Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          L+zxCEdXMmm5aklT7Qhcr+ILHP5p1kOwsVPV2bTDchk=
Subject key identifier:   6E:61:46:53:85:93:2D:0B:E8:72:9D:66:D7:7B:30:0A:DB:A6:B0:04
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       6D1EFE2F0620AC498CEF3F94212A1DB88779DDA8
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa
Signing time:             Mon 12 Oct 2026 23:36:20 +0000
ROA not before:           Mon 12 Oct 2026 23:31:20 +0000
ROA not after:            Mon 11 Oct 2027 23:36:20 +0000
asID:                     7029
IP address blocks:        104.234.73.0/24 maxlen: 24
                          104.234.83.0/24 maxlen: 24
                          104.234.85.0/24 maxlen: 24
                          104.234.97.0/24 maxlen: 24
                          104.234.122.0/24 maxlen: 24
                          104.234.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 03:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1e:fe:2f:06:20:ac:49:8c:ef:3f:94:21:2a:1d:b8:87:79:dd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 12 23:31:20 2026 GMT
            Not After : Oct 11 23:36:20 2027 GMT
        Subject: CN=6E61465385932D0BE8729D66D77B300ADBA6B004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:da:96:7f:f5:da:3e:67:c7:b3:19:8d:32:
                    35:6e:55:06:73:fe:87:2e:73:fa:a5:b5:d2:a8:f7:
                    df:b7:6f:45:a4:1c:4f:cb:e2:28:1e:41:4f:a9:03:
                    28:80:92:be:11:34:e6:2d:be:31:8c:f0:a9:ad:03:
                    d5:4c:6a:c4:8e:bb:3c:4d:51:c2:6c:79:78:34:a5:
                    4f:ed:e4:23:6e:ac:c4:53:4d:dd:f7:c4:58:3c:46:
                    29:30:0f:de:63:ad:62:4f:dc:60:a4:cc:27:35:fa:
                    71:70:fc:4e:32:e4:e9:47:8f:d1:16:6c:7f:01:5e:
                    49:74:6a:8a:97:59:a2:13:8c:45:5f:e6:e7:0a:3d:
                    d2:3d:3f:ed:46:21:6d:0a:d1:60:d9:e0:64:3f:76:
                    c9:95:9f:2c:21:f5:fb:bd:3d:d7:69:67:60:aa:36:
                    0c:6d:b7:a6:2a:c3:f9:68:43:e3:ef:60:3b:1f:84:
                    71:b0:cf:f2:ff:66:74:c2:03:50:00:0b:b7:a7:cb:
                    76:81:20:51:34:0d:b4:ce:d3:b7:6f:c5:af:4b:0b:
                    1a:ca:28:7a:af:6e:46:b6:45:e1:81:72:71:1a:01:
                    3a:52:a6:57:2e:17:84:a2:bc:51:3d:1f:2d:32:15:
                    63:ba:8a:79:43:67:6e:be:f8:1b:f5:30:ef:7b:6b:
                    4e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:61:46:53:85:93:2D:0B:E8:72:9D:66:D7:7B:30:0A:DB:A6:B0:04
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.73.0/24
                  104.234.83.0/24
                  104.234.85.0/24
                  104.234.97.0/24
                  104.234.122.0/24
                  104.234.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:07:e0:49:23:09:90:fb:d0:aa:1a:c7:b9:99:12:43:12:1e:
         b8:53:1d:ea:bf:37:55:83:66:3e:2c:49:c0:20:01:8f:8a:b5:
         3e:c1:86:6b:4b:e1:d3:6f:62:56:d2:9a:a6:34:a9:ae:38:86:
         2d:b6:2c:b6:a2:3d:99:6d:d6:9a:b1:6d:86:20:fc:85:6a:f0:
         f9:fe:72:b4:59:cf:ea:e1:36:87:8d:cb:dd:25:5c:e4:f4:78:
         c9:45:2b:c4:19:61:33:0d:31:c6:71:05:ca:db:40:bd:80:fd:
         cd:51:25:71:72:08:59:b4:6e:90:fe:18:51:00:8b:5e:80:28:
         df:12:9a:8a:52:de:48:22:28:c6:05:76:30:f9:3d:09:07:95:
         9e:94:bd:82:67:16:6b:da:65:cd:5c:3a:2d:59:ee:c3:7a:f7:
         c9:83:28:58:a0:2e:17:e5:05:dd:ae:b5:23:cd:38:a4:e3:5d:
         b2:d3:e0:07:60:70:a3:c5:3a:d7:a6:2e:96:d5:51:54:99:a5:
         7a:b1:75:2d:22:d8:6d:6d:d9:c1:a9:19:c3:7f:d3:07:df:d3:
         1f:88:28:22:c7:08:66:0c:70:65:0f:4e:f4:da:98:d0:f7:50:
         d6:59:84:4b:42:70:84:9c:10:5c:0c:9d:09:5e:01:72:df:bb:
         76:13:c1:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:51:14 2026 by rpki-client