Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          RuMJhl+rKsj/72v5aPJ81G2tP7yQK1XFz90mxZGRGjA=
Subject key identifier:   F4:D1:2C:DF:B7:83:0C:87:E7:38:D2:71:1B:27:A0:85:B4:D3:9B:F0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       57DBCD9499C4E6F243087FC524447C58111252BA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
Signing time:             Thu 17 Oct 2024 18:58:11 +0000
ROA not before:           Thu 17 Oct 2024 18:53:11 +0000
ROA not after:            Thu 16 Oct 2025 18:58:11 +0000
asID:                     29802
IP address blocks:        23.94.132.0/24 maxlen: 24
                          64.50.160.0/22 maxlen: 24
                          64.50.164.0/23 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.50.180.0/22 maxlen: 24
                          64.50.184.0/23 maxlen: 24
                          64.50.186.0/24 maxlen: 24
                          64.50.188.0/22 maxlen: 24
                          67.210.96.0/22 maxlen: 24
                          67.210.100.0/23 maxlen: 24
                          67.210.103.0/24 maxlen: 24
                          67.210.104.0/22 maxlen: 24
                          67.210.108.0/23 maxlen: 24
                          67.210.111.0/24 maxlen: 24
                          67.210.121.0/24 maxlen: 24
                          67.210.126.0/24 maxlen: 24
                          74.50.2.0/23 maxlen: 24
                          74.50.4.0/23 maxlen: 24
                          74.50.7.0/24 maxlen: 24
                          89.35.92.0/22 maxlen: 24
                          162.213.0.0/22 maxlen: 24
                          192.228.112.0/24 maxlen: 24
                          192.228.115.0/24 maxlen: 24
                          192.228.120.0/23 maxlen: 24
                          192.228.123.0/24 maxlen: 24
                          192.228.126.0/23 maxlen: 24
                          208.76.40.0/22 maxlen: 24
                          209.200.228.0/23 maxlen: 24
                          209.200.232.0/23 maxlen: 24
                          209.200.235.0/24 maxlen: 24
                          209.200.236.0/23 maxlen: 24
                          209.200.238.0/24 maxlen: 24
                          209.200.240.0/24 maxlen: 24
                          209.200.242.0/23 maxlen: 24
                          209.200.244.0/23 maxlen: 24
                          209.200.251.0/24 maxlen: 24
                          209.200.252.0/23 maxlen: 24
                          209.200.254.0/24 maxlen: 24
                          216.97.224.0/22 maxlen: 24
                          216.97.228.0/23 maxlen: 24
                          216.97.235.0/24 maxlen: 24
                          216.227.208.0/22 maxlen: 24
                          216.227.216.0/23 maxlen: 24
                          216.227.218.0/24 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 08:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:db:cd:94:99:c4:e6:f2:43:08:7f:c5:24:44:7c:58:11:12:52:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Oct 17 18:53:11 2024 GMT
            Not After : Oct 16 18:58:11 2025 GMT
        Subject: CN=F4D12CDFB7830C87E738D2711B27A085B4D39BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:98:9f:11:8c:64:b0:1e:09:b4:1c:dc:57:8b:
