Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          rKxqrN4aEfJFKr0C7YA9hiYTaaWe8kXMeOpS8ZlXcJc=
Subject key identifier:   B0:9C:B7:72:77:2C:3F:29:2D:88:6E:33:F6:88:83:57:CA:76:99:95
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       733F8B3CA5AC048BF2CDB950AC6FDE0A479815E8
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS9304.roa
Signing time:             Wed 01 Jul 2026 13:30:32 +0000
ROA not before:           Wed 01 Jul 2026 13:25:32 +0000
ROA not after:            Wed 30 Jun 2027 13:30:32 +0000
asID:                     9304
IP address blocks:        207.180.34.0/24 maxlen: 24
                          207.180.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:53:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3f:8b:3c:a5:ac:04:8b:f2:cd:b9:50:ac:6f:de:0a:47:98:15:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jul  1 13:25:32 2026 GMT
            Not After : Jun 30 13:30:32 2027 GMT
        Subject: CN=B09CB772772C3F292D886E33F6888357CA769995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:3c:4b:21:d6:ae:50:d3:5e:29:94:22:50:
                    c6:f1:dd:b6:49:04:f2:53:b3:c1:99:82:87:71:c7:
                    89:b9:1f:b1:cf:ad:2d:d3:94:62:5b:de:e3:75:35:
                    28:ef:4f:ad:fa:34:0f:65:9d:2b:ea:58:a3:73:87:
                    f1:0c:8f:98:a5:8c:aa:c1:63:e2:43:a2:fc:dd:6c:
                    eb:09:b6:88:48:43:ac:d8:4e:27:5f:9c:6f:e8:18:
                    80:06:18:23:e0:f4:73:ca:2c:43:d0:af:a2:ed:9c:
                    fc:59:23:4b:c9:64:1b:cf:76:86:12:7b:26:4f:fd:
                    b2:e9:aa:de:10:3b:21:c3:37:e8:ed:b4:e4:67:45:
                    ef:33:13:6e:6b:9e:da:d7:02:cf:5d:ae:9f:96:1b:
                    99:6e:9e:42:9c:fd:4c:4b:3a:10:c8:19:ad:4e:19:
                    15:39:18:be:a1:d5:c2:3e:7b:a3:f5:85:12:37:97:
                    a3:7f:c7:d3:4b:38:6b:9a:08:30:cd:68:41:3a:ac:
                    ef:53:3d:c1:0f:7b:3f:d3:b7:5a:bd:8a:9d:fa:30:
                    01:ff:4b:38:48:aa:03:da:d9:bc:7b:d9:ff:cd:48:
                    05:aa:9d:cf:e7:eb:68:f7:42:0c:af:92:13:c0:78:
                    df:96:df:5e:44:70:6e:ba:d7:b1:44:a9:e5:4f:26:
                    b1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9C:B7:72:77:2C:3F:29:2D:88:6E:33:F6:88:83:57:CA:76:99:95
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.34.0/24
                  207.180.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:3b:61:e7:4d:5f:aa:ca:41:bf:ad:7b:fe:f2:6b:90:87:22:
         ba:4b:0d:c1:3a:2b:2c:b7:47:30:b2:42:af:61:2b:dd:12:6a:
         d5:15:f7:8d:b9:c7:20:31:2f:28:ba:14:26:29:97:f8:31:f8:
         6e:f8:62:83:40:03:43:82:28:bf:7b:5f:6c:15:4c:b4:62:fd:
         06:24:c1:53:f5:44:fa:5d:be:a5:15:eb:9d:88:63:f4:2b:81:
         07:e5:be:ef:05:21:34:70:35:84:9a:4c:e9:7b:6e:34:67:ee:
         a2:62:0f:cf:df:ff:70:3a:00:57:f7:27:c2:4d:42:3f:a6:b5:
         a3:a1:dd:e5:ee:8e:a3:ea:34:20:4f:05:34:eb:ae:c3:12:ef:
         a5:ac:60:4c:f5:b3:5f:e2:68:1f:f5:3c:3a:cb:7d:95:e6:a5:
         94:50:0c:d5:a8:eb:20:cc:08:8f:c5:01:d3:96:8d:2d:6b:91:
         dd:84:9c:8a:91:f8:d0:2c:60:e2:cb:ea:40:ac:bb:16:25:b6:
         f6:3a:4a:8b:90:23:4b:f2:31:34:62:72:7d:25:a1:27:00:57:
         f0:76:92:d7:e9:1f:59:35:e5:5e:6d:dc:50:40:e5:ea:19:8c:
         24:53:ff:fd:b4:ee:96:77:1d:bb:43:cc:69:5a:e9:54:e0:6d:
         a3:24:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:54:44 2026 by rpki-client