Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          p5vnCxp54SLJYrtSODuUK2QVWhVvvn1iGZi3PMAbpSc=
Subject key identifier:   FB:98:EA:C5:22:30:ED:96:8F:2D:9E:31:5E:66:01:33:DF:B1:02:7C
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       643E8A078A8CD1C4E21A364292AD135D950A9008
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
Signing time:             Wed 12 Mar 2025 02:53:10 +0000
ROA not before:           Wed 12 Mar 2025 02:48:10 +0000
ROA not after:            Wed 11 Mar 2026 02:53:10 +0000
asID:                     29802
IP address blocks:        157.254.158.0/24 maxlen: 24
                          157.254.182.0/24 maxlen: 24
                          157.254.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3e:8a:07:8a:8c:d1:c4:e2:1a:36:42:92:ad:13:5d:95:0a:90:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 12 02:48:10 2025 GMT
            Not After : Mar 11 02:53:10 2026 GMT
        Subject: CN=FB98EAC52230ED968F2D9E315E660133DFB1027C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:f9:d2:3a:8a:4a:e3:2a:bf:ed:6f:d8:2b:
                    ec:54:6f:58:31:90:89:de:f8:69:2b:35:d1:c4:ab:
                    8e:6b:3d:e3:4d:c0:f7:d0:84:13:39:7c:b9:5c:aa:
                    1f:4c:41:6d:5c:ae:db:6c:f2:3b:f6:0b:aa:ae:1f:
                    19:d1:ae:07:af:d1:09:de:93:21:29:0a:ba:79:ae:
                    dc:71:ec:36:ce:51:66:07:2e:8b:26:9d:ff:1f:4a:
                    77:de:57:4e:9a:98:70:c4:29:34:4c:e4:47:3f:db:
                    7c:01:7f:5c:98:55:4d:51:4e:e2:08:5b:09:22:b3:
                    98:95:53:fd:cd:3e:86:92:62:b2:00:74:0c:1e:7e:
                    f7:b8:fa:f4:5d:ca:96:fa:06:1c:a1:af:ad:3d:de:
                    ad:c7:6b:13:9a:fb:e5:ef:81:37:70:53:93:1e:c5:
                    cf:a5:13:c3:97:c4:6c:cb:23:00:c0:f5:0f:9a:c1:
                    1f:ac:33:d5:f0:b1:5f:c8:df:99:35:65:9d:ac:36:
                    f0:3a:c0:2d:60:e2:18:b4:33:f0:b2:73:ae:4f:2b:
                    37:05:6b:1d:12:b3:ca:1f:fd:17:51:c4:de:1c:4c:
                    bf:1f:a9:11:b9:70:9a:da:73:8a:5c:3e:6d:ce:19:
                    ab:a0:d3:2f:95:4e:c7:15:c0:78:76:a0:a2:4e:0c:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:98:EA:C5:22:30:ED:96:8F:2D:9E:31:5E:66:01:33:DF:B1:02:7C
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.158.0/24
                  157.254.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:0b:1b:ca:46:4d:47:ab:e5:26:e3:b9:53:53:85:b2:01:d0:
         be:76:06:18:a2:1c:d1:f8:7c:ad:64:15:03:59:0a:89:0a:f2:
         2d:ef:70:be:11:be:a6:67:52:fb:32:16:62:35:b2:02:9b:10:
         21:50:35:06:30:80:94:78:36:1b:6f:6f:ab:a7:69:0b:b5:71:
         d9:63:bf:8b:a8:47:5c:d5:8d:e7:9b:3e:25:d5:3c:5f:f4:7e:
         fe:59:d6:c0:8e:1f:be:26:5c:3c:0e:90:35:45:7f:62:75:1b:
         36:86:3b:61:34:82:5c:96:a0:4c:d7:3b:7c:cb:ba:2d:ea:e3:
         c1:56:2c:2a:39:bd:3d:39:f9:fd:72:db:4f:30:d2:48:ff:52:
         33:40:16:49:89:9a:3e:45:dc:ff:47:87:f5:07:4d:3c:94:37:
         85:a5:ca:b6:5f:b5:0f:22:4a:cd:69:24:03:39:e3:36:33:c7:
         bb:bc:6d:12:eb:b5:83:54:43:cb:19:a6:ac:07:d7:8e:48:49:
         42:6e:9a:49:18:14:5c:67:43:bb:09:ca:db:dd:9f:15:08:2f:
         e4:79:15:90:36:d9:3c:0c:61:df:21:54:4c:d0:93:3c:33:88:
         fc:58:ba:a7:ce:a1:2b:bb:0b:82:9c:76:ac:ac:90:f6:8f:b8:
         45:4f:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:31:31 2025 by rpki-client