Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          jZjaSEGfRYcSneM3T3mCRHKpbczfmjX0UBjJvifmvAU=
Subject key identifier:   5E:02:53:5A:24:2A:64:A7:B5:40:91:94:71:90:2E:23:45:F6:68:6E
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       50642F2C8B1B6E77EF701DF69B0643AB7B971735
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
Signing time:             Sun 19 Oct 2025 12:54:54 +0000
ROA not before:           Sun 19 Oct 2025 12:49:54 +0000
ROA not after:            Sun 18 Oct 2026 12:54:54 +0000
asID:                     9304
IP address blocks:        157.254.9.0/24 maxlen: 24
                          157.254.10.0/24 maxlen: 24
                          157.254.25.0/24 maxlen: 24
                          157.254.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:64:2f:2c:8b:1b:6e:77:ef:70:1d:f6:9b:06:43:ab:7b:97:17:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Oct 19 12:49:54 2025 GMT
            Not After : Oct 18 12:54:54 2026 GMT
        Subject: CN=5E02535A242A64A7B540919471902E2345F6686E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4f:59:23:37:dd:9b:55:ef:75:98:d8:28:8a:
                    1a:06:a8:4e:72:13:79:ab:40:2a:e4:b0:ba:1a:b6:
                    3c:12:ae:e4:fa:3b:1f:62:bc:b6:c2:95:d4:cc:20:
                    83:af:8a:46:eb:be:db:2c:19:0d:65:40:d2:b9:73:
                    89:5c:7a:12:5b:d7:70:45:42:85:03:b7:fe:13:27:
                    83:73:cf:c5:7c:e5:42:7d:62:13:6b:fd:a2:e3:52:
                    3a:ce:cb:d8:a6:9b:07:eb:dd:74:7e:e6:6a:5a:34:
                    61:b5:24:02:d3:8d:4a:a6:94:56:ab:1d:82:38:22:
                    b4:43:b4:7b:30:ba:ef:33:3c:46:a5:9b:6e:a7:a3:
                    ff:37:6d:e8:6f:c8:4c:de:1c:6b:91:bd:d5:fe:59:
                    bf:1e:96:47:7b:78:38:d2:3e:15:9e:13:5f:ad:9c:
                    1f:a3:cf:60:41:98:30:a8:59:2c:3b:0b:0d:8f:a5:
                    63:25:06:c4:26:3d:67:79:22:10:1a:f8:ca:83:5b:
                    53:c9:7a:01:a8:64:98:aa:04:b9:89:09:90:b8:e6:
                    b0:b8:c8:07:47:09:ae:10:35:de:a8:32:7f:db:ac:
                    27:bd:c8:8c:2f:04:52:07:9e:90:9f:7e:2f:e6:d4:
                    ec:76:51:64:8e:60:64:78:2a:59:4f:67:50:71:25:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:53:5A:24:2A:64:A7:B5:40:91:94:71:90:2E:23:45:F6:68:6E
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.9.0-157.254.10.255
                  157.254.25.0/24
                  157.254.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:5e:63:43:86:24:e1:55:3a:0b:e4:87:5d:cd:a7:a6:06:17:
         ad:d0:af:f4:15:db:d3:45:ba:5c:fb:25:ea:6d:05:ae:57:2e:
         ba:0f:a9:05:c7:25:44:f3:68:50:7e:87:c6:31:28:c2:ce:e1:
         3e:04:62:7f:25:ab:03:10:45:9b:9b:0a:e2:a4:65:3b:b1:1c:
         79:4f:a6:c1:6a:7a:eb:45:06:2d:85:5d:fb:99:d6:77:07:b4:
         ca:87:8c:18:3c:68:7d:41:1a:5d:f1:65:89:39:2d:ca:e6:47:
         1f:fe:58:07:0f:9d:b6:8e:90:e3:1a:eb:4c:b3:ed:15:01:e9:
         f8:88:fe:ae:a2:19:1e:76:4c:24:de:15:c3:9f:30:74:b6:42:
         38:d4:88:51:85:2a:be:f6:02:58:f7:76:55:de:e5:2d:36:c1:
         2d:0d:a1:c6:18:ec:8c:f9:e8:c1:10:4e:bf:96:2c:3f:7e:45:
         21:9b:90:6a:24:3b:c0:d3:79:a2:5f:df:df:00:0c:44:32:09:
         e3:69:b8:3f:f7:1a:99:fa:a0:7d:eb:c1:62:20:13:4e:46:10:
         24:a0:ed:3a:23:31:cd:73:f7:a6:88:1f:c3:1c:e4:cf:2f:9f:
         d3:67:aa:e0:dd:75:d8:ba:9b:12:7a:f5:25:d5:3c:6e:a1:ff:
         08:20:0a:c3
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIUUGQvLIsbbnfvcB32mwZDq3uXFzUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUxMDE5MTI0OTU0WhcNMjYxMDE4MTI1NDU0
WjAzMTEwLwYDVQQDEyg1RTAyNTM1QTI0MkE2NEE3QjU0MDkxOTQ3MTkwMkUyMzQ1
RjY2ODZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k9ZIzfdm1Xv
dZjYKIoaBqhOchN5q0Aq5LC6GrY8Eq7k+jsfYry2wpXUzCCDr4pG677bLBkNZUDS
uXOJXHoSW9dwRUKFA7f+EyeDc8/FfOVCfWITa/2i41I6zsvYppsH6910fuZqWjRh
tSQC041KppRWqx2COCK0Q7R7MLrvMzxGpZtup6P/N23ob8hM3hxrkb3V/lm/HpZH
e3g40j4VnhNfrZwfo89gQZgwqFksOwsNj6VjJQbEJj1neSIQGvjKg1tTyXoBqGSY
qgS5iQmQuOawuMgHRwmuEDXeqDJ/26wnvciMLwRSB56Qn34v5tTsdlFkjmBkeCpZ
T2dQcSUrNQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFF4CU1okKmSntUCRlHGQLiNF
9mhuMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMwYI
KwYBBQUHAQcBAf8EJDAiMCAEAgABMBowDAMEAJ3+CQMEAJ3+CgMEAJ3+GQMEAJ3+
HTANBgkqhkiG9w0BAQsFAAOCAQEAjF5jQ4Yk4VU6C+SHXc2npgYXrdCv9BXb00W6
XPsl6m0Frlcuug+pBcclRPNoUH6HxjEows7hPgRifyWrAxBFm5sK4qRlO7EceU+m
wWp660UGLYVd+5nWdwe0yoeMGDxofUEaXfFliTktyuZHH/5YBw+dto6Q4xrrTLPt
FQHp+Ij+rqIZHnZMJN4Vw58wdLZCONSIUYUqvvYCWPd2Vd7lLTbBLQ2hxhjsjPno
wRBOv5YsP35FIZuQaiQ7wNN5ol/f3wAMRDIJ42m4P/camfqgfevBYiATTkYQJKDt
OiMxzXP3pogfwxzkzy+f02eq4N112LqbEnr1JdU8bqH/CCAKww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:35:07 2025 by rpki-client