Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          42CKCmzMzW2DKqImBc4isVzZqHMwHevvQxgp68S6Aho=
Subject key identifier:   A3:90:E6:B1:8C:C1:41:9E:EE:70:5F:0D:AD:6E:53:DB:F4:7A:5E:B8
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7FE2B86302B6C06D6CE68047223BD0CAEB9029BB
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
Signing time:             Fri 25 Sep 2026 00:07:39 +0000
ROA not before:           Fri 25 Sep 2026 00:02:39 +0000
ROA not after:            Fri 24 Sep 2027 00:07:39 +0000
asID:                     9304
IP address blocks:        104.234.104.0/24 maxlen: 24
                          104.234.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 14:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e2:b8:63:02:b6:c0:6d:6c:e6:80:47:22:3b:d0:ca:eb:90:29:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 25 00:02:39 2026 GMT
            Not After : Sep 24 00:07:39 2027 GMT
        Subject: CN=A390E6B18CC1419EEE705F0DAD6E53DBF47A5EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:a3:c7:5a:c6:8c:f1:7a:9f:48:17:9b:6c:
                    ff:bc:46:e5:df:10:6b:42:9f:76:3f:8e:c1:70:70:
                    fa:52:64:01:14:1a:4a:0c:0d:25:53:7f:54:08:94:
                    de:4b:43:85:55:bd:f9:8f:f8:dd:66:3c:0a:d6:1e:
                    48:ac:70:66:a0:30:7b:3a:61:8d:d9:f7:78:52:78:
                    f8:d9:64:96:6e:f7:da:4f:38:2f:55:e2:76:37:34:
                    15:b2:a6:0f:d4:a8:ab:c1:6f:9d:5f:88:f4:0c:95:
                    ce:a2:93:4a:ff:d2:97:09:19:64:c2:58:41:ac:41:
                    56:18:d3:1b:1e:db:bf:09:32:c7:d1:fe:64:1a:05:
                    af:f6:3f:1e:7e:6c:c7:2c:7c:4a:0d:24:0a:d6:49:
                    a9:fc:2e:85:ed:17:58:2c:7f:a7:21:8d:e8:23:94:
                    d4:02:33:c0:78:40:7e:33:8f:0b:03:3b:29:f7:4e:
                    bb:6c:22:4e:3e:07:ed:69:a6:75:59:24:32:1d:12:
                    31:4d:b8:2c:f5:3d:d9:45:1f:06:ff:c1:38:e7:61:
                    bc:75:bb:8a:16:f1:ac:57:ee:56:4a:d3:c1:41:93:
                    0a:64:d6:db:e4:cd:34:45:e1:33:5a:f1:49:7a:f0:
                    de:76:5b:04:b9:d2:d7:c7:a2:e2:67:1d:67:a9:eb:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:E6:B1:8C:C1:41:9E:EE:70:5F:0D:AD:6E:53:DB:F4:7A:5E:B8
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.104.0/24
                  104.234.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:27:a3:e1:a1:4d:f5:fc:71:f0:9f:23:a7:b6:17:31:10:6f:
         8c:5e:f1:29:6c:79:aa:61:fa:ed:3c:9f:6d:1a:5c:f8:c0:43:
         c1:86:d6:9b:95:c9:5f:74:18:91:32:d9:0c:a6:15:b5:a5:57:
         44:cc:a9:ed:c8:60:ee:64:11:69:bf:d8:a7:07:de:37:a7:de:
         cd:7c:d1:78:6a:ce:e0:3f:cc:b8:ab:a1:1e:26:2a:ad:56:38:
         8e:66:e0:b7:4b:4d:76:21:ff:0f:2c:8a:69:8b:aa:ef:ef:64:
         10:1d:dc:42:97:25:6e:d2:5d:a2:68:f1:8e:fa:54:9e:a9:46:
         7d:2e:f3:d1:9c:2a:b9:1c:8a:1e:32:45:f8:74:15:90:f9:a0:
         20:46:8f:e7:fd:d6:59:f6:d3:89:27:76:82:2d:22:9f:59:c3:
         b8:8e:0d:29:b3:a1:56:a2:7f:06:b8:49:98:c3:5d:2e:a8:e3:
         36:e5:6d:1e:44:77:d6:3f:29:3a:9d:ed:f7:f6:12:7d:69:df:
         47:21:00:48:5f:72:6d:df:dc:2e:f6:09:cd:61:d1:7f:68:59:
         bc:d7:59:b7:b3:2e:eb:a8:a2:72:f8:05:50:46:92:53:4f:b2:
         db:a4:9b:ed:87:17:09:c1:6e:fb:0b:d3:bb:9e:f1:eb:37:ac:
         cb:71:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 00:54:35 2026 by rpki-client