Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          mPEeG+T422uJzLl+16PhS38YwIS5Opukj6O251vImR0=
Subject key identifier:   45:23:76:F1:8D:62:5F:6C:9A:58:DB:C3:2A:08:1F:F5:19:B8:A5:02
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       5B8DEE66B337F00C054E0643C7DFC1093EBF7A14
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS29802.roa
Signing time:             Wed 06 May 2026 07:17:18 +0000
ROA not before:           Wed 06 May 2026 07:12:18 +0000
ROA not after:            Wed 05 May 2027 07:17:18 +0000
asID:                     29802
IP address blocks:        207.180.49.0/24 maxlen: 24
                          216.75.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8d:ee:66:b3:37:f0:0c:05:4e:06:43:c7:df:c1:09:3e:bf:7a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:18 2026 GMT
            Not After : May  5 07:17:18 2027 GMT
        Subject: CN=452376F18D625F6C9A58DBC32A081FF519B8A502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:56:4f:a2:47:12:e7:04:f5:d6:b2:13:d3:
                    6e:1e:92:f8:eb:0b:15:a8:15:30:43:07:87:54:2b:
                    b1:a2:3c:39:af:eb:80:e0:6d:4c:d3:0e:e1:95:20:
                    e3:3a:ae:c0:cf:7c:f5:df:5c:47:4c:35:ca:b3:48:
                    c1:46:4c:6a:96:d3:69:5d:7e:c4:f3:6c:a3:3d:cd:
                    44:d8:a5:a9:d2:5a:ba:45:be:eb:ee:0d:5b:82:d9:
                    ed:c2:a7:04:20:6e:b2:c6:d1:62:29:d3:27:62:2c:
                    28:fc:29:f2:f6:05:a6:89:4e:0c:52:80:18:47:6b:
                    10:97:1d:ee:38:4a:27:f4:fd:8a:11:78:71:d2:65:
                    fd:0d:de:ae:25:66:e6:86:d0:33:5a:9d:e0:11:8a:
                    27:b5:77:c0:9e:85:ba:9f:be:09:b0:88:7d:18:98:
                    30:a2:f8:66:16:98:e1:4c:37:9d:16:15:bc:da:7a:
                    7a:d3:84:27:13:26:0f:77:be:b7:b0:0c:aa:b1:26:
                    13:d8:9f:fc:bc:48:70:ab:89:74:ce:c9:c1:fd:a2:
                    ad:cf:e8:6b:fe:a0:b2:a6:1d:fd:d4:c8:96:e0:cf:
                    ad:64:65:a5:37:19:94:5e:60:a1:c2:d2:e9:cf:40:
                    5d:5f:83:78:be:b6:7f:aa:9a:3b:1e:4f:4e:07:c0:
                    9b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:23:76:F1:8D:62:5F:6C:9A:58:DB:C3:2A:08:1F:F5:19:B8:A5:02
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.49.0/24
                  216.75.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:e3:b1:02:30:19:73:d5:6f:04:a7:d7:58:74:34:9f:cf:
         4f:7a:41:6e:b2:5d:8c:b1:85:08:1c:f2:c2:cb:e8:49:37:c0:
         c5:43:af:76:6b:f0:86:3c:f9:ee:1f:53:f5:8d:d8:3b:36:f9:
         d9:1d:7b:04:13:1d:7c:70:25:65:68:c4:15:dd:08:c0:33:eb:
         e3:4d:f7:55:a1:ca:4c:c6:7f:1d:94:b3:e2:e7:87:5f:e8:31:
         15:39:6a:fb:c1:2e:a9:2a:98:05:82:4b:37:f5:73:42:94:20:
         42:31:a0:63:9f:44:e3:0f:43:a7:40:9e:bd:f8:3b:83:82:ca:
         6e:18:77:fd:c6:ea:90:b7:dd:cd:81:ab:4b:2a:24:23:c7:55:
         d0:e6:3f:0f:72:90:0f:fd:77:9c:c1:fa:63:49:f4:2c:ee:ec:
         4b:04:a8:b3:60:8c:9a:a2:d0:e4:bf:92:00:86:09:36:74:61:
         ca:ca:8a:d1:de:31:53:28:02:f4:d7:de:84:0e:c9:8a:d7:41:
         aa:1c:83:60:4a:5d:ec:b3:bf:b2:e7:a3:99:be:b6:75:dc:c7:
         97:e9:94:4e:05:d5:cf:92:e8:99:da:6a:d3:02:f9:3f:e7:96:
         f5:5b:e8:bf:76:34:68:0c:ac:5e:95:11:30:ce:12:44:ef:de:
         8f:26:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:12:03 2026 by rpki-client