Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          kzHL5XyEQpsfz0GvZzC87qgZphxhYb6WoTtEvckYZ70=
Subject key identifier:   C3:59:E8:65:D7:E3:E4:2F:3D:46:FF:D4:4B:E5:58:50:7E:C2:BC:AF
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1A29285C9F709E1048DF432920CF1F69DE59CB91
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
Signing time:             Mon 20 Oct 2025 13:44:16 +0000
ROA not before:           Mon 20 Oct 2025 13:39:16 +0000
ROA not after:            Mon 19 Oct 2026 13:44:16 +0000
asID:                     9304
IP address blocks:        40.27.16.0/24 maxlen: 24
                          40.27.32.0/22 maxlen: 24
                          40.27.76.0/22 maxlen: 24
                          40.27.93.0/24 maxlen: 24
                          40.27.120.0/22 maxlen: 24
                          40.27.220.0/24 maxlen: 24
                          40.27.221.0/24 maxlen: 24
                          40.27.222.0/24 maxlen: 24
                          40.27.223.0/24 maxlen: 24
                          40.27.231.0/24 maxlen: 24
                          40.27.240.0/24 maxlen: 24
                          40.27.241.0/24 maxlen: 24
                          40.27.242.0/24 maxlen: 24
                          40.27.248.0/24 maxlen: 24
                          40.27.249.0/24 maxlen: 24
                          40.27.250.0/24 maxlen: 24
                          40.27.251.0/24 maxlen: 24
                          40.27.252.0/24 maxlen: 24
                          40.27.253.0/24 maxlen: 24
                          40.27.254.0/24 maxlen: 24
                          40.27.255.0/24 maxlen: 24
                          40.183.88.0/22 maxlen: 24
                          40.183.150.0/24 maxlen: 24
                          40.183.153.0/24 maxlen: 24
                          40.183.206.0/23 maxlen: 23
                          40.183.224.0/24 maxlen: 24
                          40.183.225.0/24 maxlen: 24
                          40.183.226.0/23 maxlen: 23
                          40.183.228.0/23 maxlen: 24
                          40.183.230.0/24 maxlen: 24
                          40.183.231.0/24 maxlen: 24
                          40.183.232.0/23 maxlen: 24
                          40.183.237.0/24 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/24 maxlen: 24
                          40.183.243.0/24 maxlen: 24
                          40.183.244.0/24 maxlen: 24
                          40.183.245.0/24 maxlen: 24
                          40.183.246.0/24 maxlen: 24
                          40.183.247.0/24 maxlen: 24
                          40.183.252.0/24 maxlen: 24
                          40.223.16.0/24 maxlen: 24
                          40.223.183.0/24 maxlen: 24
                          40.223.189.0/24 maxlen: 24
                          40.223.190.0/24 maxlen: 24
                          40.223.191.0/24 maxlen: 24
                          40.223.192.0/24 maxlen: 24
                          40.223.193.0/24 maxlen: 24
                          40.223.194.0/24 maxlen: 24
                          40.223.240.0/24 maxlen: 24
                          40.223.241.0/24 maxlen: 24
                          40.223.244.0/24 maxlen: 24
                          40.223.245.0/24 maxlen: 24
                          40.223.246.0/24 maxlen: 24
                          40.223.247.0/24 maxlen: 24
                          40.223.248.0/24 maxlen: 24
                          40.223.249.0/24 maxlen: 24
