXriI4
45iE/4LoOJm7nGjcK5jn92EXkpTei4eatuN6+S3QQ5xLc52/y8oE9XItgLEkk/1e
EBxjIxZwswIDAQABo4IChDCCAoAwHQYDVR0OBBYEFEYcvftodf5TPifOCrpsYK/W
XbbJMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAKBszAwQAKBvZMA0GCSqGSIb3DQEB
CwUAA4IBAQC2ts6VlgZNYn0XvYBLsyL8/FNRfXS0c+f5dqc9XPSr99/pkUTy0bGA
M3tonxdTcouxH7RO0kE3LYniZSEmIXoxIVUTtFFQ3AZX3+9Src7UuRqjfbuGVWg/
Ztj3kbZA2D4BhcjDZbWj6ACpngCmz9mDr7q5YmZVN6aY1SosG3tyXwa5wZZicLdy
tof3L0njL5P3x660vI4zPjXFN5BuCI3gr5FeDaOmSDHY/QqRvr2OXVriKWX8QMhs
KA/Qx40j2wDC+U2YZ8wEYveDOj8a8CUn2Nss9cF6w6Hc247VI3IkBj+Olw81RXec
PRljFkeCny02m7pfQ3wt3LhuepeCtD4U
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:39:36 2026 by rpki-client