Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          iwOTLgspPM2cJmMS1fWxos9M+6g6xGyi72cH6U/AaVE=
Subject key identifier:   6D:20:37:A4:A5:31:F9:21:57:D6:44:6F:39:88:B6:03:74:35:FF:8E
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       306D5D4B33D2D7768567F0BCF1F43087097B33F8
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS29802.roa
Signing time:             Sun 01 Mar 2026 05:31:27 +0000
ROA not before:           Sun 01 Mar 2026 05:26:27 +0000
ROA not after:            Sun 28 Feb 2027 05:31:27 +0000
asID:                     29802
IP address blocks:        40.27.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6d:5d:4b:33:d2:d7:76:85:67:f0:bc:f1:f4:30:87:09:7b:33:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar  1 05:26:27 2026 GMT
            Not After : Feb 28 05:31:27 2027 GMT
        Subject: CN=6D2037A4A531F92157D6446F3988B6037435FF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:28:87:e6:c5:f3:3d:1f:7d:c5:0e:b4:0d:
                    d1:28:49:89:50:89:3a:4b:db:2d:25:36:d9:fa:dd:
                    d8:92:2c:a8:24:8e:12:7f:2c:58:59:74:05:3d:77:
                    91:10:43:c7:4f:07:53:60:aa:68:3d:ef:ed:4b:d8:
                    50:7a:49:de:fe:b0:a2:ee:5d:da:a4:51:ba:80:42:
                    17:ff:f3:fe:10:b4:4e:1a:12:96:78:3a:d8:16:77:
                    ec:4d:c2:73:67:d9:6b:3d:f3:e8:75:51:26:f2:c3:
                    ad:15:fd:2d:70:1b:e0:df:9b:aa:65:d2:58:bc:f0:
                    12:0f:7c:0f:de:9e:9b:b5:33:e6:5e:22:05:3f:81:
                    12:ee:68:9e:4a:30:d1:69:55:98:45:f9:3b:49:5b:
                    4b:e3:81:7e:6b:60:e1:f2:b3:8e:6a:0f:37:7d:c0:
                    18:2f:66:e5:00:c1:f6:36:7c:00:31:c1:a7:5d:1d:
                    86:0e:8d:4e:49:67:b7:29:9e:b5:a8:dd:9a:eb:b2:
                    90:e1:cf:0c:73:df:b6:c7:c0:5b:88:92:d4:69:b4:
                    37:26:69:6c:12:72:73:2a:e8:d2:d2:77:7c:58:55:
                    c1:da:8a:a4:ab:56:b2:6b:ae:5d:f8:e7:f0:ee:a5:
                    da:e7:9a:25:74:79:db:27:0c:98:0f:28:a5:00:a2:
                    30:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:20:37:A4:A5:31:F9:21:57:D6:44:6F:39:88:B6:03:74:35:FF:8E
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:1c:a1:d0:eb:d0:db:b1:72:42:36:5f:6c:cb:4b:0e:0d:61:
         92:6b:d7:16:da:6b:be:89:a2:8c:ab:26:3e:e3:7d:fd:81:40:
         9f:f8:2e:15:ae:0d:53:48:92:b2:5e:a5:93:6e:6c:ea:3e:9a:
         e1:30:57:38:43:d6:e4:11:3d:1c:75:35:67:3c:e9:c2:78:61:
         1c:59:9c:ab:70:62:6e:52:b6:da:d6:82:f4:82:2b:37:24:21:
         5d:7d:47:76:84:28:f3:80:51:80:05:76:4a:ac:a3:f8:00:f3:
         b9:04:84:73:6d:de:b6:38:d5:c9:e5:9a:28:47:49:ce:88:d7:
         3c:92:29:88:6f:b9:23:54:6c:d2:5a:b7:35:5d:a6:b0:19:ce:
         f4:bf:fc:f2:0b:e4:97:51:85:a0:cb:7e:ea:e5:29:aa:27:98:
         a5:55:0f:1f:5e:c0:b6:d3:3a:9a:d7:11:1c:5b:cf:ab:36:4e:
         f8:73:de:20:10:ba:e7:e4:fb:58:29:cd:83:92:b9:2b:34:22:
         ea:1d:1e:b9:9f:1e:ff:03:96:03:35:a7:d3:30:c8:9f:f4:98:
         4c:4b:f1:22:c4:96:8f:26:98:db:5c:ab:15:20:90:c7:1b:83:
         8b:65:4f:91:19:4a:3f:03:aa:8f:83:a2:95:6d:7c:a6:26:f4:
         d0:f4:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:39 2026 by rpki-client