                    95:81:fb:e6:e0:19:c3:5b:7c:2d:54:8f:f0:17:f1:
                    53:7e:25:a2:83:dd:4f:24:7f:88:1d:1b:2e:b9:81:
                    68:a0:12:23:e0:0f:80:6b:7d:b1:7c:f0:2b:df:f5:
                    ed:4d:f0:62:0d:5f:ff:cd:b5:f9:4d:49:43:26:34:
                    ce:2c:24:b4:7a:bb:ad:a7:cb:1c:ef:f9:87:ab:11:
                    cb:c4:aa:ab:41:ba:a4:3f:75:02:95:23:e0:56:27:
                    d9:b4:87:1f:2d:0c:bf:e8:63:f1:b9:c8:a6:01:63:
                    a4:66:57:20:a6:dc:59:ec:7c:71:07:13:62:d2:5c:
                    d1:2c:0d:d2:5e:6b:0d:ee:47:f9:c7:4c:86:2d:9e:
                    57:81:99:80:ae:6f:b1:21:da:30:41:10:be:a1:ba:
                    95:5d:16:24:c6:77:7f:60:6f:ac:18:a7:21:5d:53:
                    36:28:08:fe:e3:c1:ae:7f:fd:c7:ed:38:37:44:b5:
                    cb:ee:cb:55:2c:6c:9d:05:f5:23:54:45:88:47:d8:
                    09:63:c2:50:4d:1c:6c:85:d4:4a:a1:c5:99:d8:7c:
                    05:d3:ac:5c:81:a3:bc:3e:47:82:2c:cf:41:aa:4f:
                    e0:6b:05:44:6d:b0:50:1f:9b:48:f8:f9:22:a4:91:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D1:2C:DF:B7:83:0C:87:E7:38:D2:71:1B:27:A0:85:B4:D3:9B:F0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.132.0/24
                  64.50.160.0-64.50.166.255
                  64.50.180.0-64.50.186.255
                  64.50.188.0/22
                  67.210.96.0-67.210.101.255
                  67.210.103.0-67.210.109.255
                  67.210.111.0/24
                  67.210.121.0/24
                  67.210.126.0/24
                  74.50.2.0-74.50.5.255
                  74.50.7.0/24
                  89.35.92.0/22
                  162.213.0.0/22
                  192.228.112.0/24
                  192.228.115.0/24
                  192.228.120.0/23
                  192.228.123.0/24
                  192.228.126.0/23
                  208.76.40.0/22
                  209.200.228.0/23
                  209.200.232.0/23
                  209.200.235.0-209.200.238.255
                  209.200.240.0/24
                  209.200.242.0-209.200.245.255
                  209.200.251.0-209.200.254.255
                  216.97.224.0-216.97.229.255
                  216.97.235.0/24
                  216.227.208.0/22
                  216.227.216.0-216.227.218.255
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:a7:e9:46:6d:a9:58:dd:c2:22:e4:8d:8c:d9:2d:4b:bd:ad:
         9b:2d:64:d0:5c:7d:3c:78:32:50:e3:0b:e5:14:06:44:4a:44:
         0a:a7:64:6c:d3:96:ba:98:0e:f9:6c:86:fb:4b:9b:96:84:a3:
         aa:30:f0:6b:db:0d:ca:fd:a1:6e:d0:8f:59:65:2d:91:8f:c5:
         2e:85:07:c9:d9:93:81:8e:41:5d:55:79:f9:38:49:b2:58:e5:
         1c:f0:5c:79:de:21:ef:29:4d:5a:8b:1d:81:f8:be:70:64:25:
         21:ed:e0:6d:c6:10:6c:c0:7e:2d:1b:d8:3d:94:58:02:40:55:
         55:fe:69:f0:a6:bd:24:b4:96:d5:5e:fc:9c:53:b6:bd:86:c9:
         41:0d:78:d9:25:ba:ed:de:18:61:94:fd:13:05:66:71:b6:bd:
         ab:c0:dd:d6:36:8e:ba:de:5a:23:4c:41:15:28:8c:80:25:5d:
         22:a3:17:bc:8c:68:4a:ee:9b:00:50:a5:80:a0:2b:55:fb:66:
         56:68:55:19:ea:a8:a8:7f:31:78:fb:ef:53:4e:43:13:20:a8:
         44:3d:56:ac:f9:f0:c8:6b:ea:a3:3c:03:2b:ee:60:e9:3c:6b:
         f8:9a:5f:c5:03:e2:ab:9e:10:6e:45:e0:7c:53:5e:a3:43:92:
         35:7b:d6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:32 2025 by rpki-client