Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          xLPHNPYM1Etc3UZovspVxHcjkcnBOP3ZKVmrTIqtnro=
Subject key identifier:   51:72:11:A8:F2:D9:42:E2:7B:C7:C9:30:95:B0:6F:98:BF:4A:41:AF
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1E8B3E125132446B805ED2AE140FEE108BFD2E6A
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
Signing time:             Tue 26 May 2026 10:00:53 +0000
ROA not before:           Tue 26 May 2026 09:55:53 +0000
ROA not after:            Tue 25 May 2027 10:00:53 +0000
asID:                     9304
IP address blocks:        40.27.12.0/24 maxlen: 24
                          40.27.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 13:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8b:3e:12:51:32:44:6b:80:5e:d2:ae:14:0f:ee:10:8b:fd:2e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: May 26 09:55:53 2026 GMT
            Not After : May 25 10:00:53 2027 GMT
        Subject: CN=517211A8F2D942E27BC7C93095B06F98BF4A41AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:20:33:c3:b5:b2:a8:e1:d5:dc:87:ca:bb:
                    4c:0a:c5:03:b8:e2:fc:14:6c:06:61:b5:47:61:06:
                    1a:12:65:c9:aa:00:8a:f4:46:59:28:99:5e:95:a8:
                    6b:39:32:c5:96:ac:fc:fc:e1:35:39:3f:36:28:0e:
                    20:24:d6:e5:5e:60:4b:02:c3:98:a8:ba:e3:60:9e:
                    df:73:ea:19:36:dd:db:f8:53:c7:84:23:49:f1:2a:
                    22:3b:d2:71:0b:f7:c2:2f:54:8c:22:99:9d:ba:9e:
                    93:67:29:87:99:5f:51:b0:db:ff:57:b6:f2:1b:e3:
                    ce:f4:90:cd:18:52:6b:08:ed:06:a7:93:1e:e9:34:
                    56:37:ae:31:2e:a1:82:2d:db:0d:cf:7c:71:2d:57:
                    90:14:52:77:10:c3:c2:db:aa:87:2a:50:69:63:1d:
                    3c:ef:86:c8:b0:93:15:bc:13:8f:b1:37:75:84:54:
                    22:e7:15:dd:ac:0e:36:b1:70:5c:df:f2:cc:62:dc:
                    c9:38:c4:7b:f3:1d:58:36:8a:90:c5:4d:dc:5e:be:
                    bd:80:ad:ae:d1:57:ba:5a:e7:ea:d3:96:e0:10:49:
                    43:e6:15:74:29:9c:de:e2:99:91:5b:62:6b:ff:67:
                    f3:24:28:4e:51:5b:6b:3e:42:5b:06:f0:fa:cd:69:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:72:11:A8:F2:D9:42:E2:7B:C7:C9:30:95:B0:6F:98:BF:4A:41:AF
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.12.0/24
                  40.27.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:24:2d:d4:d3:aa:93:73:ed:e2:ac:56:36:55:bf:cf:9b:57:
         34:1e:6f:14:2a:23:33:24:f3:f2:c9:db:d4:b5:0b:cc:7b:47:
         96:2d:8b:62:c7:02:6d:3b:37:29:32:e7:6f:38:af:4a:ef:67:
         ac:b7:18:bf:84:77:7e:ab:0a:22:78:f0:f2:2e:a8:6c:01:35:
         95:78:31:24:24:7d:f5:95:d7:c7:e7:7b:48:4c:fd:5d:cd:e0:
         ed:b5:61:af:c7:39:bc:cf:42:3e:b2:7a:c5:c0:ec:dd:9d:4c:
         19:69:b2:10:de:37:18:47:09:a5:11:e2:50:0e:1c:f1:73:81:
         a1:8b:0c:cc:49:24:2d:1d:67:c9:71:59:95:8b:2b:5d:65:44:
         96:07:de:2f:fc:6c:04:65:88:3a:5e:27:6f:2d:3c:53:9a:5a:
         4c:b7:aa:d1:b0:e7:76:28:eb:e0:c1:5e:83:7e:fd:65:28:7e:
         26:9e:9f:c5:fc:bf:85:f0:03:4f:3d:c1:f0:d3:b2:8d:91:06:
         aa:3c:39:db:e6:fa:28:e9:94:c1:90:3b:58:02:6f:f3:f9:44:
         75:c9:76:f6:e8:b2:cc:87:af:43:18:b0:29:79:1e:78:9d:48:
         42:37:17:7b:89:b8:2b:3c:53:8d:cf:87:6d:83:84:09:d0:5a:
         26:68:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:30 2026 by rpki-client