Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          HG2JyAKtuDd1idyeO88Dyh2uwOT1VXETQaFSl23pQX8=
Subject key identifier:   E0:D9:64:D5:A5:72:E9:19:13:3B:C2:F3:AF:4D:54:FD:22:0D:B0:FA
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       4FF88096ADCB1BCB1DDB9A97DDF20FD31F611095
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
Signing time:             Sun 19 Oct 2025 12:52:20 +0000
ROA not before:           Sun 19 Oct 2025 12:47:20 +0000
ROA not after:            Sun 18 Oct 2026 12:52:20 +0000
asID:                     9304
IP address blocks:        40.27.16.0/24 maxlen: 24
                          40.27.32.0/22 maxlen: 24
                          40.27.76.0/22 maxlen: 24
                          40.27.93.0/24 maxlen: 24
                          40.27.120.0/22 maxlen: 24
                          40.27.192.0/22 maxlen: 24
                          40.27.220.0/24 maxlen: 24
                          40.27.221.0/24 maxlen: 24
                          40.27.222.0/24 maxlen: 24
                          40.27.223.0/24 maxlen: 24
                          40.27.231.0/24 maxlen: 24
                          40.27.240.0/24 maxlen: 24
                          40.27.241.0/24 maxlen: 24
                          40.27.242.0/24 maxlen: 24
                          40.27.248.0/24 maxlen: 24
                          40.27.249.0/24 maxlen: 24
                          40.27.250.0/24 maxlen: 24
                          40.27.251.0/24 maxlen: 24
                          40.27.252.0/24 maxlen: 24
                          40.27.253.0/24 maxlen: 24
                          40.27.254.0/24 maxlen: 24
                          40.27.255.0/24 maxlen: 24
                          40.183.88.0/22 maxlen: 24
                          40.183.150.0/24 maxlen: 24
                          40.183.153.0/24 maxlen: 24
                          40.183.206.0/23 maxlen: 23
                          40.183.224.0/24 maxlen: 24
                          40.183.225.0/24 maxlen: 24
                          40.183.226.0/23 maxlen: 23
                          40.183.228.0/23 maxlen: 24
                          40.183.230.0/24 maxlen: 24
                          40.183.231.0/24 maxlen: 24
                          40.183.232.0/23 maxlen: 24
                          40.183.237.0/24 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/24 maxlen: 24
                          40.183.243.0/24 maxlen: 24
                          40.183.244.0/24 maxlen: 24
                          40.183.245.0/24 maxlen: 24
                          40.183.246.0/24 maxlen: 24
                          40.183.247.0/24 maxlen: 24
                          40.183.252.0/24 maxlen: 24
                          40.223.16.0/24 maxlen: 24
                          40.223.183.0/24 maxlen: 24
                          40.223.189.0/24 maxlen: 24
                          40.223.190.0/24 maxlen: 24
                          40.223.191.0/24 maxlen: 24
                          40.223.192.0/24 maxlen: 24
                          40.223.193.0/24 maxlen: 24
                          40.223.194.0/24 maxlen: 24
                          40.223.240.0/24 maxlen: 24
                          40.223.241.0/24 maxlen: 24
                          40.223.244.0/24 maxlen: 24
                          40.223.245.0/24 maxlen: 24
                          40.223.246.0/24 maxlen: 24
                          40.223.247.0/24 maxlen: 24
                          40.223.248.0/24 maxlen: 24
                          40.223.249.0/24 maxlen: 24
