Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          sxS5+wrV04ToBk49Nd9yfKBR6YViKLTN6GP12zicZe0=
Subject key identifier:   0E:EC:DA:E6:AE:7F:D7:4A:28:4A:96:1E:34:01:5E:18:47:66:42:43
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3029F16AC270D277B95382EE07D1F676A4F3013B
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7029.roa
Signing time:             Sun 26 Oct 2025 00:10:12 +0000
ROA not before:           Sun 26 Oct 2025 00:05:12 +0000
ROA not after:            Sun 25 Oct 2026 00:10:12 +0000
asID:                     7029
IP address blocks:        40.27.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:29:f1:6a:c2:70:d2:77:b9:53:82:ee:07:d1:f6:76:a4:f3:01:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct 26 00:05:12 2025 GMT
            Not After : Oct 25 00:10:12 2026 GMT
        Subject: CN=0EECDAE6AE7FD74A284A961E34015E1847664243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:1f:82:c4:c4:9d:15:11:82:c7:7a:c2:fc:
                    36:8c:1f:04:22:af:7d:6e:b6:5f:1a:bc:b4:54:af:
                    1a:c7:1f:02:c4:f6:da:d9:bf:3f:71:db:bb:7c:17:
                    e5:94:f7:fd:b5:2d:34:f1:bc:80:cf:09:67:8a:e4:
                    8a:af:86:a3:d9:35:1d:e8:b8:b3:a0:74:2d:17:1c:
                    19:be:04:f5:14:4a:d7:36:25:bb:77:11:72:9f:90:
                    f5:bd:7a:3a:a3:aa:e3:3d:a9:8d:2c:89:d7:7a:3d:
                    6a:0e:e7:ba:0b:85:44:a0:7e:d0:a1:bd:52:ac:8e:
                    bb:a9:1c:cb:73:d5:cd:bb:de:52:7f:3f:21:28:3d:
                    6d:2c:30:79:69:f7:38:b2:fe:bb:54:60:92:ca:09:
                    00:75:eb:ad:8d:41:0b:bf:b1:6a:7e:a4:d5:33:3d:
                    ea:b8:50:47:cd:da:0b:9e:6c:19:81:60:d5:8a:d3:
                    1e:2d:2c:96:fa:49:6b:15:63:86:d3:b5:9c:34:5a:
                    f6:8d:bc:ab:eb:33:f3:48:8b:3a:40:10:d9:f2:c9:
                    f4:54:70:45:c0:a6:6b:fc:f5:e8:2b:e7:9b:0f:7f:
                    97:d0:e0:18:bf:a2:ae:3c:64:a5:74:ec:a9:e1:89:
                    c0:28:91:1f:2f:4c:6a:05:8b:45:17:a3:d3:50:1f:
                    93:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EC:DA:E6:AE:7F:D7:4A:28:4A:96:1E:34:01:5E:18:47:66:42:43
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:bb:3f:2f:02:b1:85:9e:34:0a:3a:7e:1e:67:3f:f6:2f:
         dc:77:60:03:01:fc:40:db:c1:04:d2:03:a9:64:59:8f:aa:2c:
         19:a0:d6:3a:25:4a:63:42:b2:12:3b:f7:0b:83:4b:64:31:e5:
         db:0e:3f:94:38:ce:49:ff:3e:48:04:31:42:13:4e:8e:76:3f:
         72:98:0f:27:00:bf:94:50:88:4b:14:eb:bb:3a:2b:d7:42:4f:
         7f:5c:e5:24:b7:3a:d1:6c:ac:9b:9d:14:92:e9:71:72:bd:10:
         a3:a3:bd:0e:99:26:be:17:51:9b:7b:11:d3:89:c0:60:e1:8f:
         3d:b9:29:a3:b8:5a:04:7d:f0:cd:0f:4a:9e:fa:1e:e3:2d:9f:
         23:a2:7a:27:b7:56:04:f5:6b:cc:47:76:27:43:2d:28:55:8e:
         bc:e5:75:f7:ec:80:17:ec:c4:06:c6:00:db:c7:1d:6a:24:68:
         01:7d:33:46:fc:64:e1:62:d6:df:3f:a2:03:7f:ec:ad:03:fb:
         d6:f8:85:30:85:e7:b0:b3:ca:b3:41:27:47:35:a8:08:33:e2:
         81:bf:2c:7f:e9:42:e9:ad:0f:21:80:65:9e:b6:59:64:42:0a:
         e3:42:b9:ce:dd:ef:bf:81:c7:b8:e4:a4:25:30:54:37:bc:d4:
         c9:53:72:8d
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUMCnxasJw0ne5U4LuB9H2dqTzATswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMDI2MDAwNTEyWhcNMjYxMDI1MDAxMDEy
WjAzMTEwLwYDVQQDEygwRUVDREFFNkFFN0ZENzRBMjg0QTk2MUUzNDAxNUUxODQ3
NjY0MjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq28fgsTEnRUR
gsd6wvw2jB8EIq99brZfGry0VK8axx8CxPba2b8/cdu7fBfllPf9tS008byAzwln
iuSKr4aj2TUd6LizoHQtFxwZvgT1FErXNiW7dxFyn5D1vXo6o6rjPamNLInXej1q
Due6C4VEoH7Qob1SrI67qRzLc9XNu95Sfz8hKD1tLDB5afc4sv67VGCSygkAdeut
jUELv7FqfqTVMz3quFBHzdoLnmwZgWDVitMeLSyW+klrFWOG07WcNFr2jbyr6zPz
SIs6QBDZ8sn0VHBFwKZr/PXoK+ebD3+X0OAYv6KuPGSldOyp4YnAKJEfL0xqBYtF
F6PTUB+TLwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFA7s2uauf9dKKEqWHjQBXhhH
ZkJDMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMoGzgwDQYJKoZIhvcNAQELBQADggEB
AI4Tuz8vArGFnjQKOn4eZz/2L9x3YAMB/EDbwQTSA6lkWY+qLBmg1jolSmNCshI7
9wuDS2Qx5dsOP5Q4zkn/PkgEMUITTo52P3KYDycAv5RQiEsU67s6K9dCT39c5SS3
OtFsrJudFJLpcXK9EKOjvQ6ZJr4XUZt7EdOJwGDhjz25KaO4WgR98M0PSp76HuMt
nyOieie3VgT1a8xHdidDLShVjrzldffsgBfsxAbGANvHHWokaAF9M0b8ZOFi1t8/
ogN/7K0D+9b4hTCF57CzyrNBJ0c1qAgz4oG/LH/pQumtDyGAZZ62WWRCCuNCuc7d
77+Bx7jkpCUwVDe81MlTco0=
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:22:29 2025 by rpki-client