Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          SAR1s33YUvhB1eBJbQqeGxr+LpCMt+NAOe6YLhqVKds=
Subject key identifier:   B5:5E:40:BC:7B:8B:A2:4F:EC:47:9F:09:04:39:10:66:A2:9F:3A:32
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       10F59D346B3B3E12450C7B1B718F3107A0E98E7C
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa
Signing time:             Wed 15 Apr 2026 18:42:51 +0000
ROA not before:           Wed 15 Apr 2026 18:37:51 +0000
ROA not after:            Wed 14 Apr 2027 18:42:51 +0000
asID:                     7029
IP address blocks:        23.94.90.0/24 maxlen: 24
                          23.94.106.0/24 maxlen: 24
                          23.94.109.0/24 maxlen: 24
                          23.94.135.0/24 maxlen: 24
                          23.95.179.0/24 maxlen: 24
                          67.210.108.0/24 maxlen: 24
                          67.210.109.0/24 maxlen: 24
                          89.35.93.0/24 maxlen: 24
                          89.35.94.0/24 maxlen: 24
                          89.35.95.0/24 maxlen: 24
                          192.228.116.0/24 maxlen: 24
                          198.23.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f5:9d:34:6b:3b:3e:12:45:0c:7b:1b:71:8f:31:07:a0:e9:8e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 15 18:37:51 2026 GMT
            Not After : Apr 14 18:42:51 2027 GMT
        Subject: CN=B55E40BC7B8BA24FEC479F0904391066A29F3A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:c3:77:d7:14:6a:ea:12:5b:63:b1:3e:d4:
                    38:6b:85:fc:80:65:e1:ae:a1:a3:98:59:a5:af:50:
                    ed:54:53:07:2e:0a:a1:60:c7:5b:8e:3a:83:db:a4:
                    c0:03:c0:14:a6:36:67:6a:c4:60:6e:da:27:9d:14:
                    44:b6:b9:13:ad:14:74:61:ee:15:5f:ad:40:cd:e4:
                    f2:ff:03:c1:44:dc:31:66:50:e6:58:7b:24:3b:e6:
                    8e:31:ec:d5:bf:fe:8f:29:67:ca:08:04:c2:a3:19:
                    30:e0:92:a2:7b:6a:fd:ec:1c:52:4c:b1:33:26:51:
                    11:11:13:05:ad:61:e3:62:40:93:79:78:6f:9a:90:
                    55:2a:71:a3:6e:9e:24:65:20:84:05:44:4d:cd:99:
                    08:9a:c8:2f:00:76:d1:40:90:4f:2d:ba:ce:ab:d8:
                    08:63:47:d1:57:46:36:99:29:04:6e:5d:bf:ed:7e:
                    16:99:80:2d:35:7d:10:c8:c9:44:85:a3:18:65:08:
                    3f:eb:57:4e:6c:ac:e0:eb:89:0a:e3:9b:82:be:5e:
                    76:16:38:fc:c7:e2:a8:10:b8:9f:bb:6e:de:9e:a9:
                    af:56:df:32:fd:62:ff:1a:26:e7:18:0e:de:0c:78:
                    40:41:65:aa:46:66:af:d5:12:14:d3:06:5d:ce:6f:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5E:40:BC:7B:8B:A2:4F:EC:47:9F:09:04:39:10:66:A2:9F:3A:32
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.90.0/24
                  23.94.106.0/24
                  23.94.109.0/24
                  23.94.135.0/24
                  23.95.179.0/24
                  67.210.108.0/23
                  89.35.93.0-89.35.95.255
                  192.228.116.0/24
                  198.23.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:78:fd:a7:5d:27:7a:c5:ed:e2:b8:22:bf:76:8e:55:06:41:
         d0:48:2e:1c:5d:db:d5:4a:30:70:05:4f:e8:5e:08:de:35:98:
         f5:2f:12:ef:fe:e2:5a:be:ec:6a:de:fe:8d:10:51:66:be:d1:
         2a:ad:bf:6c:e8:a1:94:ac:e1:57:c9:49:a9:c3:ab:d9:72:e7:
         2f:a3:63:26:2a:74:12:45:f2:fa:8c:5c:48:c0:7e:b0:d5:5c:
         c7:71:94:92:52:5f:49:f7:99:89:54:be:0d:1a:7d:cd:27:55:
         32:17:cb:54:71:ca:83:b9:9e:18:a2:e6:0e:95:5b:59:24:63:
         e4:aa:f1:a6:61:6d:f1:00:32:7c:34:29:dd:5d:7f:ae:b7:27:
         ce:d4:9c:73:1b:57:f0:aa:b7:23:ef:fe:cb:49:34:e4:93:9c:
         8f:f9:6a:ea:1e:37:df:d6:bf:8b:81:58:e9:4b:fc:1b:42:63:
         7c:cb:62:6a:45:35:ad:96:64:22:29:80:19:85:a0:47:91:4a:
         dd:d0:5f:07:da:25:1f:1b:a2:c6:61:86:a7:a7:94:e5:65:98:
         37:3f:d2:7d:9b:0b:32:44:de:5c:ed:0e:7e:13:0b:da:e3:a0:
         dd:9c:b2:84:7e:a9:ed:a1:72:86:10:a8:b3:60:63:41:bf:29:
         6c:13:f2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:17:09 2026 by rpki-client