Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          camx2NtsZtgRTmC1eEBzrQMdU27BtJCZ34zcjqj0PeY=
Subject key identifier:   68:ED:D7:9F:4B:36:7C:63:E1:C3:1B:17:E9:6B:74:6A:99:AE:11:FC
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       14CB005395E482C447879A312F54D951D84D7AED
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
Signing time:             Tue 03 Jun 2025 02:00:47 +0000
ROA not before:           Tue 03 Jun 2025 01:55:47 +0000
ROA not after:            Tue 02 Jun 2026 02:00:47 +0000
asID:                     9304
IP address blocks:        206.53.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 15:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cb:00:53:95:e4:82:c4:47:87:9a:31:2f:54:d9:51:d8:4d:7a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  3 01:55:47 2025 GMT
            Not After : Jun  2 02:00:47 2026 GMT
        Subject: CN=68EDD79F4B367C63E1C31B17E96B746A99AE11FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:a9:b1:a4:15:0b:85:62:df:e9:cd:ca:6c:
                    3b:2d:da:ab:c4:bc:fe:eb:43:55:e9:b6:fd:09:23:
                    a7:c2:0b:8e:2c:c0:85:6e:56:57:6f:05:62:7e:71:
                    7a:38:d3:e2:f2:87:3e:9f:6d:0d:b4:18:7c:2b:6b:
                    34:7b:a9:8f:ce:58:a7:2b:2e:17:67:82:b3:e7:7b:
                    c2:ef:95:9a:2f:4d:5c:ae:cb:2a:78:19:ff:35:66:
                    7b:00:e7:71:03:61:da:74:12:2b:2c:91:56:02:30:
                    cb:37:3b:2d:5a:6e:17:83:89:f7:12:2a:0b:9a:6d:
                    ae:5f:e6:4e:50:32:0a:36:d0:55:2a:01:01:a9:7e:
                    70:d9:e6:84:cf:40:f3:5c:6a:4e:bc:4c:b8:fb:b2:
                    17:a3:b3:35:10:d4:d9:40:62:2f:52:73:b0:1f:ab:
                    d0:1e:55:5b:6d:7b:fe:0c:1f:5d:8e:47:9c:2d:15:
                    2d:39:e1:76:d9:63:33:ca:27:c7:a1:19:05:08:c1:
                    db:87:d3:a1:5e:2d:94:ec:3b:68:c7:7a:f0:51:72:
                    8e:b5:69:97:1a:6b:97:a0:81:09:ff:ba:2a:18:92:
                    b8:88:2e:55:3a:26:ca:ab:f2:39:36:16:31:1f:92:
                    d1:0c:fe:03:82:05:b8:a8:9f:fd:f4:bb:14:6e:5b:
                    21:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:ED:D7:9F:4B:36:7C:63:E1:C3:1B:17:E9:6B:74:6A:99:AE:11:FC
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:4b:2f:c6:52:b5:eb:75:6c:c9:ab:0d:8a:5f:45:76:c9:
         f2:ca:91:cf:b3:de:4e:47:a9:e8:0b:16:d1:c8:47:25:ba:97:
         52:e6:ff:67:4a:62:08:aa:96:ea:e4:0c:08:46:9a:2d:de:fd:
         1d:8e:a7:9d:02:53:e3:96:12:79:c7:28:fd:9a:9a:50:b9:bc:
         16:c7:c3:76:33:77:27:9d:f3:a4:5a:d4:4d:f2:12:6a:d5:c7:
         f7:8c:4d:bc:24:5f:c1:eb:cc:bd:1d:a6:fb:50:87:67:e6:e8:
         d9:7f:60:33:d8:fa:33:33:be:99:74:31:ea:73:07:3c:c6:44:
         13:bf:ca:0a:11:23:85:93:02:70:e0:c9:15:b2:6a:65:a2:9d:
         28:96:f6:04:8a:ca:13:57:28:b5:fb:ae:ac:e7:c4:e3:57:3e:
         9c:00:7d:20:82:be:02:82:e2:7c:58:d5:d4:35:ae:f5:48:da:
         ae:eb:fa:06:92:b1:e9:1e:0a:72:27:e5:4a:2c:8e:4c:30:9c:
         4e:b9:04:a7:07:48:30:94:36:29:68:ab:67:e0:0e:0b:9b:af:
         2f:21:6d:13:6a:16:43:56:d6:b1:6c:ab:b1:4f:63:cd:cf:a8:
         3c:87:20:73:47:46:95:21:9c:b7:d5:0a:e5:6c:64:f4:73:e5:
         72:d1:94:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:13:29 2025 by rpki-client