Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          PoLo+wCpHGeOwZr6uvSpH4Fd3mhF5AvGX7rylKOjq2o=
Subject key identifier:   31:8E:64:ED:B4:58:73:9E:8A:B0:7B:B4:1E:40:99:46:98:E3:60:F1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4B0D05E10D5219AC9945FD5029828D295F5EAB8F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
Signing time:             Mon 25 May 2026 12:16:19 +0000
ROA not before:           Mon 25 May 2026 12:11:19 +0000
ROA not after:            Mon 24 May 2027 12:16:19 +0000
asID:                     9304
IP address blocks:        157.254.27.0/24 maxlen: 24
                          157.254.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 13:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0d:05:e1:0d:52:19:ac:99:45:fd:50:29:82:8d:29:5f:5e:ab:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 25 12:11:19 2026 GMT
            Not After : May 24 12:16:19 2027 GMT
        Subject: CN=318E64EDB458739E8AB07BB41E40994698E360F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:3f:54:da:40:ad:01:24:3e:ad:10:d5:9a:
                    e0:bb:9c:f7:4e:59:53:8a:f6:6c:09:6b:b2:ee:fc:
                    10:f6:30:d9:93:9b:93:b0:74:a8:33:13:21:83:78:
                    50:cc:68:ed:dd:85:61:1e:1c:e3:ae:28:00:6f:6b:
                    2f:5a:14:7e:87:57:b1:7c:5a:cc:35:02:7a:27:93:
                    f0:31:2b:68:88:45:41:52:fe:44:53:fd:d9:1f:9f:
                    58:6b:2a:78:d4:ab:ea:9f:36:e5:9f:6f:af:47:36:
                    a6:be:43:fa:88:ef:6f:59:ad:72:ef:ef:3b:89:6c:
                    82:c0:9a:a5:0c:59:37:96:64:4f:97:48:db:d9:19:
                    37:c6:be:8b:cc:e1:14:bb:0d:96:bb:b3:18:f2:4a:
                    7f:5d:2c:a7:11:5c:16:87:d0:fb:42:b7:59:48:a8:
                    aa:94:c0:bd:3c:21:9e:8c:bf:d0:2d:4a:8b:f0:b3:
                    02:c6:95:ec:f4:d0:36:92:56:db:6c:ca:75:d3:6c:
                    17:0e:72:e6:05:00:66:c7:c7:0f:d8:e8:fa:4d:f9:
                    90:f2:05:fd:9f:c2:b2:aa:d5:a6:8d:54:a5:ce:cb:
                    7a:c6:c9:1c:c8:5b:b3:e5:b3:55:eb:d8:b9:7c:79:
                    6b:74:66:8d:75:da:e2:eb:aa:9c:c0:1f:7e:b3:3a:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8E:64:ED:B4:58:73:9E:8A:B0:7B:B4:1E:40:99:46:98:E3:60:F1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.27.0/24
                  157.254.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:b3:d3:43:c6:cb:73:b1:db:0f:4f:a3:00:6b:c9:72:fc:71:
         78:51:d8:5e:98:91:88:1c:07:39:92:72:b8:85:71:58:1f:44:
         c2:c2:55:8c:ef:cf:d1:1b:71:51:72:c8:83:3c:32:3c:e4:c3:
         a5:00:73:c9:9a:85:de:31:d3:f8:5c:44:ce:32:b8:c1:91:e4:
         93:4a:3d:eb:75:52:46:4d:88:e6:98:e0:6e:5d:1f:e5:26:09:
         17:b9:bb:0b:44:20:d8:40:4f:69:b2:64:2f:82:3c:7f:03:a6:
         77:84:03:a7:bc:0f:cb:87:89:5b:ed:e1:64:e9:ba:40:57:9f:
         4b:bc:53:f6:89:ae:7c:4e:ff:68:16:8e:62:14:b8:fe:e0:0f:
         a2:81:e3:22:cb:c0:39:b3:48:a3:3f:b0:b8:14:d8:f7:96:9d:
         d6:f9:a4:d2:26:50:de:34:f2:ba:7f:71:f8:1a:43:3e:f7:78:
         88:7d:48:11:5a:50:bd:e5:1d:d2:6b:4a:b7:b8:03:d3:2c:43:
         cc:e3:4c:a4:c1:98:67:bf:06:57:a9:56:59:18:92:67:ef:54:
         8b:11:64:f4:58:90:32:f9:96:c6:7f:0c:6b:4b:f0:5c:55:e7:
         a4:23:22:c8:0a:e8:14:c4:f0:44:47:f6:cb:5f:36:df:c3:f5:
         bd:28:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 19:55:56 2026 by rpki-client