Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          qrOGpynh4xFiUBZjEzqgsPXp9lJDBbOmc8TxtaiyidE=
Subject key identifier:   EB:08:2D:E4:09:EB:B9:36:E0:7E:9E:DB:2B:62:E5:C1:FF:36:A1:F1
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       714CAD5D701352F04A9D53B9FE26A49E043B68
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29802.roa
Signing time:             Tue 28 Apr 2026 16:41:38 +0000
ROA not before:           Tue 28 Apr 2026 16:36:38 +0000
ROA not after:            Tue 27 Apr 2027 16:41:38 +0000
asID:                     29802
IP address blocks:        140.99.58.0/24 maxlen: 24
                          140.99.236.0/24 maxlen: 24
                          140.99.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 22:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4c:ad:5d:70:13:52:f0:4a:9d:53:b9:fe:26:a4:9e:04:3b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 28 16:36:38 2026 GMT
            Not After : Apr 27 16:41:38 2027 GMT
        Subject: CN=EB082DE409EBB936E07E9EDB2B62E5C1FF36A1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:85:42:fc:ab:c3:c1:16:28:e3:a1:b2:3c:
                    e7:6b:40:d6:86:eb:65:88:10:5f:ec:a5:5e:7e:06:
                    6b:a7:09:ee:53:b2:56:d6:cd:56:66:d4:e1:e6:b2:
                    b7:a1:c1:e8:53:f8:c7:de:89:c4:35:10:e0:76:ce:
                    42:4c:95:c5:ff:b0:b4:96:89:0e:7e:50:81:da:fe:
                    7f:49:93:74:fe:66:2a:0c:41:fd:0c:40:b6:b0:db:
                    bb:61:2d:33:aa:69:3a:bc:be:34:55:e5:9a:94:12:
                    c2:8f:4f:9d:84:1c:02:ef:0e:89:10:61:82:4a:22:
                    93:40:dd:f8:92:52:bc:28:f4:d8:da:db:ba:1c:fb:
                    88:8b:84:3f:07:19:7a:7d:1a:14:ec:96:da:81:c1:
                    72:37:8b:9f:dc:70:2d:71:73:f0:40:95:38:ab:69:
                    cf:6f:e6:29:ab:9c:1c:fb:a7:19:a9:ec:2e:bb:2d:
                    96:74:a9:19:d1:ff:ee:ee:ba:60:d8:c6:7f:28:79:
                    ff:6e:2f:c9:2a:36:4c:dd:4f:ee:41:7b:e4:26:70:
                    f4:60:b2:15:5c:c9:2c:8e:04:30:dc:62:0b:28:27:
                    b5:ad:15:3b:93:30:27:57:4f:f4:a8:7e:aa:31:8b:
                    a3:a7:52:39:41:8c:e4:8b:b6:fe:34:5c:fc:c2:da:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:08:2D:E4:09:EB:B9:36:E0:7E:9E:DB:2B:62:E5:C1:FF:36:A1:F1
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.58.0/24
                  140.99.236.0/24
                  140.99.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ec:e3:64:9e:5d:b6:7f:6e:66:dc:2d:88:50:6b:b5:55:a2:
         b6:e4:b3:3b:82:0e:d8:13:3d:53:39:02:cf:e6:6f:7e:03:04:
         b2:98:55:9b:4d:32:a3:20:57:80:fa:d4:cb:7f:d4:6a:01:26:
