Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          2zPkAwhd8ggQqW62s0OeqYgEMXOnXavFjWJbi3BKnGQ=
Subject key identifier:   F7:28:CD:5B:72:6F:4A:54:1A:C6:5C:93:38:A2:1D:2B:E0:AD:7D:C8
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       5A980D222F4D9946494961305FCD8659D6478CE4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa
Signing time:             Tue 03 Jun 2025 17:56:24 +0000
ROA not before:           Tue 03 Jun 2025 17:51:24 +0000
ROA not after:            Tue 02 Jun 2026 17:56:24 +0000
asID:                     7029
IP address blocks:        104.234.85.0/24 maxlen: 24
                          104.234.97.0/24 maxlen: 24
                          104.234.122.0/24 maxlen: 24
                          104.234.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 15:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:98:0d:22:2f:4d:99:46:49:49:61:30:5f:cd:86:59:d6:47:8c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  3 17:51:24 2025 GMT
            Not After : Jun  2 17:56:24 2026 GMT
        Subject: CN=F728CD5B726F4A541AC65C9338A21D2BE0AD7DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9f:59:a1:3b:6c:c8:d1:bd:9d:72:19:2d:6d:
                    38:d6:56:77:a7:1e:db:dd:97:2d:0a:22:d1:2e:08:
                    71:8c:66:bc:a4:59:36:5e:07:a6:14:1e:1e:20:b6:
                    bf:9d:55:03:73:ef:9b:f3:7e:10:a1:fb:a5:c9:cf:
                    20:53:6c:07:57:b2:f6:55:48:62:01:44:b6:c1:26:
                    92:9e:51:11:ac:e4:12:fe:98:50:be:88:67:0d:38:
                    96:92:a6:d2:4e:07:10:7c:33:3a:9b:ea:53:01:8b:
                    c4:04:04:5b:99:41:b4:28:69:05:94:9c:e7:55:39:
                    d7:5b:2e:f8:53:a7:98:52:48:a6:a3:87:65:10:e3:
                    1b:33:a5:61:19:96:68:0f:e5:93:49:66:fc:e5:db:
                    d9:be:56:0d:ba:72:15:cb:74:58:2e:86:1c:27:01:
                    c8:51:6e:80:3f:fb:2b:25:03:50:b1:bb:29:50:b6:
                    4f:b4:3f:6a:dd:d3:98:45:40:97:35:91:f2:18:2e:
                    0b:24:31:bb:27:b0:db:3a:f4:42:dd:11:f1:83:4c:
                    3a:1c:02:62:9a:c3:10:7b:7c:c9:e2:41:44:e5:cf:
                    ec:9c:17:4f:90:96:28:6f:01:e2:19:de:35:17:c2:
                    08:fb:25:d9:1e:e3:0f:30:eb:e8:ed:fa:57:15:e0:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:CD:5B:72:6F:4A:54:1A:C6:5C:93:38:A2:1D:2B:E0:AD:7D:C8
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.85.0/24
                  104.234.97.0/24
                  104.234.122.0/24
                  104.234.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:47:90:d4:b6:0f:16:24:58:52:5f:e7:8d:e0:48:7a:f6:16:
         5b:fa:b8:d1:af:16:06:3a:23:ec:8c:55:87:47:5d:a9:67:54:
         5d:e8:55:1b:b3:53:9f:99:97:c3:de:d5:f3:18:27:24:b5:3e:
         fe:0c:c7:0e:9d:a3:85:b9:0c:00:f7:b6:b7:5a:20:b6:41:9a:
         06:58:3e:0d:80:79:b0:ed:1d:e2:2a:00:18:64:34:a5:40:e4:
         f9:cf:76:99:62:7e:10:67:f7:fd:f1:b4:e2:de:eb:ad:a8:50:
         44:26:10:ca:c2:33:0b:9e:80:53:13:95:62:3b:3d:16:3b:a8:
         d1:3c:68:01:82:fc:5f:e0:25:cf:a9:65:2f:12:f6:a0:42:3a:
         10:7e:67:8d:f6:11:cf:b0:f1:31:8b:c2:b2:c6:0b:00:14:d4:
         f2:67:87:77:3b:20:1d:ff:0e:cd:e1:33:84:5f:c6:2a:cb:a1:
         44:33:b3:7f:77:7c:49:c8:c0:4b:41:43:b4:fb:5e:58:cf:50:
         43:f9:f8:08:4b:c7:cc:bb:d9:a0:c7:d9:72:2e:70:9e:fb:90:
         5f:c9:d1:8e:80:76:9f:36:81:26:75:aa:50:27:87:3e:eb:55:
         0d:cf:58:a2:5b:db:52:c8:8d:7c:14:fb:de:f8:1a:ab:6a:06:
         e9:aa:52:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:10:41 2025 by rpki-client