Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          FT5dh89N8Dgtplydo5nqsKtCP7qrTZQPij7KZdDBhi0=
Subject key identifier:   BB:56:76:64:3B:C5:95:AB:50:F3:76:BC:48:83:85:24:76:1C:6B:07
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       36A05AA698BAF4C7102589C129CD1535BC0DD27B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
Signing time:             Mon 02 Jun 2025 16:10:33 +0000
ROA not before:           Mon 02 Jun 2025 16:05:33 +0000
ROA not after:            Mon 01 Jun 2026 16:10:33 +0000
asID:                     9304
IP address blocks:        64.50.186.0/24 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 07:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a0:5a:a6:98:ba:f4:c7:10:25:89:c1:29:cd:15:35:bc:0d:d2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  2 16:05:33 2025 GMT
            Not After : Jun  1 16:10:33 2026 GMT
        Subject: CN=BB5676643BC595AB50F376BC48838524761C6B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:f1:2d:93:08:74:c8:93:40:63:1a:4c:10:
                    4e:5f:1f:ad:13:67:3b:6f:08:17:2b:f6:ef:70:23:
                    b2:bb:95:bb:ac:b4:84:bc:55:34:a6:9d:66:0d:4f:
                    13:f1:74:25:c2:0b:ac:f3:30:d1:5c:6e:50:33:e0:
                    7a:35:0d:2f:00:f5:d6:a8:9d:7f:de:1d:10:ff:f7:
                    2e:59:d3:aa:59:c5:fe:35:9d:80:90:0b:6a:0f:82:
                    c1:32:8f:29:95:18:ac:33:32:67:ee:ff:6b:ac:b5:
                    aa:ba:c7:a6:24:68:90:57:2d:d5:af:7c:08:0a:02:
                    8d:f6:22:a9:65:10:3b:da:86:1c:17:3d:1a:9c:ce:
                    e2:37:c5:0a:43:f0:90:96:a3:dc:8b:98:86:a6:64:
                    b2:42:ad:8d:3c:5e:a8:86:89:dc:77:43:3e:0c:31:
                    00:77:55:70:6d:90:7b:62:23:f7:67:60:0b:61:2c:
                    c0:c9:66:f2:cc:de:42:8f:a0:b3:3c:61:5f:7a:7a:
                    3e:b9:9d:47:79:11:9d:6f:72:64:7c:8f:74:16:d4:
                    b8:0c:8b:4c:98:ec:96:52:c2:bd:dd:73:36:ed:59:
                    36:1f:e9:17:70:12:bb:b5:11:9c:d5:07:7b:71:93:
                    71:0b:b7:ba:05:87:6d:87:e9:39:50:fd:e9:36:91:
                    e5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:56:76:64:3B:C5:95:AB:50:F3:76:BC:48:83:85:24:76:1C:6B:07
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.186.0/24
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:cc:0e:6c:e3:0c:2d:86:ad:03:e7:54:92:b2:3e:f9:8d:46:
         41:76:47:0b:18:b5:ac:a7:16:fa:bb:8f:7d:d6:b9:b0:60:df:
         d0:76:a5:7a:3a:42:19:61:cc:8a:ad:55:42:0e:9e:c5:16:1b:
         57:56:7b:4b:11:94:69:e0:5d:d1:5e:6b:d5:53:81:27:c2:f6:
         a5:38:f0:67:a4:2c:36:c9:dc:ef:d7:6c:dc:85:de:71:fb:d4:
         48:c0:4e:9d:c5:87:c1:3d:d6:96:1c:cd:bd:8e:3d:3f:91:f6:
         0e:29:4c:89:03:b7:c5:8c:10:57:dc:e5:f1:28:6b:27:e4:b1:
         a6:8f:5b:b0:af:e9:d5:b3:00:da:9c:07:fa:7a:ac:05:e3:7e:
         dc:d3:e3:bf:36:e0:56:de:9e:d3:ea:d4:2a:e9:23:73:9e:a3:
         d6:0f:68:97:38:73:24:aa:fb:9a:6b:88:6d:4a:db:20:e0:d1:
         f9:88:8e:b8:7d:9f:c5:b9:77:3a:a3:6f:14:d4:a2:8f:c9:77:
         24:b8:2e:e9:69:f8:c9:6f:39:bb:d9:35:74:3e:6b:7a:8b:9f:
         ab:d3:a6:96:37:24:ef:65:5c:b9:68:6e:4c:89:9a:c2:26:b2:
         7b:27:8c:47:76:8f:37:47:d9:34:35:50:4f:53:76:ea:ed:35:
         b7:57:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:11:55 2025 by rpki-client