                          40.223.250.0/24 maxlen: 24
                          40.223.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:29:28:5c:9f:70:9e:10:48:df:43:29:20:cf:1f:69:de:59:cb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct 20 13:39:16 2025 GMT
            Not After : Oct 19 13:44:16 2026 GMT
        Subject: CN=C359E865D7E3E42F3D46FFD44BE558507EC2BCAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:69:d6:78:50:c4:c0:f2:23:8a:22:70:7c:
                    49:d4:f6:66:fd:3d:79:26:86:fd:54:50:a4:8c:8c:
                    33:25:45:10:a3:31:27:6b:00:fe:26:ba:ed:07:8a:
                    b7:78:69:19:28:63:14:98:70:d8:4d:cd:bf:4a:5e:
                    e9:3a:aa:15:33:b8:43:e9:7b:d0:72:c6:3a:86:b3:
                    fb:c4:f0:b3:e9:d0:ad:7f:fd:b8:50:2d:1b:fc:ed:
                    26:ee:59:37:aa:3e:5e:b3:0a:3f:e8:b6:d5:16:d3:
                    b5:bc:ac:61:8a:f1:00:fe:ee:a8:07:c6:a7:a2:c7:
                    34:8e:0a:5d:9b:a0:11:31:39:01:61:c0:ab:cb:a8:
                    45:00:2c:8d:16:22:db:31:b0:a6:3a:6a:06:82:20:
                    f2:ea:5b:9c:57:e6:40:f1:d3:f9:ab:32:80:43:33:
                    5e:70:c3:76:87:41:a7:57:dd:3e:b9:b3:7b:37:64:
                    fa:3d:04:f5:86:3b:98:d6:44:c8:28:db:d1:6e:da:
                    6f:93:99:21:2a:7f:b3:72:87:7d:44:ab:2b:ec:45:
                    3b:41:e4:67:34:27:87:70:ca:d0:00:fb:cb:39:6c:
                    0f:46:14:09:80:92:34:3b:2c:19:50:a8:1a:f9:c1:
                    54:c3:c7:1d:1f:c3:3b:cf:96:ef:6b:32:99:80:4c:
                    83:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:59:E8:65:D7:E3:E4:2F:3D:46:FF:D4:4B:E5:58:50:7E:C2:BC:AF
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.16.0/24
                  40.27.32.0/22
                  40.27.76.0/22
                  40.27.93.0/24
                  40.27.120.0/22
                  40.27.220.0/22
                  40.27.231.0/24
                  40.27.240.0-40.27.242.255
                  40.27.248.0/21
                  40.183.88.0/22
                  40.183.150.0/24
                  40.183.153.0/24
                  40.183.206.0/23
                  40.183.224.0-40.183.233.255
                  40.183.237.0/24
                  40.183.241.0-40.183.247.255
                  40.183.252.0/24
                  40.223.16.0/24
                  40.223.183.0/24
                  40.223.189.0-40.223.194.255
                  40.223.240.0/23
                  40.223.244.0-40.223.250.255
                  40.223.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:dc:59:7b:9d:53:dc:40:6e:49:be:84:58:69:17:46:7e:
         e7:3c:8b:de:2c:62:90:db:68:aa:14:69:c4:60:2e:47:27:32:
         19:09:02:40:99:0e:8f:56:b4:5a:d2:89:22:d5:84:4a:26:4e:
         bd:28:27:df:55:6c:e6:d6:92:f7:07:c5:a0:94:47:8d:b4:28:
         fb:da:a9:71:8b:c9:c8:f9:a5:cb:b5:83:69:29:00:70:b1:4c:
         7c:8f:3e:ab:fc:f4:dd:43:b5:d8:3f:da:37:ff:4f:1f:4f:07:
         9a:1f:6f:d4:6a:eb:99:4d:3d:76:36:16:48:b7:08:96:bc:bd:
         ee:77:3c:97:4d:00:cc:aa:28:da:ac:05:5e:43:67:27:24:d5:
         46:b8:2c:ce:37:78:e6:56:eb:58:df:6f:c5:20:c5:20:de:fb:
         59:79:a2:dc:72:64:d8:3c:56:a6:72:0b:9d:99:e4:75:01:e0:
         ab:0e:73:99:62:9b:07:57:55:37:56:e3:b7:21:5f:a8:dd:d3:
         c1:d0:45:c8:06:ef:53:01:8a:30:b7:b2:01:1a:97:5e:22:42:
         e2:db:ac:0d:c0:99:03:4c:9f:d6:ee:8d:86:a8:90:f0:ff:58:
         4e:b4:3a:69:ca:d5:32:ce:ea:0f:19:dd:20:85:0a:8d:c9:ca:
         df:85:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:44:23 2025 by rpki-client