Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          RBXmwMbZxbWD6/W6SJkyFFz/47plFjPVYBpSyyPYPvI=
Subject key identifier:   EE:F1:29:E1:C8:E3:28:56:5F:02:F6:7A:49:78:D6:0B:C4:98:B2:9E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7449C0FC324E3694A757CC4F5C1D71D7FC03AB62
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa
Signing time:             Wed 29 Jul 2026 07:58:37 +0000
ROA not before:           Wed 29 Jul 2026 07:53:37 +0000
ROA not after:            Wed 28 Jul 2027 07:58:37 +0000
asID:                     29802
IP address blocks:        23.94.132.0/24 maxlen: 24
                          23.226.131.0/24 maxlen: 24
                          66.63.172.0/24 maxlen: 24
                          66.212.17.0/24 maxlen: 24
                          72.11.143.0/24 maxlen: 24
                          74.50.8.0/24 maxlen: 24
                          208.76.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 15:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:49:c0:fc:32:4e:36:94:a7:57:cc:4f:5c:1d:71:d7:fc:03:ab:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 29 07:53:37 2026 GMT
            Not After : Jul 28 07:58:37 2027 GMT
        Subject: CN=EEF129E1C8E328565F02F67A4978D60BC498B29E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:63:fc:99:48:9c:9e:66:57:0b:a0:31:d4:
                    0d:d9:06:e0:5f:fe:28:84:7d:ba:5c:ec:fc:0e:ef:
                    cc:f5:59:de:9e:9a:c4:00:eb:f1:2f:d6:ed:3e:05:
                    05:18:74:c6:22:53:66:c8:e7:ec:e1:8a:7d:48:fa:
                    8d:a7:76:60:41:2a:ba:b4:a4:81:7b:3d:bf:a2:a6:
                    4b:d0:67:ef:da:65:6f:1f:42:5e:d5:dc:cd:c4:c2:
                    24:e2:2a:ec:40:c7:96:6f:a9:7f:0e:8a:0a:08:cb:
                    17:7a:ef:9d:4b:9b:32:dc:42:8c:ab:20:0a:bc:03:
                    e1:e6:a0:91:c6:95:30:31:6d:d7:ed:2a:e1:73:ee:
                    aa:87:58:83:ec:ed:73:d5:3e:93:c7:d4:09:6d:95:
                    ed:6f:20:22:1c:d3:2a:30:f8:75:64:86:4c:9e:85:
                    3f:86:4f:d0:ba:ca:69:81:00:79:7f:3e:9f:96:24:
                    3b:1c:34:e9:c7:56:f2:03:a7:58:85:fc:54:38:d6:
                    fb:1e:a3:e9:58:19:c7:82:01:a0:82:38:73:e3:a9:
                    1e:cc:1b:3e:45:1f:8b:70:34:dd:28:2c:e6:8b:53:
                    fc:84:74:df:4e:e3:b9:4d:55:5c:3b:07:5b:23:8b:
                    bd:41:33:17:e2:d8:88:ff:4a:6e:ee:f1:68:35:fb:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F1:29:E1:C8:E3:28:56:5F:02:F6:7A:49:78:D6:0B:C4:98:B2:9E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.132.0/24
                  23.226.131.0/24
                  66.63.172.0/24
                  66.212.17.0/24
                  72.11.143.0/24
                  74.50.8.0/24
                  208.76.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:b3:53:89:6a:89:22:29:61:51:9f:64:b4:b8:b9:31:00:b6:
         c4:ff:d8:c3:43:8d:4e:18:a9:95:23:79:5c:3c:af:e0:28:b5:
         7a:02:f4:0d:a6:22:70:aa:d0:1b:73:f3:78:65:8f:08:f6:9b:
         1b:2a:35:e7:b8:e7:dd:a9:15:d8:22:86:ac:01:75:bc:ec:91:
         d5:27:5f:c0:e6:f9:d2:53:51:a7:8c:44:58:ab:69:0c:7e:f1:
         b2:10:b7:a8:3d:7b:77:39:0b:77:c1:98:f9:bd:fb:c3:82:ac:
         5f:8b:71:9a:61:09:87:7b:38:60:60:15:66:31:82:c9:6e:fb:
         bc:af:61:9f:46:62:52:57:1e:90:ee:8e:17:89:59:4d:6c:fd:
         0e:db:07:80:7e:0c:cd:1f:2c:b1:97:b5:b6:9a:9f:12:f7:04:
         92:56:ab:68:8a:81:09:58:fe:8f:13:59:14:08:d1:95:1f:c2:
         8f:ee:c9:6a:ab:ee:2f:b9:79:c3:11:c9:87:2d:7e:d9:d5:a5:
         4d:d9:3e:c1:91:23:bd:9c:aa:73:8c:57:1a:9d:d1:6d:ef:49:
         bc:9a:bf:c4:e3:41:f5:9b:59:f8:25:3a:bd:00:25:4e:0f:34:
         d6:c3:31:0d:5c:de:54:3d:41:c1:d4:c8:a1:08:c0:bc:62:70:
         6c:52:c1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 20:17:32 2026 by rpki-client