Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
File:                     AS29802.roa (raw, json)
Hash identifier:          mq6fq38p3A0DiCCEOsVPbMilQvSiAiYw9i7XOpCxCO8=
Subject key identifier:   AA:F6:9B:5C:40:7A:25:AD:DC:C3:FC:20:51:AB:A7:8C:83:D0:8F:7B
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7DBBBD6D2D35C0C888DC931787700FB27C6A07D1
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa
Signing time:             Wed 08 May 2024 16:55:34 +0000
ROA not before:           Wed 08 May 2024 16:50:34 +0000
ROA not after:            Wed 07 May 2025 16:55:34 +0000
asID:                     29802
IP address blocks:        157.254.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 08:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bb:bd:6d:2d:35:c0:c8:88:dc:93:17:87:70:0f:b2:7c:6a:07:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May  8 16:50:34 2024 GMT
            Not After : May  7 16:55:34 2025 GMT
        Subject: CN=AAF69B5C407A25ADDCC3FC2051ABA78C83D08F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:0f:5f:05:eb:05:b6:ac:27:60:4d:30:9c:
                    d4:64:79:4b:49:06:d1:02:19:6b:f3:49:e3:4b:31:
                    b7:19:cb:3f:62:b3:46:c1:ac:e0:97:5d:c6:88:ba:
                    9f:9d:54:6c:42:d5:9f:c7:13:6e:a9:ea:9d:05:1b:
                    30:8c:b9:e6:c8:1e:df:1b:cf:e9:f3:26:b3:97:3a:
                    6d:13:70:68:88:9e:da:ea:31:02:4c:f9:0d:4f:e5:
                    ba:cc:8b:0f:52:13:39:42:6e:02:da:9d:d3:25:c3:
                    09:b6:92:a5:e3:10:66:7e:b8:7e:02:8a:02:fe:00:
                    58:e2:5c:3b:15:c5:24:68:1c:9a:ee:45:95:1d:3a:
                    08:25:fb:62:61:65:c6:c1:8e:b9:db:b1:9d:b2:7c:
                    32:82:87:2f:3f:05:01:0c:50:37:2a:95:16:b3:c4:
                    79:37:5f:49:2b:09:76:a3:5a:40:7d:59:78:50:31:
                    ae:c9:24:46:81:24:e1:09:69:ca:4d:d2:0e:36:07:
                    d0:58:28:42:9b:e4:c9:b3:67:0c:d9:e1:14:24:0f:
                    ae:73:54:54:6a:2a:34:df:6f:ff:fb:1c:9d:1b:9e:
                    39:71:0a:55:66:8b:3f:d8:95:b2:90:0d:df:43:ab:
                    9b:ca:1c:a6:a2:35:82:91:b2:38:b1:38:cb:8b:7e:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F6:9B:5C:40:7A:25:AD:DC:C3:FC:20:51:AB:A7:8C:83:D0:8F:7B
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS29802.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:67:df:b3:1c:ae:fa:83:24:21:e2:aa:fe:0f:20:96:25:
         3b:55:c2:bb:7d:c5:e2:4f:c1:81:8d:65:08:c4:11:49:73:b2:
         57:b6:a7:14:a5:2f:04:c1:ce:08:37:bc:61:0b:2b:de:df:93:
         0f:dc:96:14:ff:f3:06:6b:55:ef:97:59:22:81:e2:fa:b3:db:
         ba:66:a0:34:10:34:31:74:72:43:17:e7:a5:26:41:8f:49:3c:
         da:29:4f:44:ec:4f:b6:bd:82:10:2b:66:76:f6:ec:ba:b5:79:
         47:c4:c5:12:4a:ed:93:e6:8a:2d:05:5e:4b:3c:d6:23:aa:37:
         2e:bd:e3:5f:0f:fd:74:1e:a8:61:2d:e1:45:5f:f3:f1:72:34:
         67:6a:d5:bb:89:4a:a0:68:be:22:3c:ad:74:2c:5c:35:b8:ee:
         1d:ca:c2:27:54:b3:eb:c6:98:ca:71:e7:5a:8d:28:a9:c4:dc:
         95:27:c5:e4:00:bc:b9:c8:a4:71:d3:c6:12:2e:14:ad:4f:ba:
         61:8f:ae:09:e3:11:39:47:0b:bb:57:52:b3:b7:be:f0:62:c0:
         af:ba:1f:61:74:f7:9a:7d:7f:5d:96:09:27:33:d5:5c:9a:9a:
         b3:c5:85:75:d1:17:2d:80:8d:4b:d5:ae:dd:af:19:b6:a2:de:
         24:5f:3b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 05:59:19 2024 by rpki-client on console-fra.rpki-client.org