Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          PjJ40DUvPIjeUEsAB72T2qEUDkAQXe8A3E1neFlUwTI=
Subject key identifier:   67:0B:90:05:26:11:02:2A:EC:F0:9E:FF:6C:40:E7:6E:B5:D9:65:FB
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       1114759F9CA43D908A95BE69E0CF2152F2D16CB3
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS29802.roa
Signing time:             Sat 25 Jul 2026 06:40:11 +0000
ROA not before:           Sat 25 Jul 2026 06:35:11 +0000
ROA not after:            Sat 24 Jul 2027 06:40:11 +0000
asID:                     29802
IP address blocks:        204.93.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:14:75:9f:9c:a4:3d:90:8a:95:be:69:e0:cf:21:52:f2:d1:6c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Jul 25 06:35:11 2026 GMT
            Not After : Jul 24 06:40:11 2027 GMT
        Subject: CN=670B90052611022AECF09EFF6C40E76EB5D965FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:6a:1f:dd:89:11:60:3e:a2:a7:7e:8b:82:
                    7b:b8:33:61:1f:5c:df:04:ee:45:0a:18:c5:64:a7:
                    15:78:d2:e5:17:66:f6:93:c4:2d:8b:e2:63:dc:11:
                    02:e7:42:96:d7:fe:35:b8:5b:75:46:1c:6e:10:ad:
                    04:99:1b:30:db:10:55:fc:00:76:7a:9c:b8:b0:a4:
                    f9:52:e6:07:15:ad:67:6d:6d:f1:d0:de:c2:1b:00:
                    d0:5c:0b:c0:2f:a5:bb:7c:6e:ef:e9:d8:27:8f:03:
                    46:c6:02:60:fe:3f:9b:7a:58:97:64:91:48:3e:fe:
                    e2:b8:fc:ce:92:5b:5f:68:96:4f:aa:05:1f:18:f3:
                    89:37:86:09:66:b9:8b:30:b9:9a:84:54:8b:77:08:
                    a7:99:b3:45:b4:00:39:7c:b6:d2:ac:30:04:8b:f9:
                    84:5f:47:dc:ec:d6:60:44:69:c8:86:ba:3c:b8:94:
                    3d:b4:e7:b0:d5:af:b1:8d:69:f3:39:c2:8b:36:a1:
                    15:96:59:9c:c2:c2:70:0e:90:3b:39:d1:ab:9c:18:
                    58:1b:a6:4e:5f:bd:16:39:55:6f:c9:d5:ad:50:7b:
                    a4:f7:87:9f:db:78:b7:1e:b3:86:89:94:c4:c6:48:
                    d8:12:02:54:b6:68:7b:0a:0b:25:9d:e5:5a:69:bc:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0B:90:05:26:11:02:2A:EC:F0:9E:FF:6C:40:E7:6E:B5:D9:65:FB
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:34:d6:f8:a0:62:b3:e8:b7:84:44:81:d9:a2:0b:6c:50:
         fd:c4:c6:c1:a6:88:b2:3e:42:f4:1d:cd:37:9c:ea:c7:61:cd:
         02:aa:2b:c1:6c:c9:2a:5b:09:62:67:55:4d:0e:7f:e3:09:1e:
         8c:5f:99:b8:83:c1:88:c2:7d:ad:ec:ab:98:1d:7d:ad:bd:20:
         ef:cf:ab:c5:48:eb:41:ec:08:24:37:b8:90:58:6f:9a:db:dd:
         1a:29:75:c3:0d:4f:3a:c2:34:fd:67:09:32:62:4b:50:c8:a9:
         c0:84:3a:ef:ed:76:4c:ab:ab:4d:a4:e4:f1:ac:2a:a5:59:f3:
         52:98:1c:fa:fa:a9:0d:d0:91:c7:8d:2a:0d:72:40:cb:80:27:
         cc:bc:23:21:89:2b:d5:92:6d:ce:60:0c:38:f4:0b:6d:ef:47:
         37:9c:c3:62:a1:d0:f9:83:85:6b:4f:b2:b4:3b:61:a5:91:b4:
         3e:a6:6e:9b:4c:d0:3a:5d:e9:cd:e3:63:44:b1:fb:fb:e8:9f:
         20:65:ee:da:a6:51:03:c1:96:9c:bf:cf:e1:ac:b7:0e:31:c7:
         16:b3:d6:83:72:eb:94:02:e0:60:37:15:d4:d5:a2:91:2a:67:
         62:4b:b0:49:bd:ae:ff:b4:1c:a2:af:cb:23:39:dd:40:1d:0b:
         01:52:80:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:55 2026 by rpki-client