Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          fz18dNt+JsxAUBHr5y9xvP4iRjV8RjmFbTnAHC81BvU=
Subject key identifier:   4E:62:2E:8D:41:CC:67:D3:E6:3B:72:84:55:D9:96:7C:31:4B:C3:BC
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1A6371A5CEAE58989CA1E9D9A850045DC07901DB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa
Signing time:             Fri 28 Mar 2025 00:01:56 +0000
ROA not before:           Thu 27 Mar 2025 23:56:56 +0000
ROA not after:            Fri 27 Mar 2026 00:01:56 +0000
asID:                     7029
IP address blocks:        89.35.93.0/24 maxlen: 24
                          89.35.94.0/24 maxlen: 24
                          89.35.95.0/24 maxlen: 24
                          162.213.1.0/24 maxlen: 24
                          208.76.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:63:71:a5:ce:ae:58:98:9c:a1:e9:d9:a8:50:04:5d:c0:79:01:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 27 23:56:56 2025 GMT
            Not After : Mar 27 00:01:56 2026 GMT
        Subject: CN=4E622E8D41CC67D3E63B728455D9967C314BC3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:8a:06:ba:0e:99:f0:81:43:77:c9:4e:e6:
                    04:30:4a:ba:ef:64:2f:4e:9c:86:fb:4a:7e:48:1d:
                    6b:39:0a:a8:6a:b0:80:fb:f6:a5:ef:b7:03:67:f1:
                    49:24:49:bd:70:87:2a:36:5a:bc:04:3f:e6:46:f2:
                    2e:c7:6c:48:77:94:95:7e:e9:74:4f:a6:fa:01:ab:
                    2a:df:d1:93:cc:f6:81:7f:c2:fb:7c:4f:92:f7:13:
                    2d:f3:3b:39:26:11:83:4e:48:c1:b3:30:54:af:63:
                    cc:54:93:79:36:76:13:3c:45:f5:e9:00:fd:60:49:
                    6a:fc:b2:c4:14:51:5f:0f:06:52:5a:0d:2c:32:f0:
                    a4:06:fc:90:c8:7e:b3:a0:d7:3b:77:3e:c8:8a:da:
                    e1:88:c0:9d:6f:8f:79:ed:f3:6e:b5:b4:05:d1:cd:
                    0d:fc:a8:19:b7:c8:70:99:f6:21:6a:68:46:c0:83:
                    08:09:5a:df:95:96:a0:12:9e:38:96:ee:53:18:58:
                    3a:a9:82:9d:c5:0f:74:c7:77:b8:04:cd:c1:af:1c:
                    a9:0b:41:32:dc:fd:73:23:92:36:40:28:90:22:02:
                    69:2c:01:54:bd:44:92:7a:25:29:72:a1:79:e1:82:
                    14:08:26:fe:da:ee:66:13:fa:c7:76:e1:55:e3:d6:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:62:2E:8D:41:CC:67:D3:E6:3B:72:84:55:D9:96:7C:31:4B:C3:BC
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.93.0-89.35.95.255
                  162.213.1.0/24
                  208.76.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:0f:30:20:80:52:02:47:b6:ad:07:06:67:24:ff:11:7a:18:
         3b:e7:04:21:5f:aa:ea:df:60:de:ae:61:76:3b:73:06:c1:91:
         b4:5f:2b:08:ef:08:18:47:68:2d:13:b4:ff:dd:38:05:3f:e5:
         1d:0a:00:01:3a:0e:3e:5d:7b:63:31:80:3c:4b:72:49:ab:4f:
         c5:aa:fe:3e:5a:bf:35:72:66:c1:b5:6f:02:85:0d:63:41:4d:
         3f:3a:db:5b:c6:58:88:7e:30:99:5e:83:40:db:f8:1f:eb:96:
         27:31:f2:e9:9d:76:61:2a:b3:b9:c1:3c:1a:48:89:96:11:3b:
         62:f8:9b:74:84:b3:10:1e:ea:01:d9:98:97:84:f9:da:40:d4:
         00:37:11:cc:72:1a:3a:a4:0a:93:a6:3f:27:2f:69:6e:ec:9f:
         f4:4f:7f:da:bb:aa:33:d7:ca:65:15:a4:26:9c:84:a9:a9:b5:
         5c:4f:88:82:6a:90:b7:e3:a5:c3:65:48:b5:08:0e:8c:44:92:
         2b:3b:57:1a:ad:62:85:90:3b:9c:d7:bc:ef:c9:0d:dd:c2:7b:
         ee:f3:99:ff:c3:4f:0f:e2:58:0f:a1:19:9e:c5:c5:f9:cb:07:
         f9:62:36:98:a7:df:17:81:d0:0c:4b:e3:5a:ca:0e:b9:dd:12:
         06:e4:12:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:18:35 2025 by rpki-client