         f6:3b:d7:dc:12:71:9c:5e:33:5d:ec:41:41:c8:5e:40:5a:95:
         46:7b:7f:01:5a:5d:74:b7:1f:7d:39:98:01:3c:6d:51:21:26:
         93:69:da:91:fc:5c:24:21:ba:92:8b:0c:3b:85:19:f6:55:64:
         89:8e:7b:b2:81:de:d4:e0:b9:52:7e:5b:d1:64:33:84:88:57:
         35:07:ef:79:e6:bf:f4:af:d8:03:ff:ba:1b:a8:c5:9d:02:9d:
         f2:e4:93:06:8d:59:09:31:4c:5e:21:6a:03:4b:ae:68:42:6a:
         19:f6:55:c8:07:2a:21:dd:e4:c1:c5:0f:d8:04:3f:e2:2c:20:
         a9:2a:e0:df:6d:47:56:f6:5f:05:f9:f3:f1:d2:d6:2b:d8:2c:
         24:18:f1:00:28:18:f8:b3:80:7b:24:da:3c:96:cd:04:73:85:
         67:11:c5:3b:90:7e:b0:6f:76:59:c7:ca:17:14:12:4e:e0:71:
         a6:1b:41:50:7e:ca:56:af:5a:9b:d8:10:d5:18:bb:ca:0f:c5:
         7e:f0:78:e6
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgITcUytXXATUvBKnVO5/iakngQ7aDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzJlYzkzNTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2
NzY1MzIzZjMyOWQ2YWEwNTAeFw0yNjA0MjgxNjM2MzhaFw0yNzA0MjcxNjQxMzha
MDMxMTAvBgNVBAMTKEVCMDgyREU0MDlFQkI5MzZFMDdFOUVEQjJCNjJFNUMxRkYz
NkExRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0n4VC/KvDwRYo
46GyPOdrQNaG62WIEF/spV5+BmunCe5TslbWzVZm1OHmsrehwehT+MfeicQ1EOB2
zkJMlcX/sLSWiQ5+UIHa/n9Jk3T+ZioMQf0MQLaw27thLTOqaTq8vjRV5ZqUEsKP
T52EHALvDokQYYJKIpNA3fiSUrwo9Nja27oc+4iLhD8HGXp9GhTsltqBwXI3i5/c
cC1xc/BAlTirac9v5imrnBz7pxmp7C67LZZ0qRnR/+7uumDYxn8oef9uL8kqNkzd
T+5Be+QmcPRgshVcySyOBDDcYgsoJ7WtFTuTMCdXT/Sofqoxi6OnUjlBjOSLtv40
XPzC2glfAgMBAAGjggKKMIIChjAdBgNVHQ4EFgQU6wgt5AnruTbgfp7bK2Llwf82
ofEwHwYDVR0jBBgwFoAUuyeze1jwVgbhX1LKJC6h1P62swQwDgYDVR0PAQH/BAQD
AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYwYTcwYzgvMC9C
QjI3QjM3QjU4RjA1NjA2RTE1RjUyQ0EyNDJFQTFENEZFQjZCMzA0LmNybDCB8wYI
KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDktYWNjZS0xMzcyMjdl
OTcxYWMvYzU1NmI5MTAtZGM2Yy00MjI4LWFkZjMtODgyOGFjOTZlZTYwL2VjOTM1
Njg0ODUwMzRkNmY1OTAxMjYyNzgwMTVlNTU3ODY3NjUzMjNmMzI5ZDZhYTA1LmNl
cjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4MzdmZDBkZjBh
NzBjOC8wL0FTMjk4MDIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI
KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACMYzoDBACMY+wDBACMY/owDQYJKoZI
hvcNAQELBQADggEBAJDs42SeXbZ/bmbcLYhQa7VVorbkszuCDtgTPVM5As/mb34D
BLKYVZtNMqMgV4D61Mt/1GoBJvY719wScZxeM13sQUHIXkBalUZ7fwFaXXS3H305
mAE8bVEhJpNp2pH8XCQhupKLDDuFGfZVZImOe7KB3tTguVJ+W9FkM4SIVzUH73nm
v/Sv2AP/uhuoxZ0CnfLkkwaNWQkxTF4hagNLrmhCahn2VcgHKiHd5MHFD9gEP+Is
IKkq4N9tR1b2XwX58/HS1ivYLCQY8QAoGPizgHsk2jyWzQRzhWcRxTuQfrBvdlnH
yhcUEk7gcaYbQVB+ylavWpvYENUYu8oPxX7weOY=
-----END CERTIFICATE-----
Generated at Fri May 1 09:25:54 2026 by rpki-client