                          40.223.250.0/24 maxlen: 24
                          40.223.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f8:80:96:ad:cb:1b:cb:1d:db:9a:97:dd:f2:0f:d3:1f:61:10:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Oct 19 12:47:20 2025 GMT
            Not After : Oct 18 12:52:20 2026 GMT
        Subject: CN=E0D964D5A572E919133BC2F3AF4D54FD220DB0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:75:e8:37:fe:ac:9e:8b:ee:f6:92:80:a5:66:
                    a1:84:98:95:c2:be:4c:c7:a5:3f:7d:ce:7d:b7:ae:
                    27:43:2f:6c:4c:56:ba:95:dc:73:e4:5b:5c:28:af:
                    bb:eb:0f:0c:83:3f:57:8f:79:29:c7:b4:05:52:54:
                    c3:26:ee:70:21:95:cc:5d:b0:51:3d:42:f3:fc:dc:
                    7e:ec:5e:57:5f:ac:57:aa:d1:74:29:a4:2d:ab:a8:
                    03:dd:22:e6:a2:16:c9:32:6f:f4:35:b6:0b:7a:bf:
                    e1:62:1c:6c:c0:50:73:f7:8b:52:aa:f9:ea:c0:6e:
                    39:fc:7f:ea:4b:0c:3a:e1:31:7f:9c:62:7e:01:45:
                    71:b4:13:d6:75:bd:0e:6e:f7:1a:b3:1a:36:96:2d:
                    7c:d9:dd:a8:3b:65:fa:1e:0b:9f:90:fb:b6:a2:04:
                    46:db:bf:11:a9:3a:7e:4e:ea:90:6a:aa:4d:13:2e:
                    29:43:50:6a:9e:2a:64:55:4d:23:1a:0e:2e:e3:a2:
                    93:28:af:d1:04:ba:ac:ba:5c:75:9d:2a:18:bd:eb:
                    4c:f0:d8:31:a0:7a:ae:b5:4d:1d:b4:d7:a2:f5:2f:
                    82:b2:62:56:0c:b7:d8:69:bc:6b:f9:8e:9a:0f:ca:
                    e7:5f:77:08:cd:6d:1c:fb:35:0c:85:d7:31:e7:da:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D9:64:D5:A5:72:E9:19:13:3B:C2:F3:AF:4D:54:FD:22:0D:B0:FA
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.16.0/24
                  40.27.32.0/22
                  40.27.76.0/22
                  40.27.93.0/24
                  40.27.120.0/22
                  40.27.192.0/22
                  40.27.220.0/22
                  40.27.231.0/24
                  40.27.240.0-40.27.242.255
                  40.27.248.0/21
                  40.183.88.0/22
                  40.183.150.0/24
                  40.183.153.0/24
                  40.183.206.0/23
                  40.183.224.0-40.183.233.255
                  40.183.237.0/24
                  40.183.241.0-40.183.247.255
                  40.183.252.0/24
                  40.223.16.0/24
                  40.223.183.0/24
                  40.223.189.0-40.223.194.255
                  40.223.240.0/23
                  40.223.244.0-40.223.250.255
                  40.223.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:36:17:c0:f4:f8:96:a7:d6:1d:43:46:a5:ba:86:69:22:61:
         30:d6:8a:3e:59:b8:2e:25:2a:e3:2e:c4:70:60:67:13:5b:50:
         6c:83:71:78:90:b2:6a:8d:98:fc:c7:05:22:a2:02:b1:34:c8:
         0f:b3:9d:77:e3:c6:80:29:62:9a:3e:15:58:1e:36:4f:d1:c7:
         d3:42:5a:67:60:a2:50:b3:ba:e1:d1:88:db:89:ff:ae:67:e7:
         e6:6f:f0:00:b6:07:eb:50:c6:4b:54:6f:a7:d7:e2:58:3c:ca:
         d9:c1:52:59:ec:f4:76:3a:1d:39:0b:39:55:37:3e:88:78:87:
         bf:50:aa:7d:e6:c1:d1:a1:e8:06:38:6e:25:81:44:d0:42:22:
         d6:bc:d6:5b:29:7e:5b:44:9f:3a:2e:22:f2:89:82:4b:87:bc:
         a1:93:8b:34:c3:4f:3d:36:c3:7a:16:f7:07:a4:cd:e4:1e:2e:
         d9:95:07:bc:cc:cb:99:7c:60:5f:bb:dc:20:a7:3d:b8:46:d9:
         58:d0:71:45:77:e6:23:c6:53:6e:b6:7a:b5:54:ac:9c:e4:28:
         c4:e0:45:be:c3:d8:cc:66:5d:06:a8:3b:b4:d7:d3:8d:10:d0:
         82:8c:82:3e:ca:9f:f3:30:fb:9e:4f:1b:ba:22:88:1c:31:ef:
         da:99:09:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:34 2025 by rpki-client