Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          nXWGi0Gz9bAB6osCnjfOKYyzlyUfJ+ZdE16gPK7uwbw=
Subject key identifier:   DD:DC:A3:36:7A:CD:4D:8B:6B:21:C5:D5:98:C5:4C:9D:99:6B:F9:9A
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       510224198D49E677D17DF0628B6608E557FED917
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7029.roa
Signing time:             Wed 08 Apr 2026 22:58:02 +0000
ROA not before:           Wed 08 Apr 2026 22:53:02 +0000
ROA not after:            Wed 07 Apr 2027 22:58:02 +0000
asID:                     7029
IP address blocks:        40.27.36.0/22 maxlen: 24
                          40.27.184.0/22 maxlen: 24
                          40.183.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:02:24:19:8d:49:e6:77:d1:7d:f0:62:8b:66:08:e5:57:fe:d9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr  8 22:53:02 2026 GMT
            Not After : Apr  7 22:58:02 2027 GMT
        Subject: CN=DDDCA3367ACD4D8B6B21C5D598C54C9D996BF99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:08:f6:8e:f8:24:cc:0e:56:c3:38:66:13:
                    04:77:87:c1:c0:5a:4c:40:25:2e:bc:26:68:d9:a1:
                    64:bc:ad:c6:24:23:2d:03:02:f5:23:b9:28:30:52:
                    f9:d6:16:35:cb:43:ab:c5:57:6e:9d:2d:c1:5b:30:
                    64:f9:e5:f0:67:59:76:08:7d:fe:4f:15:2a:63:63:
                    b9:62:d0:c5:73:ae:90:30:97:23:c2:16:c5:f5:6d:
                    bf:cc:fa:16:8c:92:e2:24:7e:7f:61:20:78:de:77:
                    44:29:7e:0c:23:2d:a2:b6:5f:0b:c0:eb:98:84:d3:
                    4b:e5:5b:94:8b:b4:19:b6:9c:dd:bc:5a:43:28:94:
                    83:26:0e:b1:ed:2b:88:6c:a1:19:30:00:38:1d:1d:
                    35:be:2a:8e:4d:70:19:d7:d0:85:5f:53:b5:69:00:
                    18:95:d8:0f:c6:1b:2b:62:59:08:8e:c1:21:48:de:
                    87:51:81:08:16:5f:05:ff:78:55:a2:54:0d:63:26:
                    27:d4:39:be:d8:e2:82:17:d4:6d:35:e1:6e:2f:7e:
                    fa:20:d6:b9:af:a2:f3:de:3e:e8:f5:11:51:a9:d8:
                    2f:f9:92:a7:0f:ef:e2:c5:85:b8:3c:8a:71:9e:cf:
                    c1:4a:c4:98:ad:41:07:f2:59:76:6b:5d:eb:35:69:
                    81:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DC:A3:36:7A:CD:4D:8B:6B:21:C5:D5:98:C5:4C:9D:99:6B:F9:9A
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.36.0/22
                  40.27.184.0/22
                  40.183.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:37:a9:a4:6d:f6:15:6e:a9:82:b4:2f:51:b9:3e:96:31:2a:
         7b:52:54:a5:e9:ad:44:32:89:9b:86:97:11:3b:5d:fa:62:d9:
         02:9a:0b:43:c5:d3:98:e4:55:fa:34:ae:a0:83:fd:e6:72:bf:
         67:82:7a:8c:ee:5d:bb:c4:36:2f:32:87:83:fc:ad:55:e1:2a:
         0d:e4:41:21:f9:1e:a6:e6:35:c8:99:99:d9:df:c2:dc:8f:69:
         42:93:e6:7a:55:37:8d:b1:46:8a:3d:f0:d1:63:8c:a7:55:bc:
         6f:53:64:74:54:b7:55:91:68:5a:5b:ea:a9:7d:66:83:f5:07:
         34:ef:f3:7e:61:9f:dd:49:61:f3:3d:f4:fa:c5:77:0b:db:3b:
         d4:d5:39:7b:08:90:ce:c9:11:70:79:c8:ba:0d:65:cb:d1:a4:
         78:6b:78:65:40:f1:f6:d0:1b:39:de:80:2b:b4:34:0c:b8:d3:
         86:d7:24:60:c4:63:96:6a:4e:d4:3b:69:f3:e1:94:d2:3c:c1:
         a7:4f:46:2e:30:14:22:f6:fa:5d:d2:d1:2a:89:d6:ac:cc:9c:
         f1:7e:18:61:ab:cd:a7:1e:c6:0b:df:d8:af:e1:c1:bd:03:40:
         f0:8f:6d:73:71:2a:c9:f1:39:47:61:bc:e2:8a:52:42:14:ac:
         ba:66:87:f7
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUUQIkGY1J5nfRffBii2YI5Vf+2RcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDA4MjI1MzAyWhcNMjcwNDA3MjI1ODAy
WjAzMTEwLwYDVQQDEyhERERDQTMzNjdBQ0Q0RDhCNkIyMUM1RDU5OEM1NEM5RDk5
NkJGOTlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriYI9o74JMwO
VsM4ZhMEd4fBwFpMQCUuvCZo2aFkvK3GJCMtAwL1I7koMFL51hY1y0OrxVdunS3B
WzBk+eXwZ1l2CH3+TxUqY2O5YtDFc66QMJcjwhbF9W2/zPoWjJLiJH5/YSB43ndE
KX4MIy2itl8LwOuYhNNL5VuUi7QZtpzdvFpDKJSDJg6x7SuIbKEZMAA4HR01viqO
TXAZ19CFX1O1aQAYldgPxhsrYlkIjsEhSN6HUYEIFl8F/3hVolQNYyYn1Dm+2OKC
F9RtNeFuL376INa5r6Lz3j7o9RFRqdgv+ZKnD+/ixYW4PIpxns/BSsSYrUEH8ll2
a13rNWmBpwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFN3cozZ6zU2LayHF1ZjFTJ2Z
a/maMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzcwMjkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI
KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBAIoGyQDBAIoG7gDBAEot8owDQYJKoZI
hvcNAQELBQADggEBAA83qaRt9hVuqYK0L1G5PpYxKntSVKXprUQyiZuGlxE7Xfpi
2QKaC0PF05jkVfo0rqCD/eZyv2eCeozuXbvENi8yh4P8rVXhKg3kQSH5HqbmNciZ
mdnfwtyPaUKT5npVN42xRoo98NFjjKdVvG9TZHRUt1WRaFpb6ql9ZoP1BzTv835h
n91JYfM99PrFdwvbO9TVOXsIkM7JEXB5yLoNZcvRpHhreGVA8fbQGznegCu0NAy4
04bXJGDEY5ZqTtQ7afPhlNI8wadPRi4wFCL2+l3S0SqJ1qzMnPF+GGGrzacexgvf
2K/hwb0DQPCPbXNxKsnxOUdhvOKKUkIUrLpmh/c=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:18:36 2026 by rpki-client