Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          BW6f7jSLER11kaU4nIYwg43JMae9BZaFiupujjB9xWs=
Subject key identifier:   80:5C:49:CA:7E:B5:8B:83:0E:0A:0C:52:C7:4C:A8:BC:C5:94:1E:93
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       397C62402A246F0CC2B619CBB2F85990F03FB905
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
Signing time:             Wed 02 Apr 2025 14:11:08 +0000
ROA not before:           Wed 02 Apr 2025 14:06:08 +0000
ROA not after:            Wed 01 Apr 2026 14:11:08 +0000
asID:                     29802
IP address blocks:        23.94.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7c:62:40:2a:24:6f:0c:c2:b6:19:cb:b2:f8:59:90:f0:3f:b9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr  2 14:06:08 2025 GMT
            Not After : Apr  1 14:11:08 2026 GMT
        Subject: CN=805C49CA7EB58B830E0A0C52C74CA8BCC5941E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:f5:3f:26:93:dd:36:9a:5c:77:a5:a4:78:
                    3f:97:a8:3c:97:5f:e4:10:03:1a:a1:fa:82:9b:5d:
                    a2:a6:95:68:27:06:a6:28:c9:73:bd:42:9e:fa:6f:
                    6c:d1:2c:d3:72:e6:45:a3:dd:30:12:92:c2:60:8e:
                    c9:4b:23:06:50:ee:f5:48:1b:bc:1e:72:27:aa:35:
                    03:95:37:f6:7b:5b:e2:67:1f:b7:14:9b:f6:5a:ef:
                    26:1c:db:02:c4:f0:55:9c:4e:ee:1b:f9:05:99:11:
                    b2:8b:41:b1:76:f1:b9:25:2d:99:fa:5f:22:76:24:
                    d1:e1:94:1d:e0:ae:82:11:3a:f8:a7:eb:04:08:2c:
                    7d:03:97:10:5e:12:eb:a7:00:dd:a9:c8:ba:5f:00:
                    35:bf:38:4e:f4:1f:21:e5:1c:a7:13:8b:ad:7c:eb:
                    7d:94:77:66:a7:e9:29:fa:6a:a5:21:c9:84:86:e2:
                    0b:b2:1c:25:04:1e:f5:a4:03:23:6e:07:c2:4f:e8:
                    fc:24:6b:a6:e8:b2:a1:9f:27:38:5c:be:6e:34:c1:
                    25:f5:22:e5:25:8a:47:6b:41:ca:98:3a:35:34:61:
                    47:fa:a7:eb:6d:4e:f9:a6:88:dc:0d:33:af:91:75:
                    6b:6d:35:ab:39:a1:b4:ae:47:63:1b:55:7d:75:96:
                    9d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5C:49:CA:7E:B5:8B:83:0E:0A:0C:52:C7:4C:A8:BC:C5:94:1E:93
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:8a:2f:41:18:db:1e:e8:56:c3:a6:32:86:2b:5d:6e:04:a9:
         83:e6:4a:e8:8e:0c:e2:e6:81:d0:39:8d:7f:b8:ef:03:d3:86:
         30:13:50:33:a8:ff:a6:94:55:6d:79:65:b1:f7:ea:8b:48:5c:
         7a:c9:c9:a4:97:dc:4c:17:49:89:e3:60:43:57:c8:5d:d7:58:
         c5:bb:06:07:30:09:e1:8b:35:c5:ae:35:1e:db:26:c2:5f:bf:
         eb:22:ed:d5:f0:af:bb:2b:40:6d:49:b0:9f:f5:cd:12:5e:b0:
         79:6d:c4:90:f3:a8:4a:c8:e3:0d:02:72:65:72:12:3d:8a:38:
         c9:d2:a3:bb:7d:76:f7:c9:77:9b:0c:0e:fd:31:94:9d:8d:2e:
         2f:73:ec:21:28:7a:06:d6:ba:27:f5:65:ce:91:5e:73:0e:9a:
         03:1f:b2:58:bd:68:75:b5:37:0f:94:fd:08:99:17:60:c4:d4:
         25:49:e2:d6:90:94:1c:38:1f:4a:ff:2a:09:5a:ae:44:00:5c:
         bd:9a:39:41:06:8d:58:ca:91:f9:b5:a9:f0:c8:8e:c2:7a:47:
         f5:11:16:2b:d9:4a:54:f9:e4:13:f3:a1:50:7e:63:46:74:e5:
         f2:4f:7b:c6:35:66:4b:bf:96:53:5a:20:eb:3e:6b:c9:54:80:
         fd:dd:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:54:40 2025 by rpki-client