Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          HMJmG7GjUs+gVO4YYsue0xZvUj6NMNmW1ASwNbwPbfc=
Subject key identifier:   1B:50:54:9F:1B:E9:BE:46:A7:81:3A:1C:BA:71:35:2A:C8:47:29:C4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0CDAEB61ECC137D1A184D63AB4CD9074FD076515
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
Signing time:             Mon 20 Oct 2025 13:30:37 +0000
ROA not before:           Mon 20 Oct 2025 13:25:37 +0000
ROA not after:            Mon 19 Oct 2026 13:30:37 +0000
asID:                     9304
IP address blocks:        98.142.242.0/24 maxlen: 24
                          104.234.112.0/24 maxlen: 24
                          104.234.135.0/24 maxlen: 24
                          104.234.211.0/24 maxlen: 24
                          104.234.215.0/24 maxlen: 24
                          206.53.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 02:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:da:eb:61:ec:c1:37:d1:a1:84:d6:3a:b4:cd:90:74:fd:07:65:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 20 13:25:37 2025 GMT
            Not After : Oct 19 13:30:37 2026 GMT
        Subject: CN=1B50549F1BE9BE46A7813A1CBA71352AC84729C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:46:c5:69:0e:07:76:81:a1:73:7c:72:c1:
                    3a:33:ff:fb:58:09:f5:d1:a1:c7:b9:fb:35:b3:05:
                    ea:9c:43:05:b0:6b:ab:a3:dc:95:08:47:74:69:62:
                    70:cb:95:7f:9c:64:eb:43:a5:a5:c9:a2:83:63:a7:
                    c6:b8:fe:70:63:2e:4c:fb:39:d5:15:b1:03:a4:7e:
                    bd:ac:05:1c:a6:08:65:bb:6a:1f:05:58:ff:2c:91:
                    12:4c:9d:6a:e0:49:8b:8b:c8:9c:75:02:0f:b4:c5:
                    e4:b2:ea:35:46:34:0f:4c:03:6e:63:f0:f3:d6:ce:
                    fd:db:5b:a9:89:6d:71:9a:10:5e:4e:aa:34:be:44:
                    30:63:b2:de:6d:d2:9b:12:96:66:10:bc:d6:62:87:
                    02:14:1f:fa:14:82:08:67:03:2a:aa:8d:85:b1:51:
                    b8:ff:e1:e5:9c:76:56:7f:06:cf:18:b7:f2:a6:40:
                    2b:26:ce:c4:25:d6:58:f2:af:a7:10:f7:d5:3a:5a:
                    d5:6e:c2:c0:03:72:bd:e4:64:2d:fe:88:54:8a:57:
                    60:2e:d6:00:42:56:ca:53:c8:35:6b:58:9c:50:8a:
                    e4:20:11:7a:ec:ae:f8:e0:8d:9f:24:0f:82:00:d1:
                    4f:60:2c:60:bf:65:38:0e:59:19:d7:f2:34:55:c8:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:50:54:9F:1B:E9:BE:46:A7:81:3A:1C:BA:71:35:2A:C8:47:29:C4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.242.0/24
                  104.234.112.0/24
                  104.234.135.0/24
                  104.234.211.0/24
                  104.234.215.0/24
                  206.53.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:96:92:64:8a:e5:32:0f:14:99:c7:bc:5a:fb:5b:73:0f:fe:
         74:db:2c:42:b6:1c:c2:3e:5f:9e:ad:2c:9d:04:4e:e0:bf:55:
         5c:b3:de:fd:29:83:2c:d4:f3:b3:30:05:c7:39:0c:c9:23:df:
         44:b5:59:70:14:27:0e:dc:4a:6f:e6:cd:31:bd:2f:eb:6d:c1:
         03:c9:7e:7a:d5:1e:d0:9d:c7:a2:cb:a2:30:a4:38:1a:86:3d:
         16:9b:88:ce:b3:64:a6:c8:e9:f4:5e:f5:16:9b:57:68:c1:c3:
         6c:07:b1:5d:4c:7e:0c:94:23:a7:b7:d3:38:db:2e:7e:ca:4a:
         31:28:14:89:db:34:42:4b:80:18:13:fc:5f:c7:0c:79:12:86:
         49:12:ce:ec:ff:6f:2b:21:f4:c9:f7:22:13:33:74:50:81:20:
         2d:c7:41:fa:61:50:fd:5c:a7:77:42:3b:9c:d3:a9:39:bf:ae:
         67:c7:6e:85:d9:3f:1c:35:a4:a9:94:c9:ee:ff:07:c9:90:83:
         c4:7e:b6:a1:0b:97:b3:c7:47:a3:7a:42:a6:52:48:ad:de:96:
         6a:7b:fc:02:5f:68:02:58:0f:ed:3b:7b:5f:1a:37:01:a1:b8:
         ed:72:d9:a4:33:43:6d:ad:f2:bc:15:93:e6:57:47:04:4c:1d:
         f8:d3:41:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 22 05:46:03 2025 by rpki-client