Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          O7j3B7JxtCuF4J3CHqvSAUtW8FbGn2ImjYwSTliKRXU=
Subject key identifier:   7F:4A:62:E4:19:F2:AE:F9:03:63:E9:E7:5F:10:91:8E:79:DE:8F:B2
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       201BE2CBACB89DC4F4106F701F54167642A8C3BB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
Signing time:             Thu 17 Jul 2025 14:54:21 +0000
ROA not before:           Thu 17 Jul 2025 14:49:21 +0000
ROA not after:            Thu 16 Jul 2026 14:54:21 +0000
asID:                     9304
IP address blocks:        23.226.131.0/24 maxlen: 24
                          64.50.180.0/24 maxlen: 24
                          64.50.186.0/24 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1b:e2:cb:ac:b8:9d:c4:f4:10:6f:70:1f:54:16:76:42:a8:c3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 17 14:49:21 2025 GMT
            Not After : Jul 16 14:54:21 2026 GMT
        Subject: CN=7F4A62E419F2AEF90363E9E75F10918E79DE8FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:41:4e:cf:50:04:ed:1e:fd:ac:67:0f:81:
                    4a:a9:f9:82:1a:d8:ab:6f:20:07:32:e4:02:f6:54:
                    84:c8:ad:2f:f6:05:56:37:14:8d:28:60:14:0b:5c:
                    a4:a5:87:63:f7:04:f4:c2:3b:92:2a:d0:6e:36:27:
                    e5:e1:9e:01:96:8b:e9:ca:2a:31:a5:36:6e:48:79:
                    42:71:ce:fd:07:2b:d4:72:8c:4a:04:6b:fa:76:b6:
                    b2:35:96:4c:cb:dd:d0:4e:df:58:e9:69:86:57:16:
                    70:9d:02:2e:0d:b0:50:bc:77:9c:c3:49:90:47:84:
                    f3:bf:e7:14:d9:a4:06:ff:33:09:cc:67:05:eb:72:
                    2e:c0:f2:94:e3:f3:11:8c:7c:5c:63:12:80:ab:85:
                    99:41:b2:a2:84:a4:73:f7:d9:43:9e:04:85:2f:ac:
                    d6:9f:eb:dd:14:50:2d:fe:88:94:5c:67:e4:7c:55:
                    75:d5:46:0d:0e:1a:09:de:e5:a0:7a:3f:17:da:9f:
                    62:2a:d2:05:57:57:36:0e:cd:5b:4e:61:f5:59:5b:
                    13:7e:e1:26:dd:29:99:c6:c3:8d:54:3b:d3:77:17:
                    75:8e:d5:70:88:40:fc:42:c0:72:0b:15:b9:e9:f7:
                    6f:5e:33:f1:11:e0:67:2f:54:1f:b7:93:b2:26:b8:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4A:62:E4:19:F2:AE:F9:03:63:E9:E7:5F:10:91:8E:79:DE:8F:B2
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.131.0/24
                  64.50.180.0/24
                  64.50.186.0/24
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:3f:f1:b6:bb:60:a1:f0:7b:f2:6d:f2:e0:e9:5a:81:bd:35:
         d8:57:0e:f0:24:54:ff:23:c2:66:dc:f3:a6:1a:96:9e:5e:a1:
         ed:50:6b:eb:b4:1c:f3:2a:8f:0f:44:3a:54:b6:46:96:66:6e:
         f0:33:b3:01:f1:06:fd:29:1b:4f:ac:16:2b:d4:0c:52:74:bd:
         f2:7c:07:36:52:ed:a9:70:61:aa:87:7f:ba:0b:d9:6a:30:3d:
         02:6b:c8:d4:86:ed:7d:6b:ac:81:ec:36:82:f8:1f:7b:6b:08:
         96:34:14:3c:97:84:4a:7a:7e:48:8d:13:e0:d3:1c:b0:21:60:
         25:d7:31:ab:ef:c5:15:26:8c:b9:4a:27:5a:b5:84:2f:0a:29:
         91:19:1e:cd:5a:92:d8:2c:4b:ec:d7:6b:a3:8f:87:af:c5:6b:
         04:0f:7b:59:d9:7a:dd:95:a0:92:e6:6b:9c:bc:d7:54:11:ea:
         ba:d8:e4:34:b2:2f:4f:42:48:78:35:41:fa:d3:33:0f:8a:1b:
         5f:08:dc:32:df:bc:74:4f:4c:af:bf:d3:eb:fb:98:82:9c:6d:
         d9:10:db:aa:18:a5:4c:7e:a0:01:4d:69:e7:79:e6:9c:10:5a:
         ff:c0:c0:a4:3a:55:82:ba:f3:06:d0:68:0a:b1:18:66:d1:f2:
         91:7e:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:36:09 2025 by rpki-client