Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          9fgVznV5OedQCZyx6UJNHcfjb/D7svEEbwcCFYum0V4=
Subject key identifier:   79:2F:FD:5E:DD:85:8A:41:99:50:32:BC:37:ED:C0:63:7C:DB:D4:6E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       17DA181F043EB5811CFB21316FAF34551536ADA3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
Signing time:             Tue 16 Sep 2025 00:00:44 +0000
ROA not before:           Mon 15 Sep 2025 23:55:44 +0000
ROA not after:            Tue 15 Sep 2026 00:00:44 +0000
asID:                     9304
IP address blocks:        23.226.131.0/24 maxlen: 24
                          64.50.178.0/23 maxlen: 24
                          64.50.186.0/24 maxlen: 24
                          64.188.7.0/24 maxlen: 24
                          64.188.14.0/24 maxlen: 24
                          64.188.18.0/24 maxlen: 24
                          64.188.19.0/24 maxlen: 24
                          64.188.21.0/24 maxlen: 24
                          66.63.189.0/24 maxlen: 24
                          74.50.3.0/24 maxlen: 24
                          74.50.6.0/24 maxlen: 24
                          216.97.228.0/24 maxlen: 24
                          216.97.229.0/24 maxlen: 24
                          216.97.235.0/24 maxlen: 24
                          216.227.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:da:18:1f:04:3e:b5:81:1c:fb:21:31:6f:af:34:55:15:36:ad:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 15 23:55:44 2025 GMT
            Not After : Sep 15 00:00:44 2026 GMT
        Subject: CN=792FFD5EDD858A41995032BC37EDC0637CDBD46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:1f:5b:5b:9f:0f:d6:b3:4e:cf:8c:cc:44:
                    95:67:48:8e:93:79:18:81:cf:5c:12:4e:d9:bf:fc:
                    7f:5e:69:2b:69:71:cb:52:ab:a8:1a:fb:9c:64:5e:
                    b2:8c:35:87:55:97:9f:fe:df:01:fd:0c:22:e2:a7:
                    57:7e:51:21:90:35:7c:84:2e:4a:11:6b:56:f3:09:
                    d5:1c:4b:a5:e3:24:03:80:5b:bc:59:62:50:cd:1f:
                    77:b1:b0:11:e1:87:f5:de:c2:7f:c3:6f:29:d0:34:
                    ce:87:93:49:01:84:3b:0a:e4:e9:0e:b5:03:79:f3:
                    f1:6b:48:12:04:b3:7a:22:21:0c:0f:e1:62:95:36:
                    48:7d:3a:73:57:c0:71:9d:42:e1:1c:87:8a:02:ae:
                    57:06:4c:e6:df:db:fd:6c:7f:06:1f:3f:a3:e9:e4:
                    29:66:2e:1e:9a:09:c8:40:d0:8f:0c:7e:4b:1e:f7:
                    6c:ed:d7:cc:9e:0a:24:f5:d1:76:6d:d7:3d:23:7d:
                    56:ce:71:d8:c0:08:50:c4:48:c2:bf:91:10:ad:59:
                    fb:93:b4:4b:ec:e7:50:c3:81:d0:8e:53:0e:a4:9e:
                    87:80:7d:c5:05:18:bb:63:33:4e:fa:1e:60:bc:33:
                    48:70:09:02:f7:9c:60:0c:17:3b:4b:1c:bc:ab:32:
                    06:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2F:FD:5E:DD:85:8A:41:99:50:32:BC:37:ED:C0:63:7C:DB:D4:6E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.131.0/24
                  64.50.178.0/23
                  64.50.186.0/24
                  64.188.7.0/24
                  64.188.14.0/24
                  64.188.18.0/23
                  64.188.21.0/24
                  66.63.189.0/24
                  74.50.3.0/24
                  74.50.6.0/24
                  216.97.228.0/23
                  216.97.235.0/24
                  216.227.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a5:0e:da:26:6b:6a:ed:62:36:a8:ff:bb:13:4a:3f:c4:c3:
         6b:d5:07:82:d8:8b:86:32:75:63:88:00:c2:de:1d:a9:3c:06:
         a8:72:7b:56:7a:c3:ca:60:29:7e:ae:ea:90:35:fe:08:e5:eb:
         7f:56:08:fb:1a:38:6f:fa:b2:88:bd:39:0a:74:e4:22:e9:d7:
         a5:38:61:cb:24:a3:93:e3:55:f9:e1:41:f8:a2:94:13:45:9e:
         84:02:e3:5e:45:f7:a4:77:d8:c2:43:cd:71:2e:43:1a:60:86:
         ed:db:18:c8:88:ae:41:e9:41:a0:b3:ca:a6:3b:c7:b4:10:17:
         18:34:b2:44:12:96:70:29:f4:5f:bd:97:b7:fa:eb:46:ec:bd:
         b7:e3:82:77:f7:4e:03:95:d5:53:bb:a6:fb:6d:6f:b9:61:b7:
         38:13:a9:b0:db:52:c9:87:9a:42:c4:39:8c:a7:ed:f1:9e:80:
         fd:df:b8:34:34:a1:fa:96:52:72:22:3c:29:e8:98:1d:e5:c3:
         db:50:61:9a:d0:f7:bc:ac:8a:cc:91:b2:8b:bd:51:1b:cf:2a:
         ae:30:4f:26:ff:bc:23:46:01:da:4d:87:8c:ee:de:f6:8a:b2:
         5f:9f:ec:89:2f:1a:44:b1:6d:82:4d:bc:bb:9e:57:16:b5:01:
         40:1b:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:33:49 2025 by rpki-client