Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          ZH7mOkYnLgHChJWr84OGaekWVQmKz2TdpIXK1DYZivs=
Subject key identifier:   88:41:7F:35:55:2B:1A:89:17:72:08:BA:F2:D4:6B:B9:F3:93:65:73
Certificate issuer:       /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial:       299C41F7C6B92BBA61ED999ACAD0C0B5746D7E97
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS7029.roa
Signing time:             Thu 29 Oct 2026 17:12:34 +0000
ROA not before:           Thu 29 Oct 2026 17:07:34 +0000
ROA not after:            Thu 28 Oct 2027 17:12:34 +0000
asID:                     7029
IP address blocks:        199.235.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
                          rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 09:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9c:41:f7:c6:b9:2b:ba:61:ed:99:9a:ca:d0:c0:b5:74:6d:7e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
        Validity
            Not Before: Oct 29 17:07:34 2026 GMT
            Not After : Oct 28 17:12:34 2027 GMT
        Subject: CN=88417F35552B1A89177208BAF2D46BB9F3936573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:7e:6c:d9:40:b0:f4:ef:06:42:0c:25:22:
                    5c:a8:01:f2:21:32:63:7f:e4:2e:bf:9f:8c:f0:be:
                    ab:14:bf:be:a5:31:8a:3a:5d:b5:a9:cd:04:61:b6:
                    99:36:cd:fb:88:2f:c1:75:4a:5e:ed:56:ad:cd:df:
                    cd:57:d9:01:9f:3c:12:45:e1:0f:6e:b5:c9:87:52:
                    9f:c0:a0:ea:8a:de:80:ea:7e:4f:28:a2:43:4f:b3:
                    3a:e0:c0:29:31:c8:76:73:4a:4a:d0:ca:94:d1:87:
                    f8:18:21:88:8b:93:08:e0:80:14:48:8f:d8:23:de:
                    82:5b:51:64:2d:d1:26:e6:8d:d1:d7:49:94:9b:c5:
                    a5:5c:9d:5b:08:e4:37:97:9d:56:c1:e1:e0:16:6d:
                    3d:25:7e:12:07:37:98:ec:dc:1e:ba:19:2a:8f:58:
                    2e:30:60:44:c7:7f:3a:5b:5b:f6:01:b7:f0:bd:e6:
                    2f:e0:6b:ea:1c:77:0a:17:16:07:2a:0b:d9:cc:01:
                    dc:73:f9:a5:38:c6:0b:6a:8b:74:78:59:e9:b7:d0:
                    dd:0b:39:7e:27:8c:f7:57:4f:4d:f7:91:6c:08:01:
                    3e:3f:3b:35:08:84:4b:20:dd:a1:7a:0f:f6:44:89:
                    84:a8:56:11:e9:a4:af:9a:41:bc:93:10:89:58:e7:
                    b2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:41:7F:35:55:2B:1A:89:17:72:08:BA:F2:D4:6B:B9:F3:93:65:73
            X509v3 Authority Key Identifier:
                keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         21:95:24:a7:9e:12:95:77:d5:79:76:d4:d3:ce:02:37:91:d0:
         21:f2:fe:6a:c9:5e:ef:79:b8:3a:03:93:ca:fa:3f:85:17:c2:
         4e:6f:c6:05:e9:46:3e:63:11:f3:e4:9b:82:8c:31:77:fa:71:
         be:69:0c:43:be:30:fc:76:84:4e:b8:bd:77:aa:8b:ef:c3:fe:
         b0:10:92:44:37:c1:ae:0d:96:0a:77:f2:55:cb:a2:e6:70:81:
         f5:73:7e:4e:3a:b1:a6:76:31:c6:45:2e:47:17:b2:d3:3a:1b:
         41:64:36:a4:04:37:10:d1:1c:e5:e0:cf:9b:37:2c:7f:e1:ce:
         e9:fb:17:18:95:05:32:96:c7:ca:df:fd:3d:3b:40:a8:cc:6b:
         68:43:63:d7:5d:24:7d:db:01:60:58:7a:19:49:e5:34:80:76:
         ac:a3:c9:3d:8c:93:e5:a5:e1:27:dd:2b:02:26:4c:8e:b7:38:
         2e:51:b6:62:02:d8:6d:f9:4d:ec:dc:ee:cf:dd:9c:8d:2f:c7:
         d5:d6:1f:13:d1:7c:e2:d8:9e:52:64:22:44:65:90:38:4e:22:
         f7:ff:96:f8:1a:49:aa:00:dc:35:83:1b:1a:4f:7c:e3:24:d7:
         3c:6f:89:9a:13:e4:46:1d:19:de:8c:79:8b:b4:b0:ac:b2:78:
         57:e2:de:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:08:50 2026 by rpki-client