Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          s5PkiTlsa2mQzPk+Fi0riW4DO8UEldWS/QbLRcDVrKs=
Subject key identifier:   73:4E:81:87:4C:E2:92:C1:D4:D8:BC:95:2B:8D:D9:D2:45:E3:A2:60
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       795EB5CB8085770B5F1E680FBA818E9197B4DA12
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
Signing time:             Wed 07 May 2025 13:17:24 +0000
ROA not before:           Wed 07 May 2025 13:12:24 +0000
ROA not after:            Wed 06 May 2026 13:17:24 +0000
asID:                     29802
IP address blocks:        157.254.158.0/24 maxlen: 24
                          157.254.182.0/24 maxlen: 24
                          157.254.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5e:b5:cb:80:85:77:0b:5f:1e:68:0f:ba:81:8e:91:97:b4:da:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  7 13:12:24 2025 GMT
            Not After : May  6 13:17:24 2026 GMT
        Subject: CN=734E81874CE292C1D4D8BC952B8DD9D245E3A260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:14:45:f4:2e:cc:d5:cb:62:7b:0d:59:5c:b0:
                    89:7c:a8:ad:ca:52:4b:d5:9e:32:14:d9:72:07:b1:
                    c4:78:8e:ac:cd:f9:fd:5f:c2:3f:97:43:eb:76:0e:
                    13:fc:95:57:eb:b7:59:f8:3b:4e:74:09:1c:26:0c:
                    95:f1:87:5b:8e:48:59:2d:d9:74:c2:44:b7:88:82:
                    8e:38:85:0f:a3:a3:f8:e8:e2:6c:b1:df:4c:f2:a9:
                    d3:31:3e:c2:15:f6:e5:f5:ac:75:87:bb:66:d5:e8:
                    00:c7:a8:3e:0d:28:21:6f:8b:a9:84:9d:b2:c7:99:
                    0c:13:05:d0:45:d1:c9:58:d3:2c:b7:18:fd:ff:3b:
                    b6:2c:65:2e:e7:f8:24:b2:e1:f5:d9:c6:89:1a:5c:
                    67:1a:ce:6c:3a:c4:52:02:6e:9e:4c:23:2c:73:5b:
                    56:47:36:4f:e7:91:90:5d:b0:4b:17:d2:00:2a:e4:
                    e3:32:8b:47:e1:3f:91:20:e2:6d:ca:53:1f:c0:a7:
                    11:31:02:30:06:8b:ba:e5:35:7f:3e:aa:dd:c4:e2:
                    e4:2e:07:8c:27:32:d6:da:a9:c1:ac:67:20:d1:f2:
                    1d:cd:3b:93:4a:4f:b3:d5:f7:ea:5f:1b:30:b8:96:
                    08:d2:65:95:c1:0f:bb:8c:85:ad:ee:71:2b:f1:c4:
                    e2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4E:81:87:4C:E2:92:C1:D4:D8:BC:95:2B:8D:D9:D2:45:E3:A2:60
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.158.0/24
                  157.254.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:49:f5:43:bf:1c:0b:2e:6e:21:f3:e7:7e:18:37:8f:42:48:
         64:e1:19:e7:c3:e7:21:1a:26:02:6a:07:07:99:b3:55:bd:1b:
         0e:54:09:b8:a1:f5:56:18:fe:03:72:e4:e1:95:75:b3:11:7f:
         98:39:11:4c:00:03:4d:c3:31:ba:df:4b:fe:42:c9:6b:1a:2a:
         6d:21:85:ee:dd:d0:bf:25:5d:51:64:19:2e:56:fa:f1:ab:45:
         07:bf:67:ad:41:63:1f:02:79:91:9b:d2:cd:bd:b1:07:b4:61:
         c3:90:e1:73:e7:16:71:56:72:a3:77:14:9d:b6:b8:8a:9d:c1:
         2f:04:3b:f5:f3:4a:fb:8b:6b:46:23:03:4f:34:19:83:ca:66:
         4a:34:d0:94:bc:34:bf:9a:e2:1f:d7:e3:e7:88:9d:1d:46:19:
         c9:50:eb:45:ed:30:8e:b3:7f:98:4c:07:1d:c1:14:1d:10:5d:
         9b:75:12:70:87:17:1b:59:ed:e8:56:2d:82:35:f9:aa:c9:37:
         fa:1a:9f:05:4f:6b:28:a8:a0:16:ba:db:29:f0:69:8c:a3:43:
         ad:0e:85:4f:e4:d9:78:d0:50:8a:09:79:c4:db:e5:c6:2f:91:
         ce:2d:74:8c:18:d7:61:7c:7b:ce:f1:72:d0:fd:73:e2:a7:37:
         a2:91:a7:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIUeV61y4CFdwtfHmgPuoGOkZe02hIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNTA3MTMxMjI0WhcNMjYwNTA2MTMxNzI0
WjAzMTEwLwYDVQQDEyg3MzRFODE4NzRDRTI5MkMxRDREOEJDOTUyQjhERDlEMjQ1
RTNBMjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hRF9C7M1cti
ew1ZXLCJfKitylJL1Z4yFNlyB7HEeI6szfn9X8I/l0Prdg4T/JVX67dZ+DtOdAkc
JgyV8YdbjkhZLdl0wkS3iIKOOIUPo6P46OJssd9M8qnTMT7CFfbl9ax1h7tm1egA
x6g+DSghb4uphJ2yx5kMEwXQRdHJWNMstxj9/zu2LGUu5/gksuH12caJGlxnGs5s
OsRSAm6eTCMsc1tWRzZP55GQXbBLF9IAKuTjMotH4T+RIOJtylMfwKcRMQIwBou6
5TV/PqrdxOLkLgeMJzLW2qnBrGcg0fIdzTuTSk+z1ffqXxswuJYI0mWVwQ+7jIWt
7nEr8cTiwQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFHNOgYdM4pLB1Ni8lSuN2dJF
46JgMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzI5ODAyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnf6eAwQBnf62MA0GCSqGSIb3DQEB
CwUAA4IBAQAISfVDvxwLLm4h8+d+GDePQkhk4Rnnw+chGiYCagcHmbNVvRsOVAm4
ofVWGP4DcuThlXWzEX+YORFMAANNwzG630v+QslrGiptIYXu3dC/JV1RZBkuVvrx
q0UHv2etQWMfAnmRm9LNvbEHtGHDkOFz5xZxVnKjdxSdtriKncEvBDv180r7i2tG
IwNPNBmDymZKNNCUvDS/muIf1+PniJ0dRhnJUOtF7TCOs3+YTAcdwRQdEF2bdRJw
hxcbWe3oVi2CNfmqyTf6Gp8FT2soqKAWutsp8GmMo0OtDoVP5Nl40FCKCXnE2+XG
L5HOLXSMGNdhfHvO8XLQ/XPipzeikaeg
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:02:28 2025 by rpki-client